Privacy Policy

Last updated: October 23, 2026  ·  Developer: CloudNetix  ·  support@cloudnetix.de

1. About Data Validation Manager

Data Validation Manager is a free Google Sheets add-on developed by CloudNetix. It lists every data validation rule across the tabs of the spreadsheet it is opened in, finds the entries that do not match their rule, copies rules to other tabs, propagates an edited rule from one cell, exports and imports rules as JSON, and deletes rules. All processing runs on Google Apps Script and Google Cloud infrastructure. No spreadsheet content is sent to CloudNetix-controlled servers.

This Privacy Policy describes what Google user data the add-on accesses, how it is used, how long it is retained, and how you can delete it.

2. Data Access

Data Validation Manager accesses Google user data solely to provide its functionality. All data is accessed through Google APIs using the minimum required OAuth scopes: exactly two.

Scope-to-feature mapping:

OAuth Scope	What it permits	How Data Validation Manager uses it
spreadsheets.currentonly	Read and write access to the currently active spreadsheet only	Reads the data validation rules of each tab and, at your request, cell values: to check them against their rule when you click Find invalid entries, or to save the list behind a dropdown from a range when you export it. Writes data validation rules only, when you copy, propagate, import or delete them. Cell values are never written.
script.container.ui	Display UI elements (sidebar, dialogs) inside Google Sheets	Displays the add-on sidebar, dialogs, and menu inside the Google Sheets interface.

Data Validation Manager requests no Google Drive access and cannot see, create, or modify any file other than the spreadsheet it is opened in.

Google Sheets data read:

• Data validation rules: criteria type and values, ranges, the warn/reject setting and help text, read per tab when the sidebar loads that tab
• Cell values, when you click Find invalid entries (to decide whether each value matches its rule; only the cell addresses are shown) and when you export a dropdown that takes its list from a range (the list's values are saved into the exported JSON)
• Sheet names, sizes and hidden state, and the address and rule of the cell you select as the source of Propagate from a cell
• All data is read from the currently active spreadsheet only. The add-on cannot access any other spreadsheet.

Google Sheets data written:

• Data validation rules only, when you copy, propagate, import or delete them. The add-on never writes cell values, never adds tabs, and stores nothing in the spreadsheet.
• Writes happen only when you explicitly trigger an operation in the sidebar.

Exports:

An export is shown in the sidebar as JSON for you to copy. It is not sent anywhere by the add-on. It may contain list values and custom-formula text from the spreadsheet; you decide where you paste it.

Add-on configuration stored in user properties:

• welcomeDismissed: whether you have dismissed the one-time welcome message
• collapsedSheets: which tabs you collapsed in the sidebar's rule list (tab identifiers only)
• Stored in Google Apps Script user properties, scoped to the user and the script. These values describe interface state only and contain no spreadsheet content.

3. Data Usage

This section uses Google's verbatim recommended Limited Use compliance statement and mirrors the Limited Use clauses of both the Google API Services User Data Policy and the Google Workspace API Services User Data and Developer Policy, so the disclosures match Google's published policy text.

Appropriate use case: Data Validation Manager is a productivity application that handles spreadsheet data only via the application's user interface, at the user's request. This matches Google's approved use case for productivity applications.

Purposes for which Google user data is used:

Google user data accessed by Data Validation Manager is used exclusively to provide the user-facing features that are visible and prominent in the add-on's sidebar interface, namely:

• Listing every data validation rule on every tab of the active spreadsheet
• Finding the entries that do not match their rule and jumping to them
• Copying rules to other tabs and propagating an edited rule from one cell
• Exporting rules as JSON and importing them, including the list values saved with a dropdown from a range
• Deleting rules you select
• Remembering your sidebar interface state between sessions
• Diagnosing errors using technical metadata only (no spreadsheet content or user identifiers are recorded)

Limited Use commitments:

Data Validation Manager:

1. Limits its use of data to providing or improving the appropriate use case and user-facing features that are visible and prominent in the requesting application's user interface.
2. Does not transfer Google user data to any third party, except: (a) to provide or improve the appropriate use case or user-facing features visible and prominent in the application's user interface and only with the user's consent; (b) for security purposes (for example, investigating abuse); (c) to comply with applicable laws and/or regulations; or (d) as part of a merger, acquisition, or sale of assets of the developer after obtaining explicit prior consent from the user.
3. Does not allow humans (CloudNetix staff, contractors, or any third party) to read Google user data, unless: (a) we have obtained and documented the user's explicit consent to read specific data; (b) the data (including derivations) is aggregated and anonymised and used for internal operations in accordance with applicable privacy laws; (c) it is necessary for security purposes (for example, investigating abuse); or (d) to comply with applicable laws and/or regulations.
4. Does not transfer or sell Google user data to third parties such as advertising platforms, data brokers, or information resellers.
5. Does not transfer, sell, or use Google user data for serving ads, including retargeting, personalised or interest-based advertising.
6. Does not transfer, sell, or use Google user data to determine credit-worthiness or for lending purposes.
7. Does not transfer, sell, or use Google user data to create, train, or improve any machine learning or artificial intelligence model. Data Validation Manager does not incorporate AI or ML functionality of any kind. (See Section 7 for full AI/ML disclosure.)

