NotifyLane — Privacy Policy
The short version: NotifyLane runs inside your own Google account. It reads only the form you use it in, emails each new response from your own account to the people you chose, and sends nothing to BiLingoPlus servers. It keeps no copy of your responses. The one outside service it talks to is Paddle, our payment provider, and only to check a Pro subscription. No ads, no selling of data, no AI processing of your data.
This policy is about the NotifyLane add-on for Google Forms™. The web pages describing it, on bilingoplus.com, are measured with Google Analytics like the rest of the site: see the website privacy policy. Nothing from the add-on, your forms or your responses is sent to Google Analytics.
Where NotifyLane runs
NotifyLane is a Google Apps Script add-on. Its code runs on Google’s servers under your Google account, the same way a script you wrote yourself would. When a response arrives, the email is built and sent by Google’s own services, from your account, the way Gmail™ sends any email you write. BiLingoPlus runs no server that your responses pass through, and we never receive a copy of them.
What it reads
- Only the form you use it in. NotifyLane uses Google’s “current form only” permission (
forms.currentonly). It cannot open, list or read your other forms or any other Drive file. From that form it reads the questions (to show them in the panel and to build rules and subjects) and the responses. - Responses, only at the moment of sending. When a new response arrives, NotifyLane reads it to build the email and sends it. Send me a test reads the latest response the same way. The answers are not stored anywhere by NotifyLane and are not sent anywhere except in the emails you set up.
- Your Google account email address (
userinfo.email), to match a Pro subscription to your account and to show you which account sends the emails.
NotifyLane does not read your mailbox. Its email permission (script.send_mail) lets it send email as you; it cannot open, list or search the emails in your Gmail.
What it sends
- Notification emails, from your own Google account, to the addresses in Who gets new responses and, with Pro, to the addresses in your routing rules. Each email holds the answers of one response and links to that response and to the response sheet.
- Confirmation emails (Pro, if you turn them on), from your own Google account to the person who filled in the form, with your subject and message and, if you choose, a copy of their answers. Their address comes from Google’s “collect email addresses” setting or from the question you pick.
Every email goes out through Google’s mail service under your account and counts toward Google’s daily limit for your account. It carries one small grey line saying it was sent by NotifyLane from your own Google account, and nothing else from us.
What it stores
- The setup, inside the form. Who gets new responses, the subject, the options, the routing rules, the confirmation subject and message, whether notifications are on and which account sends them are saved as document properties of that form, visible only to NotifyLane. It stays with the form: everyone who opens NotifyLane in it sees the same setup, and it is deleted when the form is.
- A short log, inside the form. The last 15 sends: the time, how many people were emailed, which rules matched and any error or note. It holds no answers. With it, the form keeps a count of responses that could not be emailed today because Google’s daily limit was used up.
- Small per-user settings, in your own Google account (Apps Script user properties): whether Pro is active and when that was last checked; the email used to verify Pro (your Google account email, or the checkout email you typed); when you last opened checkout, so Pro can switch on by itself after payment; your time zone, to show times in the panel; counters for when to ask for a review; and the date and number of today’s Pro activation attempts.
- A Pro seat record. So that one subscription cannot be activated on many Google accounts, NotifyLane keeps a pairing of the checkout email with the Google account that activated it. It holds only SHA-256 hashes of the two addresses, never the addresses themselves.
- A form-submit trigger in the account that turned notifications on (
script.scriptapp). It runs NotifyLane when a response arrives, while you are not in the form.
NotifyLane keeps no copy of your responses anywhere. They stay in the form, and in the emails you set up.
Third parties
The only call NotifyLane makes outside Google is to Paddle, our payment provider and Merchant of Record, to check whether the email used for Pro has an active NotifyLane subscription. It sends that email address, and nothing from your forms or responses. The check runs when you press Activate Pro, when the panel opens in the days after you opened checkout, and then about every three days while Pro is active. Checkout itself happens on Paddle’s pages; NotifyLane never sees your card details. Paddle’s privacy policy applies to the checkout.
We do not sell, rent or share your data, we show no ads, and we do not use your data for AI, machine learning or any other processing beyond the emails you asked for.
Permissions
forms.currentonly: see and manage only the form you use NotifyLane in. It cannot see your other forms.script.send_mail: send the notification emails as you. It cannot read your mailbox.script.container.ui: show the NotifyLane panel.script.scriptapp: run when a response arrives while you are away.script.external_request: check a Pro licence with Paddle.userinfo.email: your email address, to match a licence and to show which account sends the emails.
Google API Services User Data Policy
NotifyLane’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. Its use of data from Google Workspace APIs also follows the Google Workspace API User Data and Developer Policy.
- Google user data is used only to send the emails you set up in the panel.
- It is not transferred to anyone, except to the recipients you chose in those emails and to Paddle as described above, and not used for advertising.
- It is not used to create, train or improve any AI or machine-learning model.
- No one at BiLingoPlus reads your forms or responses.
Technical logs
Google Apps Script keeps technical logs for us in Google Cloud Logging, so that we can see when NotifyLane breaks. A send writes one line with numbers only: how many people were emailed, how many rules matched and whether Pro was active. When Google’s daily limit stops a send, the line says how many emails were left and needed. Errors are logged with their error message. These lines do not contain your answers, and we use them only to fix problems.
Security
All requests NotifyLane makes, to Google and to Paddle, use HTTPS. Your settings are stored in Google’s own storage for the form and for your account, protected by your Google account’s security. Payment data is handled by Paddle and never reaches NotifyLane or BiLingoPlus.
Deleting your data
- Erase my data, at the bottom of the NotifyLane panel, deletes the settings NotifyLane keeps for your account (including the Pro status and checkout email) and removes your trigger for this form. If the emails go out from your account, they stop. Today’s count of activation attempts stays until the next day, so activation cannot be retried without limit. Your responses are not touched.
- Turn off and forget this form stops the emails and removes NotifyLane’s setup and log from the form. Your responses are not touched.
- The setup saved in a form is part of that form and is deleted with it.
- Uninstall NotifyLane from your apps in Google Workspace™ Marketplace (in a form: the puzzle-piece icon → Get add-ons) and remove its access at myaccount.google.com/connections to cut it off from your account.
- To remove the Pro seat record, or for anything else, write to info@bilingoplus.com.
Changes
If NotifyLane changes how it handles data, this policy will be updated before that version is published, and the date above will change.
Contact
NotifyLane is operated by, and the data controller is, BiLingoPlus LLC, a Wyoming limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, USA · info@bilingoplus.com
Google Forms™, Gmail™ and Google Workspace™ are trademarks of Google LLC. NotifyLane is an independent product and is not endorsed by or affiliated with Google.