Privacy Policy

Last updated: October 24, 2026.

ChronoSheet ("we", "our", or "us") is operated by Yadun Know (sole proprietor), Toronto, Ontario, Canada. Contact: support@getchronosheet.com.

1. What Google User Data ChronoSheet Accesses

When you connect your Google account in the ChronoSheet Chrome extension, we request a single read-only OAuth 2.0 scope:

• https://www.googleapis.com/auth/calendar.readonly – used solely to read your Google Calendar events (event titles, descriptions, start/end times, attendance status, and color IDs) for the date range you select in the extension.

ChronoSheet never modifies, creates, or deletes any calendar events.

2. How Your Data Is Processed and Stored

• 100% Local Calendar Processing: Your Google Calendar events are fetched directly from Google's API (`googleapis.com`) into your Chrome browser memory. All rule matching, duration calculations, and CSV/PDF report generation happen locally on your device. We never transmit, log, or store your calendar events on our servers.
• Browser Storage: Your client rules, hourly rates, currency preferences, and license key are saved locally in Chrome extension storage (`chrome.storage.local`) on your computer.
• License Verification & Billing Data: When you purchase ChronoSheet Pro, Stripe collects your payment details and provides us with your email address, Stripe customer ID, and subscription status. We store a license record in Cloudflare KV linked to your license key (`LK-...`) solely to verify whether your Pro subscription is active when the extension calls GET /v1/license.

3. Google API Services User Data Policy – Limited Use Disclosure

ChronoSheet's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We only use Google user data to provide the user-facing calendar-to-timesheet reporting features you initiate inside the extension.
• We do not transfer or sell Google user data to third parties, advertising networks, data brokers, or AI/ML model training pipelines.
• No human at ChronoSheet can read your Google Calendar data because it remains inside your local browser session and is never sent to our servers.

4. Third-Party Services

• Google LLC: OAuth 2.0 authentication and Google Calendar API (read-only).
• Stripe, Inc.: Subscription checkout and billing portal. We never see or store your credit card numbers.
• Cloudflare, Inc.: Hosts our static website and lightweight license verification Worker.

5. Data Retention and Deletion

Uninstalling the ChronoSheet Chrome extension immediately deletes all locally stored rules and settings from your browser. You can revoke ChronoSheet's Google OAuth access at any time from your Google Account Permissions page. Subscription and license records are retained while your subscription is active and as required for Canadian tax and accounting compliance. To request access to or deletion of your billing/license record, email support@getchronosheet.com.

6. Your Privacy Rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws, you may request access to, correction of, or deletion of your personal information by contacting support@getchronosheet.com.