Processing location:

Spreadsheet content is processed in memory by Google Apps Script while the sidebar is in use and is not sent to any non-Google server. Everything the add-on stores remains inside Google's infrastructure, under your Google account's access controls. Data Validation Manager does not access any spreadsheet other than the one currently active when you use it. Data Validation Manager does not scrape Google user data, build databases from it, or create permanent copies of it on CloudNetix-controlled systems.

4. Data Sharing

Data Validation Manager does not sell, rent, or share Google user data with any third party. There are no third-party sub-processors of Google user data. All processing occurs within Google's infrastructure:

• Spreadsheet content is processed in memory by Google Apps Script and never leaves Google's infrastructure.
• Operational logs are stored in Google Cloud Logging under CloudNetix's Google Cloud Platform project. These logs contain only technical metadata: event name, timestamp, operation identifier, execution context (such as operation type, counts, durations), and (for errors) error type, error message, stack trace, and a temporary support code. They never contain spreadsheet content, formulas, email addresses, or Google account identifiers.

5. Data Storage & Protection

Data Validation Manager treats all user data securely in transit and at rest, in line with the security requirements of the Google Workspace API Services User Data and Developer Policy.

Data Validation Manager operates no external servers, databases, or object storage. All storage occurs within Google's infrastructure:

• Per-user interface settings are stored in Google Apps Script user properties (PropertiesService.getUserProperties()), scoped to the user and the script, accessible only by the add-on.
• Operational logs are stored in Google Cloud Logging under CloudNetix's Google Cloud Platform project (project ID data-validation-manager), protected by Google Cloud IAM access controls. Access to these logs is restricted to Maher Mahouachi (CloudNetix's developer and operator), and is used only to diagnose errors and operational issues. Logs are retained for up to 30 days.

Transport and at-rest protection:

• All communication between the user's browser, Google Apps Script, Google Sheets, and Google Cloud Logging uses HTTPS (TLS), as enforced by Google's infrastructure.
• User properties stored via Google Apps Script are encrypted at rest by Google.
• Operational logs stored in Google Cloud Logging are encrypted at rest by Google.
• Data Validation Manager does not maintain any OAuth access tokens or refresh tokens of its own. All authorisation flows are handled by Google Apps Script and Google's OAuth system. There are no credentials, tokens, or keys stored outside Google's systems.

Marketing website hosting:

The public marketing website at data-validation-manager.cloudnetix.de (containing this Privacy Policy, the Terms of Service, and product information) is served by Cloudflare Pages over HTTPS. The website does not receive, transmit, or process any Google user data. Cloudflare functions only as the static-site host for marketing pages, and is not a subprocessor of Google user data.

6. Data Retention & Deletion

Retention:

• Per-user interface settings: retained in Google Apps Script user properties while you use the add-on.
• Operational logs: retained for up to 30 days in Google Cloud Logging, then automatically deleted.

How to delete your data:

Data Validation Manager provides a clear deletion path for each category of data. The procedures below cover everything Data Validation Manager interacts with.

How to delete your add-on settings

The stored settings are limited to interface state. They contain no spreadsheet content. They are stored in Google Apps Script user properties tied to your own Google account:

• Uninstall: uninstall Data Validation Manager from Google Sheets. This removes the add-on's authorisation; afterwards it can no longer read or write any settings tied to your account.

For technical context: Apps Script user properties are scoped to (user, script) and are only accessible during your own execution of the add-on. If you ever need help with deletion, contact support@cloudnetix.de and we will guide you through the steps.

How to request deletion of operational log entries

Operational logs are stored in CloudNetix's Google Cloud Logging project (data-validation-manager). To respect your privacy, the only identifier attached to a log entry is a temporary support code generated by Google Apps Script (Session.getTemporaryActiveUserKey()). Per Google's documentation, this support code is anonymous (it does not reveal your identity), unique to your user-script pair within Data Validation Manager, and rotates periodically.

To request deletion of log entries that may relate to you:

1. Locate the support code shown by the add-on at the time of the error you want deleted.
2. Email that support code (and, ideally, the approximate date and time of the error) to support@cloudnetix.de.
3. CloudNetix will delete the matching log entries, provided the support code has not yet rotated (typically rotation occurs within a few weeks).

