Legal

Privacy Policy

Effective date: August 8, 2026

1. Introduction

Signup Sheets for Gmail is a Google Workspace add-on and web app that lets you create signup sheets directly from Gmail, collect participant signups, and manage rosters. This Privacy Policy explains what information we collect and how we use and protect it. It covers the Gmail add-on, our website, your organizer dashboard, and the public signup pages that participants use to sign up.

The service is operated by Very Big Machine (verybigmachine.com). If you have any questions, contact us at support@verybigmachine.com.

2. Information we collect

We collect only what we need to run the service:

Organizer account information. When you sign in with Google, we receive your email address and basic profile information (such as your name) so we can create your account and show it in your dashboard.
Sheets you create. The content you enter when building a signup sheet — titles, slots, dates, locations, and any custom questions you add.
Participant submissions. The information people enter when they sign up for your sheet, such as their name, email address, quantity, comments, and answers to your custom questions. Participants do not need an account to sign up.
Basic technical and log data. Standard information such as IP address, browser type, and request timestamps, used for reliability, security, and abuse prevention.

3. Google user data and OAuth scopes

To provide the service, the add-on requests a limited set of Google OAuth scopes. We request the narrowest scopes that make the app work, and each is used only for the purpose described below:

gmail.addons.execute and gmail.addons.current.action.compose — to run the add-on inside Gmail and insert your signup sheet into the Gmail compose window. The app does not read, store, or transmit the content of your emails.
openid, userinfo.email, and profile — to identify your account and show your email in the dashboard.
script.external_request — to let the add-on communicate with our backend so it can save your sheets.
drive.file — requested only when you click "Export to Google Sheets." It lets the app create a new spreadsheet in your Google Drive containing your sheet's signups. This is a per-file scope: the app can only access the files it creates and cannot see any of your other Drive files.

4. How we use data

We use the information above to provide and operate the service — to create sheets, collect signups, send confirmations and reminders, show rosters to organizers, and generate exports. We do not use it for advertising, and we show no ads anywhere in the product, including on participant signup pages.

5. Limited Use disclosure

Signup Sheets for Gmail's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we do not sell Google user data, we do not use it for advertising, and we do not transfer it to others except as necessary to provide or improve the app, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with equivalent protections in place.

6. Sharing and subprocessors

We do not sell personal data. To operate the service, we rely on a small number of trusted subprocessors:

Google Cloud / Firebase — hosting, database, and authentication. Data is stored in the United States.
Stripe — payment processing for the Pro and School & Team plans.
Resend — sending transactional and reminder emails.

Participant data is visible only to the organizer of the sheet and any co-organizers they add.

7. Data retention and deletion

We keep your data until you delete the relevant sheet or ask us to delete your account or data. To request deletion, email support@verybigmachine.com. Copies of data in routine backups expire on a rolling basis.

8. Security

We protect your data with encryption in transit, access controls, and a secured backend through which all data changes are made. No system is perfectly secure, but we work to protect your information using industry-standard safeguards.

9. Children

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page.

11. Contact

Questions about this policy or your data? Email us at support@verybigmachine.com.