Privacy Policy – Pullrow
Last updated: October 24, 2026 · Operator: Han Chang (張瀚), Taiwan · support@formchime.com
Effective date: 2026-10-24
Pullrow ("the add-on") is a Google Sheets™ add-on. It copies your time entries from Toggl Track into a Google Sheets spreadsheet you choose. It is not made by or affiliated with Toggl OÜ or Google LLC.
1. Summary
- The add-on itself sends no data to our servers. Its code runs on Google's Apps Script infrastructure under your Google account. Data goes from Toggl's API to your spreadsheet through Google's servers.
- We do not receive, store, sell, or share your Toggl data, your API token, or the contents of your spreadsheet. What we do receive (only if you buy Pro or write to us) is listed in section 5.
- There are no ads, no analytics, and no tracking.
2. What data the add-on handles, and where it stays
| Data | Where it comes from | Where it is kept | Who can read it |
|---|---|---|---|
| Your Toggl API token | You paste it in the sidebar | Google Apps Script User Properties, stored by Google for your Google account and this add-on only | Only the add-on, when it runs as you. It is never shown again, never logged, and never sent anywhere except Toggl's API |
| Toggl workspaces (id, name) | Toggl API | Shown in the sidebar only; the selected workspace id is saved in the import settings (below) | You |
| Time entries: date, duration (hours), description, project, client, tags, billable flag, billable amount | Toggl Reports API | Only the columns you choose, written to a sheet the add-on creates in your spreadsheet (default name "Toggl Data") | Anyone you share the spreadsheet with |
| Other fields Toggl includes in the response (for example user name, user email, hourly rate, currency) | Toggl Reports API | Not stored. Processed in memory only while the import runs, then discarded | — |
| Projects, clients, tags lists (names, ids) | Toggl API, only if needed to fill in names | In memory during the import only | — |
| Import settings: workspace id, date range, chosen columns, import progress, ids of the sheets the add-on created, date of last import | The add-on | Google Apps Script Document Properties of that spreadsheet. No token or time-entry content is stored there | The add-on, when run by any editor of that spreadsheet |
| The time zone in your Toggl profile | Toggl API (/me; only the timezone field is used, the rest of the response, which includes your email and other profile fields, is discarded and not stored) |
Saved with the import progress in Document Properties (a zone name such as "Asia/Taipei") | The add-on |
| Trial start time | The add-on, the first time you open it | Your User Properties (a single timestamp) | Only the add-on; used to count the 14-day trial |
| Your Google account locale and the spreadsheet time zone | Not stored; used to pick the interface language and the date of each entry | — |
The add-on reads Toggl data one way only. It never creates, changes or deletes anything in your Toggl account.
3. Google permissions (OAuth scopes) and why each is needed
| Scope | Why |
|---|---|
https://www.googleapis.com/auth/spreadsheets.currentonly |
Read and write only the spreadsheet in which you use the add-on: create the "Toggl Data" and report sheets and write the imported rows. No access to your other files. |
https://www.googleapis.com/auth/script.external_request |
Connect to Toggl's API (api.track.toggl.com) to read your workspaces and time entries. For Pro, also to check a license key with Polar (section 5). |
https://www.googleapis.com/auth/script.container.ui |
Show the add-on's sidebar and menu inside Google Sheets. |
https://www.googleapis.com/auth/script.scriptapp |
Create and remove the optional hourly trigger that runs the automatic daily update (Pro) and continues long imports (Pro). |
The add-on has no access to your Gmail, Google Drive files, contacts or calendar.
4. Google API Services User Data Policy – Limited Use
The use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: - Google user data is used only to provide the add-on's features that you can see in its interface. - It is not transferred to anyone, except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you. - It is not used to serve advertisements, including retargeting or personalized ads. - No human reads it, unless you ask us to (for example in a support request and with your consent), or it is needed for security purposes or to comply with law. - It is not used to develop, improve, or train generalized AI or machine-learning models.
5. Payments, license checks and the data we receive
- Checkout. When you buy Pro, you first pass through our checkout server at formchime.com (hosted by Cloudflare). It only uses the country code that Cloudflare provides to decide whether the plan can be sold in your country; it does not store your IP address (see section 7 for the one exception for refunded orders from Japan). It then sends you to Polar's checkout page.
- Payment. Payments are processed by Polar Software, Inc. (polar.sh) as merchant of record. Polar collects your name, email, billing address, payment details and IP address (to determine country and tax) and handles them under its own privacy policy. We never receive full card numbers.