If you do not have a support code (no error occurred, or your support code has rotated since the error), CloudNetix is happy to assist. Please contact us with whatever details you have. Note that because logs contain no email address, Google account ID, or other personal identifier, locating specific entries without a support code may not be technically possible. In all cases, all operational logs are automatically deleted after 30 days, after which no log data exists.

For any other data-related question, contact support@cloudnetix.de.

7. Artificial Intelligence and Machine Learning

This section mirrors the AI/ML clause of the Google Workspace API Services User Data and Developer Policy, which prohibits "transferring, selling, or using user data to create, train, or improve a machine learning or artificial intelligence model beyond that specific user's personalized model for the appropriate use case or user-facing feature."

Data Validation Manager does not transfer, sell, or use Google user data (including cell values, formulas, sheet metadata, or any other data obtained from Google Workspace APIs) to create, train, or improve any machine learning or artificial intelligence model.

This commitment applies without exception. Data Validation Manager does not incorporate any AI or machine-learning functionality. All analysis is deterministic and rule-based, performed by Google Apps Script while you use the sidebar. There is no personalised AI/ML model, generalised AI/ML model, or any other AI/ML use of Google user data, whether by CloudNetix, by a third party, or by any subprocessor.

Data Validation Manager does not retain Google user data for any AI or ML training purpose. Spreadsheet data read while the sidebar is open is processed in memory by Google Apps Script.

8. Prohibited Uses

Data Validation Manager explicitly does not:

• Sell, rent, transfer, or broker Google user data to any third party
• Use Google user data for targeted advertising, interest-based advertising, or user profiling
• Build or contribute to any database of users or user data derived from Google APIs
• Use spreadsheet content or any Google user data to train AI or ML models
• Store, cache, or transmit spreadsheet content outside of Google's infrastructure
• Collect or store email addresses or Google account identifiers
• Access any spreadsheet other than the one currently active when the add-on runs
• Access Google Drive, or any file other than the spreadsheet it is opened in

9. Logging and Support Diagnostics

Data Validation Manager does not log spreadsheet content, cell values, formulas, email addresses, or Google account identifiers.

When an operation runs or an error occurs, the add-on may record only the following technical metadata in CloudNetix's Google Cloud Logging project: event name, timestamp, operation identifier (a per-operation UUID), execution context (such as operation type, counts, durations), and (for errors) error type, error message, stack trace containing only script function names and line numbers, and a temporary support code.

About the support code: The support code is generated by Session.getTemporaryActiveUserKey(). Per Google's documentation, this key:

• Is unique to the user within Data Validation Manager
• Does not reveal the user's identity
• Rotates periodically

The support code is shown to the user only when an error occurs (so you can include it in a support email). CloudNetix uses it solely to locate the matching log entry when you contact support. Because the code is anonymous and rotates, CloudNetix has no way to associate logs with a specific user without it.

10. Your Choices

You control every change the add-on makes: nothing is written without an explicit action from you. You can stop using the add-on or uninstall it at any time. See Section 6 for the full deletion procedure per data category. For any other data-related requests, contact support@cloudnetix.de.

11. Lawful Basis and Your Rights (EU/UK Users)

Data controller

The data controller for personal data processed by Data Validation Manager is:

• Maher Mahouachi (operating under the trading name CloudNetix)
• Braunschweig, Germany
• Email: support@cloudnetix.de

For the full statutory contact address and other legal disclosures, see our Impressum.

If you are located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) grants you certain rights. Users located in the United Kingdom enjoy equivalent rights under the UK GDPR and the Data Protection Act 2018.

Lawful basis for processing (GDPR Article 6)

CloudNetix processes Google user data on the following lawful bases:

• Article 6(1)(a), consent: when you install Data Validation Manager, authorise the OAuth scopes, and use the sidebar, you give explicit consent for the add-on to access the Google user data listed in Section 2. You may withdraw your consent at any time by uninstalling Data Validation Manager from Google Sheets (Extensions → Add-ons → Manage add-ons). Withdrawal stops future processing; data already stored follows the retention and deletion procedures described in Section 6.
• Article 6(1)(f), legitimate interests: CloudNetix has a legitimate interest in recording minimal technical metadata (event name, timestamp, operation identifier, execution context, error type, error message, and an anonymous support code) for the purpose of detecting and resolving operational errors. This interest is balanced against your privacy by being narrow in scope, excluding spreadsheet content and direct user identifiers, and subject to automatic deletion after 30 days.

Your data protection rights

You have the following rights under the GDPR (and equivalent rights under the UK GDPR). For any request contact support@cloudnetix.de.

