Privacy Policy
Last updated: 18 April 2026
Pennysal (“we”, “us”) is a Google Workspace add-on published by Linno Tech. This policy explains what data the add-on accesses, where it goes, and what we as the publisher can and cannot see.
1. Where Pennysal runs
Pennysal runs entirely inside your own Google account using Google Apps Script. We do not operate a backend server that processes your order data. All execution happens under your Google identity, on Google's infrastructure.
2. Data the add-on accesses
- Google Sheets — the spreadsheet you install Pennysal in. We use the
spreadsheets.currentonlyscope where possible, which limits access to that one file. - Gmail — to create drafts, send emails, read order receipts when the email-poll mode is enabled, and apply the
OrderProcessedlabel. We do not read unrelated mail. - External APIs — TidyCal and OpenSign are called to generate booking links and contracts using the keys you supply.
- Stripe webhook payloads — order metadata (customer name, email, phone, product, amount) is parsed and stored in your spreadsheet.
3. What Linno Tech can see
Nothing automatically. Pennysal does not transmit your order data, email content, or API keys to Linno Tech. If you opt in to support and share logs with us, we only see what you explicitly send.
4. Storage of secrets
API keys (Stripe webhook secret, TidyCal API key, OpenSign API key) are stored in Google Apps Script's Script Properties, which are encrypted at rest by Google. They are never written to the spreadsheet.
5. Data retention
Order rows, email queue entries, and logs remain in your spreadsheet until you delete them. Uninstalling Pennysal does not remove data from your Sheets or Gmail.
6. Sub-processors
Pennysal relies on Google (Apps Script, Sheets, Gmail), Stripe, TidyCal and OpenSign. Each has its own privacy policy.
7. Your rights
Because all data stays under your Google account, you can export, edit or delete it at any time directly in Sheets and Gmail.
8. Contact
Questions? Email info@linno-tech.com.