Crystord: Privacy Policy

Introduction

Aleutheris operates two Crystord products: the Crystord Google Workspace Add-on (the "Add-on"), which synchronises data between Google Sheets™ and Google Slides™, and the Crystord web application at app.crystord.com (the "App"), which provides account management and access control for the Crystord platform. This privacy policy explains how information is collected, used, and protected across both products.

Products Covered by This Policy

• Google Workspace Add-on: Installed from the Google Workspace Marketplace and runs within Google Slides™. Accesses Google Sheets™ and Slides™ data in your Google account to perform synchronisation.
• Crystord Web Application (app.crystord.com): A web-based platform for signing in to your Crystord account. Collects account credentials to authenticate users.

Data Collection and Access

Google Workspace Add-on

When you use the Add-on, it accesses the following Google user data:

• Google Sheets™ content: Read access to the specific spreadsheets you select as data sources for synchronisation.
• Google Slides™ content: Read and write access to the specific presentations you are editing, to identify and replace placeholder variables.

These permissions are limited to the files you explicitly connect and are required solely to perform the synchronisation function.

Crystord Web Application

When you sign in to the Crystord App, the following information is processed:

• Email address and password: Submitted at sign-in to authenticate your account. Passwords are never stored in plain text.
• Session token: Issued after successful authentication to maintain your signed-in session. Stored only in your browser for the duration of your session.

The App does not collect browsing behaviour, location data, or device identifiers beyond what is necessary for authentication.

Data Usage

Crystord's use of data adheres to the following principles:

• Add-on data: Google Sheets™ and Slides™ content is accessed solely to perform the synchronisation you request and to display your spreadsheet data within the add-on sidebar so you can select what to sync. It is not retained, analysed for commercial purposes, or shared with third parties.
• App account data: Your email address is used to identify your account. It is not used for marketing without your explicit consent.
• No profiling: We do not build profiles of user behaviour or preferences from either product.
• No AI training: Your data is not used to train machine learning or artificial intelligence models.

Crystord's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use Requirements.

Data Sharing

We do not sell, trade, or transfer your personal data to third parties. Data is shared only in the following limited circumstances:

• Google APIs: Add-on operations call Google Sheets™ and Slides™ APIs as required by the synchronisation function. No other external services receive your document data.
• Legal obligation: We may disclose information if required by law or to protect the rights and safety of users.

Data Storage and Protection

• Add-on — no external storage: Google Sheets™ and Slides™ content is never stored on Aleutheris servers. All document data resides within your Google account and Drive.
• App — account data: Account credentials are stored securely on Crystord platform infrastructure. Passwords are stored using a one-way cryptographic hash. Session tokens are short-lived and invalidated on sign-out.
• Transport security: All communication between your browser, the App, and Google services uses HTTPS encryption.
• Apps Script infrastructure: The Add-on runs within Google Apps Script, which benefits from Google's security and compliance infrastructure.

Exception Logging

Both the Add-on and the App use technical logging for error detection and reliability improvements. The Add-on uses Google Cloud Logging for exception logging. Logs record error types, timestamps, and operational context. They do not include the content of your Google documents or your account password. Exception logs are retained for up to 30 days and then automatically deleted.

User Controls

• Add-on permissions: You can revoke the Add-on's access to your Google account at any time via myaccount.google.com/permissions. Revoking access immediately stops all document data access.
• Add-on uninstall: Uninstalling the Add-on removes all associated Google account permissions.
• App account: You may contact us to request deletion of your Crystord account and associated data at any time.

Data Retention and Deletion

Add-on

• No Google document content is retained after a synchronisation session completes. All processing occurs transiently within Google's infrastructure.
• Configuration data (such as selected Sheet IDs) is stored in your Slides™ file properties within your Google account, not on external servers.

Web Application

• Account data is retained for as long as your account remains active.
• You may request deletion of your account and all associated data by contacting us at info@aleutheris.com. Requests are processed within 30 days.
• Exception logs are deleted after 30 days.

Compliance

Crystord's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use Requirements. Data is used only to provide the features you request and is never used for advertising, profiling, or purposes not disclosed in this policy.

Changes to This Policy

This policy may be updated when product features change or legal requirements evolve. Material changes will be announced on this page with an updated revision date. Continued use of either product after a policy update constitutes acceptance of the revised terms.

Contact

For questions or requests regarding this privacy policy or your personal data, contact Aleutheris at info@aleutheris.com.