• Right of access (Article 15): you have the right to obtain confirmation of whether personal data about you is processed and, if so, a copy of that data. You can email support@cloudnetix.de at any time to request confirmation of what (if any) personal data CloudNetix holds about you, including any operational log entries identifiable by support code.
• Right to rectification (Article 16): the add-on stores no profile data about you; interface settings update themselves as you use the sidebar.
• Right to erasure (Article 17): see Section 6 for the deletion procedure for each data category.
• Right to restrict processing (Article 18): you decide which operations run; you can stop using the add-on at any time.
• Right to data portability (Article 20): your spreadsheet stays in your own Google account, where Google Sheets lets you download it in standard formats.
• Right to object (Article 21): you have the right to object, on grounds relating to your particular situation, to processing of operational metadata carried out under Article 6(1)(f) (legitimate interests) for error diagnosis. To exercise this right, email support@cloudnetix.de. You can also stop all processing immediately by uninstalling Data Validation Manager.
• Right to withdraw consent (Article 7(3)): you may withdraw your consent at any time by uninstalling Data Validation Manager. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority for the data controller (operating from Lower Saxony, Germany) is:

• Der Landesbeauftragte für den Datenschutz Niedersachsen
• Postal address: Postfach 221, 30002 Hannover, Germany
• Visitor address: Prinzenstraße 5, 30159 Hannover, Germany
• Telephone: 0511 120-4500
• Email: poststelle@lfd.niedersachsen.de
• Website: www.lfd.niedersachsen.de

You may also lodge a complaint with the supervisory authority of the EEA member state where you reside or where the alleged infringement occurred. A list of EEA supervisory authorities is published by the European Data Protection Board at edpb.europa.eu. Users in the United Kingdom may lodge a complaint with the Information Commissioner's Office (ico.org.uk).

Personal data breach notification

If a personal data breach occurs in relation to Data Validation Manager, CloudNetix will comply with its notification obligations under Articles 33 and 34 of the GDPR, including notification to the competent supervisory authority and, where applicable, to affected users.

International data transfers

All Google user data processed by Data Validation Manager remains within Google's own infrastructure. Data Validation Manager does not initiate any transfer of Google user data outside Google's infrastructure. Any cross-border data transfer that may occur as part of Google's operation of its services is governed by Google's own privacy and data-transfer policies, published at policies.google.com/privacy.

Automated decision-making

Data Validation Manager performs automated rule-based processing of your spreadsheet only at your request. This processing does not produce legal effects concerning you and does not constitute automated decision-making within the meaning of Article 22 GDPR. No profiling is performed.

Children

Data Validation Manager is intended for adult professional and educational use. The add-on is not directed at children under 16, and CloudNetix does not knowingly collect or process personal data from children under 16. If you become aware that a child under 16 has used Data Validation Manager, please contact support@cloudnetix.de. CloudNetix will delete any associated data within its control and will provide guidance for deleting any data held in the user's own Google account.

12. Cookies on the Marketing Website

The Data Validation Manager add-on (the sidebar inside Google Sheets) does not set or read any cookies on your device. The disclosures below relate solely to the public marketing website at data-validation-manager.cloudnetix.de.

The marketing website is hosted on Cloudflare Pages. Depending on your browser, your network, and which Cloudflare features are active during your visit, Cloudflare may set one or more cookies that Cloudflare describes as necessary to operate its security and content-delivery services. The two cookies most likely to appear in connection with this site are:

• __cf_bm: set by Cloudflare to support its Bot Management and Bot Fight Mode services. Per Cloudflare's documentation, this cookie expires after 30 minutes of continuous inactivity by the end user.
• cf_clearance: set by Cloudflare only after a security challenge has been solved. It stores proof that the challenge was passed.

Cloudflare may also set additional cookies in connection with specific security, rate-limiting, or always-online features. Cloudflare publishes the complete and current list (with purposes and lifetimes) in its Cloudflare cookies reference.

You can check which cookies, if any, are currently set on your device by opening your browser's developer tools (Application → Cookies) while viewing the marketing website.

These cookies are described by Cloudflare as necessary to operate its security and content-delivery services. They are not used for analytics, advertising, behavioural profiling, or cross-site tracking. The marketing website does not load Google Analytics, Google Tag Manager, advertising pixels, social-media trackers, embedded videos, or any other third-party analytics or marketing scripts.

You can clear or block cookies at any time through your browser settings. Doing so may affect the security checks performed by Cloudflare on the marketing website but will not affect your use of the Data Validation Manager add-on inside Google Sheets.

This disclosure is provided in line with § 25 TDDDG, the EU ePrivacy Directive, and Article 13 of the GDPR.

13. Changes To This Policy

This Privacy Policy may be updated from time to time. The latest version will always be published at this URL.

14. Contact

For questions about this Privacy Policy, contact support@cloudnetix.de.