- IP address at checkout. At checkout, we provide your IP address to Polar, our payment platform, to determine your region, calculate tax and prevent fraud.
- What we receive from Polar: your email, plan, license key and subscription status, used to provide the license, support and billing.
- License check. The add-on sends only your license key and our organization id, from Google's servers to Polar, to confirm it is valid. The result is cached in your User Properties and removed by "Delete my settings". Spreadsheet content and Toggl data are never sent to Polar.
- Region check. Each time the sidebar opens, it asks formchime.com/api/region whether Pro can be offered in your region. That server (on Cloudflare) sees your IP address and the country Cloudflare derives from it, answers with the country code only, and stores nothing.
- Support email. If you write to support@formchime.com, we receive your email address and the contents of your message.
- Pro is not available in Japan or in countries where Polar does not operate. Orders from these regions are refused at checkout or automatically refunded.
6. Sharing and sale
We do not sell or rent your data, and we do not use it for advertising. Data moves only between your Google account, Google's infrastructure and Toggl, plus Polar for Pro purchases and license checks, as described above.
7. Retention and deletion
- Delete my settings: the sidebar's "Delete my settings" button (More section, with a confirmation step) removes your Toggl API token and any license data from User Properties. It also removes your automatic-update trigger for this spreadsheet and clears all of the add-on's settings and import progress stored in this spreadsheet's Document Properties. It does not delete any sheets, including "Toggl Data" and the report sheets; delete those yourself if you want.
- Disconnect: the sidebar's "Disconnect" button deletes your Toggl API token from User Properties immediately. You can also reset the token in your Toggl profile, which makes the old one useless everywhere.
- Imported data: this lives in your spreadsheet. Delete the "Toggl Data" and report sheets (or the spreadsheet) at any time.
- Automatic update: turn off "Update daily" in the sidebar to remove the trigger.
- Uninstall: uninstall the add-on in Google Sheets (Extensions → Add-ons → Manage add-ons) and remove its access at https://myaccount.google.com/permissions. Use "Delete my settings" first to clear a spreadsheet's import settings; otherwise they (no token, no time-entry data) remain with that spreadsheet until it is deleted.
- Trial start time: recorded the first time you open the add-on, to count the 14-day trial. It is stored in the add-on's User Properties in your own Google account, not on our side, and stays there until you remove the add-on or revoke its access. To prevent repeated trials, "Delete my settings" does not delete it. It is only a timestamp with no other data. A second flag (
trialEndSeen) is stored the same way after the sidebar has shown the "trial ended" notice, so it is shown only once; it is kept and removed under the same rules. - Data we hold: payment data, order records and license keys are held by Polar, which retains them as required by law; we keep no separate database of them. For orders from Japan that are automatically refunded, our checkout server keeps only the order ID, country and time (no personal data) for 400 days. Support emails are kept for 24 months after our last exchange and then deleted. We hold no copy of your Toggl data or spreadsheet.
8. Security
- Connections to Toggl and Google use HTTPS.
- Your token is kept in Google's per-user property store and is never written into the spreadsheet or into logs. Error logging is disabled in the add-on.
- Anyone who can edit a spreadsheet can see the imported data in it. Share spreadsheets carefully.
9. Children and minors
The add-on is meant for business use and is not directed to children under 13. If you are a minor under the law of your country, use it only with the consent of your parent or legal guardian.
10. International processing
Your data is processed by Google (Apps Script, Sheets) and Toggl in the locations they use, and, for Pro purchases, by Polar in the United States. See Toggl's privacy policy for how Toggl handles your data.
11. Changes
We will post changes on this page and update the date above. Significant changes will be announced in the add-on.
12. Contact
support@formchime.com
13. Notice under Taiwan's Personal Data Protection Act
The collector is the operator named above. Purpose: providing the add-on, license checks and customer service (specific purpose codes 069 contractual relations and 090 consumer and customer management). Categories: email, license key and subscription status (provided by Polar), and the contents of support messages. Period: support emails for 24 months after our last exchange; email, license key and order records are retained by Polar as required by law (see section 7); for automatically refunded orders from Japan, the order ID, country and time for 400 days. Area: Taiwan, the United States (Polar), and the locations used by Google and Toggl. Recipients: Polar, Google, Toggl. Under Article 3 of the Act you may ask to query or review your data, receive a copy, supplement or correct it, stop its collection, processing or use, or delete it, by writing to support@formchime.com. If you do not provide this data, you cannot buy or use the Pro features.
Google Sheets is a trademark of Google LLC. Toggl and Toggl Track are trademarks of Toggl OÜ.