Privacy policy

Last updated: 1 October 2026

1. Controller

Arminas Attas
Vėtrungių g. 73-71
LT-06327 Vilnius
Lithuania
Email: zemishyrius@gmail.com

2. In short

The add-on reads only the spreadsheet in which you open it, and only when you use it.
The invoice files are made in your browser. Your invoice data is not sent to us. We run no server of our own for the add-on.
To check a licence, your licence key is sent to our payment provider Polar.

3. What is processed and why

3.1 Content of the open spreadsheet

When you click "Check" or "Create e-invoice" in the sidebar, the add-on reads the invoice sheet of the open spreadsheet (your company, the customer, line items, amounts). When you choose "Create template", it writes a new sheet into that spreadsheet. Google's servers pass the data to your browser, where it is turned into XRechnung and a ZUGFeRD PDF. You save the files yourself. We do not receive this data. Legal basis: Art. 6(1)(b) GDPR (providing the add-on).

Permissions: the add-on asks for only two Google permissions: access to the open spreadsheet (not to other files) and showing the sidebar.

3.2 Counter and licence status in your Google account

The add-on stores in its user settings in your Google account: how many free e-invoices you created, the total number and the time of the last one, your licence key, and the result and time of the last licence check. Google holds this data; we cannot see it. You can remove the licence key in the sidebar at any time. Legal basis: Art. 6(1)(b) GDPR.

3.3 Licence check with Polar

When you enter a licence key, and after that at most once a day, your browser sends the licence key and our merchant identifier to Polar's interface (api.polar.sh). Polar answers whether the key is valid. Polar technically sees your IP address. Legal basis: Art. 6(1)(b) GDPR.

3.4 Purchases through Polar

Purchases are handled by Polar. Polar is the seller to you (merchant of record), collects the payment data and remits VAT. Polar's privacy policy applies: polar.sh/legal/privacy (Polar Software Inc., 3500 South DuPont Highway, Dover, DE 19901, USA). We receive purchase details from Polar (for example name, email address, product, amount, country) to handle licences and questions. Legal basis: Art. 6(1)(b) and (c) GDPR.

3.5 Program libraries loaded from jsDelivr

To make the files, the sidebar loads three open source libraries (@e-invoice-eu/core, pdf-lib, fontkit) from jsDelivr (cdn.jsdelivr.net). Your browser sends technically necessary data such as IP address and browser identifier to jsDelivr. The files are pinned by checksums, so only exactly the tested version runs. No invoice data is transferred. Legal basis: Art. 6(1)(f) GDPR (reliable and fast delivery). jsDelivr privacy information: jsdelivr.com.

3.6 Error logs

If an error occurs in the add-on, a technical error message is stored in the log of our Google Cloud project (Google Cloud Logging) so we can fix it. We do not deliberately include invoice content, but error messages can in rare cases contain fragments of input. Logs are deleted after 30 days. Legal basis: Art. 6(1)(f) GDPR (operation and troubleshooting).

3.7 Contact by email

If you write to us, we process your message and contact details to answer. Legal basis: Art. 6(1)(b) or (f) GDPR. We delete messages when they are no longer needed, at the latest when legal retention periods end.

4. Google

The add-on runs on Google's platform (Google Workspace, Apps Script). Google's terms and privacy policy apply to Google's processing. The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell data, do not use it for advertising and do not share it with third parties except as described above.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on Art. 6(1)(f) GDPR. Write to zemishyrius@gmail.com. You can also complain to a data protection supervisory authority, for example the one responsible for us: the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), Vilnius, Lithuania, vdai.lrv.lt.

6. Changes

If the add-on changes, we update this policy. The version published here applies.