Privacy policy

1. Who we are

CalGantt (the Google Sheets add-on and the website calgantt.com) is published by a private individual based in France (see the legal notice). In this policy, “we” means the publisher of CalGantt.

Contact for any privacy question: [email protected].

2. Google data CalGantt uses, and why

When you install CalGantt, Google asks you to allow these permissions. CalGantt uses each one only for the purpose below, and only while you use it.

Permission	What CalGantt does with it
View and manage the spreadsheet where CalGantt is installed spreadsheets.currentonly	Keeps CalGantt’s working tabs in the open spreadsheet (see section 3) and creates an export or templates tab when you ask. It cannot open any other file in your Google Drive.
Display content in Google apps script.container.ui	Shows the CalGantt menu and window inside Google Sheets.
See the list of your calendars calendar.calendarlist.readonly	Lists your calendars (name, color, whether you can edit them) so you can choose which ones to show.
View and edit events on your calendars calendar.events	Reads the events of the calendars you chose, to draw them. Creates, moves, changes, marks as done or deletes an event only when you do it in CalGantt. When you create a deadline, it adds a pop-up reminder; all-day tasks are marked “free” so they do not block your schedule.
Create, edit and delete your tasks tasks	Reads the names of your task lists and the tasks of the lists you chose. Creates, changes, moves or deletes a task only when you do it in CalGantt.
See your primary email address userinfo.email	Checks that a license key belongs to your account (or to your company domain), and gives your tabs and settings a short code derived from your address, so that each person’s data stays apart in a shared spreadsheet. CalGantt never sends your address anywhere, except to Stripe’s payment page if you click a Buy button (section 5).

CalGantt has no permission to connect to outside services, so it cannot send your data to us or to anyone else. It cannot read your email, your contacts or your other files.

3. What CalGantt saves, and where

Everything CalGantt saves stays in your Google account:

• In your Google Calendar events: the category at the start of the title, between brackets, and private event fields (Google “extended properties”, not shown in Google Calendar) with the planning details: status, type, whether it is a task, priority, estimate, people, blocked state, dependencies, parent task and baseline dates. If you turn on “Write the state in Google Calendar titles” in Calendars and settings, the status, type, priority, estimate, people and blocked state are written in the title instead.
• In Google Tasks: Google Tasks has no private fields, so the category and state are written in the task title (for example “[Design] Mock-ups !! @Ana”), and for a task that lasts several days, its start date is written in the notes (“Start: yyyy-mm-dd”).
• In the spreadsheet, in hidden tabs (one set per person, named GanttData_…, GanttLog_…, GanttHabits_…): a copy of the events and tasks shown (calendar and event IDs, calendar name and color, title, dates, category, status, priority, estimate, people, dependencies, and the description shortened to 400 characters), the list of your last changes so that you can undo them (up to 800), and your habit check-ins. For meetings with guests, the description is not copied (unless you mark the meeting as a task) and only the number of guests is kept, never their addresses. Note that the ID of your main calendar is your email address.
• In the spreadsheet settings (document properties): your choices (calendars to show, options, category colors) and technical sync data, saved under your code.
• Tabs you create on purpose: “Gantt export” (a visible copy of your plan) and “Gantt templates”, only when you use these features.
• In your Google account’s storage for CalGantt (user properties): your language, the start date of your trial and your license key.
• In your browser (local storage): display preferences, such as open panels, zoom and collapsed groups, and which messages you have closed.

4. What we receive

We receive no data from your use of the add-on. There are only three exceptions:

• Error reports. When the add-on crashes, Google Apps Script records the error message and the place in the code in our Google Cloud project. The message can sometimes contain a technical identifier, such as a calendar ID or your email address. We use these reports only to fix bugs, and they are deleted automatically after 30 days.
• Install statistics. Google shows us the total number of installs. It does not tell us who you are.
• What you send us yourself: your emails to support and, if you buy a plan, the purchase details (section 5).

5. Purchases

Payments are handled by Stripe, which receives your name, email address and card details under its own privacy policy. We never see your card number. We receive your email address, the plan and the amount, to create your license key and send it to you by email. Invoices are kept for 10 years, as French accounting law requires.

6. Emails to support

Messages sent to [email protected] are forwarded by Cloudflare Email Routing to a mailbox hosted by Google. We keep them as long as needed to answer you, and at most 3 years after our last exchange.

7. The website calgantt.com

The website is hosted by Cloudflare Pages. It sets no cookies, shows no ads and has no tracking. We use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. Cloudflare processes technical data such as your IP address to deliver and protect the website.

8. Google API Services User Data Policy

CalGantt’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular: we do not transfer Google user data to third parties, except your email address to Stripe when you choose to buy; we do not use it for advertising; no person reads it, except error messages read only to fix bugs; and we do not use it to develop, improve or train generalized artificial intelligence or machine learning models.

9. Legal bases

Under the GDPR, we rely on: the contract, to provide the add-on you installed and the plan you bought; our legitimate interest, for error reports, security and visit counts; and our legal obligations, for invoices.

10. Your choices and your rights

• Remove CalGantt’s data from a spreadsheet: in CalGantt, open “Calendars and settings” and click “Remove my data from this spreadsheet”. Your three hidden tabs and your settings in this spreadsheet are deleted. The “Gantt export” and “Gantt templates” tabs are deleted like any other tab. Your language, trial date and license key stay with your account, so that the trial is not restarted.
• Events and tasks: they stay in Google Calendar and Google Tasks. The private planning fields are not shown in Google Calendar and are deleted with the event; the category and state written in titles can be edited like any text.
• Uninstall: in Google Sheets, Extensions → Add-ons → Manage add-ons → CalGantt → Uninstall.
• Remove access: at myaccount.google.com/permissions, choose CalGantt and remove its access.
• Your rights: you can ask to access, correct or delete the data we hold about you (support emails and purchases), to limit its use, to object to it or to get a copy. Write to [email protected]; we answer within one month. You can also complain to the French data protection authority, the CNIL (www.cnil.fr).

11. How long data is kept, and security

What CalGantt saves in your Google account stays there until you remove it as described above. Uninstalling CalGantt or removing its access stops it from reading or writing anything, but deletes nothing. Your data is protected by the security of your Google account; we recommend 2-step verification. As we keep no copy of your planning, there is no database of ours that could leak.

12. Transfers outside the EU

Google, Cloudflare and Stripe may process data in the United States. They rely on the EU-U.S. Data Privacy Framework and on the European Commission’s standard contractual clauses.

13. Children

CalGantt is not intended for children under 15.

14. Changes

If this policy changes, we update the date at the top of this page. Important changes are also announced in the add-on.