FleetSet — Privacy Policy
Effective {{EFFECTIVE_DATE}}
FleetSet is a Google Sheets add-on for small trucking fleets, published by {{LEGAL_NAME}}, {{ENTITY_TYPE}}, of {{ADDRESS}}. In this policy "we" and "us" mean {{LEGAL_NAME}}, and "you" means the person or business using the add-on.
Questions about anything here: {{SUPPORT_EMAIL}}.
The short version
Your loads, rates, drivers, trucks, expenses and dollar figures never leave your spreadsheet. They are not sent to us, we do not store them, and we could not show them to anyone if we were asked to, because we never receive them.
FleetSet does its arithmetic inside your own Google Sheet and builds your PDFs inside your own browser. Our server exists for one purpose: to know whether your subscription is paid. What it receives is listed in full below and it is a short list.
We say this plainly because of who we are. FleetSet is built by a carrier, and its customers are other carriers. "We cannot see your rates" is only worth anything if it is literally true, so the product is built so that it is.
What the add-on can access
When you install FleetSet, Google asks you to grant three permissions. These are the only three, and adding a fourth would require Google to re-review the add-on.
See, edit, create and delete only the specific Google Sheets file you use this add-on with (spreadsheets.currentonly)
This is how FleetSet reads your loads and writes your reports. The word that matters is only: this permission does not give the add-on access to your Google Drive, to your other spreadsheets, or to any file you have not opened it in. It cannot list your files. It cannot see a spreadsheet you closed.
Display and run third-party web content in prompts and sidebars inside Google applications (script.container.ui)
This is the FleetSet panel down the side of your sheet. It is how you enter a load or press a button.
Connect to an external service (script.external_request)
This is the one and only permission that lets FleetSet talk to anything outside your spreadsheet, and it is used for exactly one thing: asking our licence server whether your subscription is active. Everything that crosses that connection is listed in the next section.
What actually leaves your spreadsheet
This is the complete list. There is nothing else, and there is one place in the code that is allowed to make an outbound request at all — if a new field were ever added to it, this section would have to change in the same edit.
Every time (a few times a day at most)
| What | Why | Example |
|---|---|---|
| A one-way fingerprint of your spreadsheet's file ID | So we know which workbook a subscription belongs to | 3f9a2c… (64 characters) |
| The add-on version | So support knows which build you are running | 0.4.0 |
| The workbook layout version | So we can tell you if your tabs need updating | 1 |
The fingerprint deserves a sentence of its own. Your spreadsheet's real file ID is never sent to us. It is converted, inside the add-on and before any request is made, into a fixed-length code that cannot be turned back into the original. So the raw ID does not exist in our database, in our server logs, or in a crash report. What we hold is a code that matches your file and identifies nothing about it — not its name, not its contents, not its owner.
When you subscribe or change plan
| What | Why |
|---|---|
| The truck band you selected (4, 7 or 10) | It decides which price you are charged |
| A one-time random code | It is what tells us, when Stripe confirms your payment, which spreadsheet was paid for |
| Your activation code, if you are moving your licence to a new spreadsheet | To move it |
Note what is not here: how many trucks you actually run. You choose a band; we never learn whether you have three trucks or nine. The add-on counts your trucks locally, on your own machine, and compares that against the limit inside your own licence. That number is never transmitted.
Only when you press "Send a problem report"
Nothing in this section is ever sent automatically. It goes only when you click the button, and it contains:
- Which FleetSet tabs exist in your workbook (yes/no for each — not what is in them)
- How many rows are on your
Loads,ExpensesandAdjustmentstabs - Four of your settings: your week start day, which load statuses you pay on, whether you date statements by delivery or pickup, and your default cost destination
- A shortened description of an error, if one occurred, with all numbers removed and cut to 200 characters
The row counts are the one thing on this page that says anything about the size of your business, and they are here because "the loads tab has 4,000 rows" is frequently the answer to a support question. Your Trucks and Drivers tabs are deliberately not counted, because those counts are your fleet size and your head count.
