Privacy policy

This page describes data processing by the Univermag add-on for Google Sheets™. The add-on retrieves reports through marketplace APIs and writes them into your spreadsheet.

Contact

Univermag · support@univermag.app

Spreadsheets and API credentials

The add-on uses the current Google spreadsheet to write and format reports and to read sheets for derived reports and features you select. Marketplace API credentials, settings, history and saved progress are stored in Google Apps Script. Credentials are stored per user; information about the current execution is also stored at spreadsheet level.

Exported reports remain in your spreadsheet. Reviews and questions may contain buyer text and names returned by the marketplace; Avito reviews may also include a vehicle VIN, and Yandex Market orders may include a free-text order comment. Spreadsheet access and subsequent sharing are controlled by your Google spreadsheet settings.

Personal Apps Script storage also holds AI keys, selected models, request and token counts, data-sharing consents, notification settings and recipients, webhook secrets, delivery logs, a rating with its comment and short AI summaries. The add-on does not apply additional encryption to stored credentials. Avito issues a temporary token in exchange for the application credentials you enter; it is also stored here and renewed according to its expiry. A temporary Google cache holds sidebar data and request limits; your browser stores the theme and accent color.

A separate Webhook journal sheet in your spreadsheet stores delivery metadata, error messages and webhook request bodies for inspection and replay. A body may contain spreadsheet and sheet names and links, as well as errors. A body longer than 45,000 characters is replaced with an oversize marker. Access to this sheet follows spreadsheet access.

Google permissions

Installation requests six permissions: spreadsheets.currentonly to read and modify the current spreadsheet; script.external_request for requests to marketplaces, Google Analytics, the feedback form, connected AI and webhooks; script.scriptapp to create and delete schedules and automatic continuation triggers; script.container.ui for menus, the sidebar and dialogs inside Sheets; script.send_mail to send scheduled export results to your chosen recipients when notifications are enabled; and userinfo.email to retrieve your email for notification settings and, with your separate permission, attach it to feedback. The permission to send email does not grant access to read your mailbox.

Telemetry

The add-on sends Google Analytics 4 events for report runs, errors, sidebar opens, ratings, feedback submissions, feature use, onboarding steps and performance measurements. A randomly generated identifier is stored in your add-on settings and links events across sessions. It contains no name or email and does not guarantee complete anonymity. Events include technical parameters such as report type, row count, duration, error category and HTTP status, rating and feedback length. These events do not include feedback text, spreadsheet contents, email or API credentials. The add-on has no setting to disable this telemetry.

A separate interface error event has 4 technical fields: the build fingerprint, screen, action and error code. It uses the same random identifier. Collection is limited to 10 events per user in each 60-second window. It excludes exception messages, stack traces, URLs, input values, credentials and spreadsheet contents. This collection is currently disabled.

Feedback and support

Feedback submitted from the add-on, including its rating and text, is sent to a Univermag Google Form. Your email is attached only when you allow us to contact you. A support email contains information you choose to include. Do not send API credentials or unnecessary buyer data.

AI

AI features use your key. Sheet analysis sends the sheet name, report and period information, column headings and notes, statistics from a sample of up to 5,000 visible rows, up to four frequent values per text column and up to 12 sample rows with values capped at 80 characters. These data may include names, reviews and other personal or business information; they are not fully anonymized. Dashboard recommendations send calculated metrics and product IDs with the highest return totals, including during scheduled updates. Analysis results are written to the spreadsheet, with a short summary in personal Apps Script storage.

Sending data requires separate explicit consent for sheet analysis and for recommendations, tied to the current recipient. Grant or revoke each permission using the switches in Settings → AI; analysis launched from the menu also offers a confirmation dialog. Changing a function's provider or deleting its serving connection revokes that function's consent. Disabling recommendations also revokes their consent. Revocation blocks new runs, including scheduled ones; it does not cancel a request already started or delete data already sent.

Sheet data may be sent only to OpenAI, Anthropic, Qwen (Alibaba Cloud), GLM (Z.ai), YandexGPT and OpenRouter. Gemini, DeepSeek, Kimi, MiniMax and custom servers support key checks using a static request without spreadsheet data; both AI features using sheet data are blocked for them. YandexGPT requests include the logging opt-out flag x-data-logging-enabled: false; OpenRouter requests include provider.data_collection: deny, restricting eligible processors by data use. The add-on cannot inspect data collection settings in your provider account: do not enable sharing data for model training. Providers may retain requests under their security and retention policies; a training restriction does not mean that no data is stored.

Notifications

When notifications are enabled, scheduled export results are sent to your chosen recipients through Google MailApp and to webhooks you configure. Webhooks can also be sent using test and retry commands. Messages contain spreadsheet and sheet names and links, report names, row counts, statuses, error messages and sheet change information. Cell rows are not included, but error messages or sheet names may contain your data. Consider this when choosing recipients.

External services

Requests go to the APIs of selected marketplaces: Wildberries, Ozon, Yandex Market and Avito; telemetry and feedback go to Google services. Custom reports allow requests only to approved Wildberries hosts, with output fields selected by you. AI uses the eligible providers listed above; you set the webhook address. The add-on sidebar also loads fonts from Google servers. External services have their own data processing policies.

Google Apps Script execution logs store technical diagnostics: response codes, URLs with identifiers masked and limited excerpts of error messages. Unparsed responses resembling API data are logged by length instead of content; gateway or proxy page text may be logged. Automatic logging of unhandled exceptions is also enabled. Log access and retention depend on Google project settings.

Retention and deletion

On writes, export history is trimmed to 30 entries, the short email dispatch and webhook delivery logs in personal Apps Script storage to 10 entries each, and the full Webhook journal sheet to 2,000 entries excluding its header row. These are entry-count limits, not retention periods. Personal storage size limits may shorten history further.

The cleanup windows of 33 days for daily totals and per-store counts, and 17 days for per-report counts and latest errors, apply only when the corresponding data is next written. For example, old errors are removed when another error is recorded; reading them does not check their age. There is no separate expiry-based deletion: without new writes, data may remain longer, until a reset. Credentials and settings have no automatic deletion period and remain until deleted, replaced or reset.

You can remove a marketplace account in settings. A reset deletes the add-on's personal properties, including settings, credentials, AI consents and saved history, clears related caches and attempts to delete triggers. It does not delete spreadsheet sheets: reports, AI results and the full Webhook journal sheet remain until modified or manually deleted in the spreadsheet. Uninstalling does not replace a reset; you can revoke Google access in your Google Account settings. Contact support to request deletion of feedback or a support request. A reset does not erase data already sent to Google Analytics or other external services; their policies govern retention and deletion.

Google API Services User Data Policy

Data obtained through Google APIs is used for the add-on features described on this page. We do not sell it or use it for advertising. We do not use Google Workspace APIs or data obtained through them to develop, improve or train non-personalized artificial intelligence or machine learning models, or transfer data for these purposes. We may read information you send to support or through the feedback form and technical diagnostics to troubleshoot failures. Use and transfer of Google data adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

Google API Services User Data Policy · Google Workspace API User Data and Developer Policy