What never leaves, under any circumstances
Load IDs, rates, miles, brokers, origins, destinations, pickup and delivery dates, driver names, pay rates, pay models, truck unit numbers, plates, VINs, expense amounts, vendors, categories, charges, refunds, escrow balances, settlements, your company name, your address, your dispatch fee, and every dollar figure anywhere in your workbook.
Your PDFs are built inside your own browser and are never uploaded anywhere. When you save a driver statement, it goes from your browser to your downloads folder and touches nothing of ours on the way.
What we store
On our own server (Cloudflare, in North America) we hold one small record per customer:
- Your email address, as you gave it to Stripe when you subscribed
- Your Stripe customer and subscription identifiers
- Your plan, its status, and the dates it renews or ends
- The spreadsheet fingerprint described above, with the date it was bound and the date it was last seen
- Your activation code, and how many times you have moved your licence
- A log of subscription changes — subscribed, renewed, payment failed, cancelled — so a support question about what happened in March has an answer
- Any problem reports you have sent
That is the whole of it. If our database were lost tomorrow, it would be rebuilt from Stripe and from customers re-entering their activation codes, and no customer would lose a single row of their own data — because their data was never in it.
Payments
Payments are processed by Stripe. We never see, receive or store your card number. Stripe is the payment processor and holds your billing details under its own privacy policy.
Your subscription is managed through Stripe's own billing portal, which you reach from inside the add-on.
We send transactional email only: a welcome message with your activation code, and notices about your subscription such as a failed payment. These are sent through Resend.
We do not send marketing email and we do not sell, rent or share your email address with anyone.
Google API Services — Limited Use disclosure
FleetSet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, and in the terms that policy uses: we do not transfer Google user data to third parties except as necessary to provide or improve the add-on; we do not use it for advertising; we do not use it to build profiles or for any purpose unrelated to the add-on's features; and no human at {{LEGAL_NAME}} reads your Google user data, except with your explicit permission for a support request you have raised, or where required by law.
In practice this commitment is easy for us to keep, because as described above your spreadsheet's contents are never transmitted to us at all.
Who else is involved
Three service providers, and no others:
| Provider | What they do | What they hold |
|---|---|---|
| Cloudflare | Runs our licence server and database | The record described under "What we store" |
| Stripe | Processes payments | Your billing details, name, email and payment history |
| Resend | Delivers our transactional email | Your email address and the messages we send you |
We do not use analytics, advertising networks, session recording, or third-party trackers of any kind. The add-on's panel loads no external scripts, fonts or images — everything it needs is inside the add-on itself.
How long we keep it
- Subscription and account records: while your subscription is active, and for seven years afterwards, because payment records have tax and accounting retention requirements.
- Problem reports: twelve months.
- Spreadsheet fingerprints: until you cancel, then deleted with the account.
You can ask us to delete your account data by writing to {{SUPPORT_EMAIL}}. We will do it within 30 days, except for the billing records we are required to keep. Deleting your account does not touch your spreadsheet — that has always been yours, it stays in your Google Drive, and every row remains readable and exportable with or without FleetSet installed.
Your rights
Depending on where you live you may have the right to ask what we hold about you, correct it, delete it, or receive a copy. Write to {{SUPPORT_EMAIL}} and we will answer within 30 days. There is no charge.
If you are in California, note that we do not sell or share personal information as those terms are defined under the CCPA, and we have not done so in the past twelve months.
Security
Everything travels over HTTPS. Our server holds no spreadsheet contents to protect, which is the strongest security measure in the product and the reason it is built the way it is.
We will not pretend to a certification we do not hold. FleetSet is a small product, it has not been through a third-party security audit, and if that matters to your business you should know it before you subscribe rather than after.
If you believe you have found a security problem, please write to {{SUPPORT_EMAIL}} before disclosing it publicly, and we will respond.
Changes to this policy
If we change it, we will update the date at the top and, where the change is material, tell you inside the add-on before it takes effect. Continuing to use FleetSet after a change means you accept it.
Contact
{{LEGAL_NAME}} {{ADDRESS}} {{SUPPORT_EMAIL}}