← ShareLane

ShareLane — Privacy Policy

The short version: ShareLane runs inside your own Google account. It reads the tab you choose to share and writes copies of it into your own Google Drive™, shared with the people you name. Nothing from your spreadsheets is sent to BiLingoPlus. The one outside service it talks to is Paddle, our payment provider, and only to check a Pro subscription. No ads, no selling of data, no AI processing of your data.

This policy is about the ShareLane add-on for Google Sheets™, which gives each person a view-only copy of only their rows, or of one tab, of a spreadsheet. The web pages describing it, on bilingoplus.com, are measured with Google Analytics like the rest of the site: see the website privacy policy. Nothing from the add-on or your spreadsheets is sent to Google Analytics.

Where ShareLane runs

ShareLane is a Google Apps Script™ add-on. Its code runs on Google’s servers under your Google account, the same way a script you wrote yourself would. It reads your spreadsheet through Google’s own services, creates and shares the copies through the Google Drive™ API under your account, and Google Drive sends its usual “shared with you” email. BiLingoPlus runs no server that your spreadsheet data passes through, and we never receive a copy of it.

What it reads

• The tab of a share (spreadsheets): its cell values, number formats and column widths, up to 10,000 rows, each time you preview or update the share. Row 1, the column names, is also read to fill the share editor. When you press List the names, ShareLane reads the different values of the column you chose, to fill the name → email table.
• Your spreadsheet’s name, tab names and time zone, to name the copies and their folder, and to time automatic updates.
• The copies ShareLane made (drive.file): whether each one still exists or is in the trash, and who it is shared with, to update them and never make duplicates. This permission reaches only files ShareLane itself created; ShareLane cannot see or open any other file in your Drive.
• Your Google account email address (userinfo.email), to match a Pro subscription to your account and to write “Shared from <you>” in each copy.

Google’s screen words the spreadsheet permission as “See, edit, create and delete all your Google Sheets spreadsheets”. ShareLane needs it, instead of Google’s “current spreadsheet only” permission, because it writes into the copies it made and because automatic updates (Pro) run from a timer while the spreadsheet is closed. Google does not narrow the permission further; ShareLane’s own code does: it opens the spreadsheet you set it up in and the copies it made, and no other spreadsheet. ShareLane does not read your email or your contacts.

What it writes, and who it shares with

• Copies in your Google Drive™. One spreadsheet per person (by rows), or one shared copy (whole tab), in a folder of your Drive called “ShareLane — <spreadsheet name>”. Each copy holds a first row saying who shared it and when it was updated, the header row, and only the rows meant for that person (with Pro, only the columns you ticked). Formulas arrive as their results. You own these files.
• Access. ShareLane asks Google Drive to give each person you named view access (with Pro, comment access) to their copy, and to remove that access when they are no longer in the share or when you press Stop sharing. Nobody gets edit access. With Turn off download, print and copy for them (on by default), Google Drive hides those options from them.
• Google Drive’s sharing email. The first time a person gets access to a copy, Google Drive emails them, with your note if you wrote one.
• The log tab (Pro, optional). If you switch it on, a ShareLane log tab in your spreadsheet lists each update and each access change: the time, the share, the person’s email and what happened. It is an ordinary tab of your spreadsheet and keeps about the last 1,000 lines.

Your data goes only between your spreadsheet, your Drive and the people you chose, through Google’s own services. Whole tab shares put one copy in front of everyone on the list, so they may see who else it is shared with; use By rows when people must not see each other.

What it stores

• The setup, inside the spreadsheet. Each share’s settings (name, tab, the column that says whose row it is, the name → email table, the list of people for a whole tab, the chosen columns, access, the note for Google’s email, the schedule) and its last result, warnings and errors, plus the time zone and log setting. It is saved as hidden developer metadata of that spreadsheet, visible only to ShareLane. It stays with the spreadsheet until you delete the share; a copy of the spreadsheet carries it too.
• Small per-user records, in your own Google account (Apps Script user properties): for each share, which copy belongs to which email address, the Drive access given and its ID, a short fingerprint of what was last written (to skip copies that did not change), and the time and last error per person; the ID of the Drive folder; automatic-update bookkeeping (which spreadsheets have automatic shares, when the hourly check last ran, spreadsheets it could not open); whether Pro is active, when that was last checked and the email used to verify it; and when you last opened checkout, so Pro can switch on by itself after payment.
• On each copy (Drive app properties, which only ShareLane reads): the share’s ID, a short code computed from the person’s email address (not the address itself) and the first 24 characters of your spreadsheet’s ID, so ShareLane can find its own copies again and never makes duplicates.
• A Pro seat record. So that one subscription cannot be activated on many Google accounts, ShareLane keeps a pairing of the checkout email with the Google account that activated it. It holds only SHA-256 hashes of the two addresses, never the addresses themselves.
• One hourly trigger (Pro) in your account (script.scriptapp). It updates the shares that are due while you are away.

ShareLane keeps no copy of your spreadsheet data anywhere except in your own spreadsheet and in the copies it made in your own Drive.

Third parties

The only call ShareLane makes outside Google is to Paddle, our payment provider and Merchant of Record, to check whether the email used for Pro has an active ShareLane subscription. It sends that email address (the one you bought with, or your Google account email), and nothing from your spreadsheets. Checkout itself happens on Paddle’s pages; ShareLane never sees your card details. Paddle’s privacy policy applies to the checkout.

Google runs ShareLane, stores your spreadsheets and the copies, and sends the sharing emails; Google’s privacy policy applies to those services. The people you share with are people you chose. We do not sell, rent or share your data, we show no ads, and we do not use your data for AI, machine learning or any other processing beyond the shares you set up.

Permissions

• spreadsheets: read the tab you share and write each person’s copy, also during automatic updates when the files are closed. Google words it as all your spreadsheets; ShareLane opens only the spreadsheet you set it up in and the copies it made.
• drive.file: create the copies and their folder, and give or remove access to them. It reaches only files ShareLane created.
• script.external_request: the Google Drive API calls above, and the Pro licence check with Paddle.
• script.scriptapp: the one hourly timer for automatic updates (Pro).
• script.container.ui: show the ShareLane panel and menu.
• userinfo.email: your email address, to match a licence and for the “Shared from” line in the copies.

ShareLane has no full Google Drive permission, no permission to send or read Gmail™, and none of its permissions is a “restricted” Google permission.

Google API Services User Data Policy

ShareLane’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. Its use of data from Google Workspace APIs also follows the Google Workspace API User Data and Developer Policy.

• Google user data, including the contents of your spreadsheets, is used only to make and update the shares you set up in the panel.
• It is not transferred to anyone, except in the copies shared with the people you chose and to Paddle as described above, and not used for advertising.
• It is not used to create, train or improve any AI or machine-learning model.
• No one at BiLingoPlus reads your spreadsheets, unless you ask us to and agree to it for a support request, or where it is needed for security or to comply with the law.

Technical logs

Google Apps Script keeps technical logs for us in Google Cloud Logging, so that we can see when ShareLane breaks. A run writes how it went: how many copies were written, shared or had access removed, Google Drive’s HTTP status codes, and errors with their error message. These lines do not contain the contents of your cells, and we use them only to fix problems.

Security

All requests ShareLane makes, to Google and to Paddle, use HTTPS. Your settings are stored in Google’s own storage for the spreadsheet and for your account, protected by your Google account’s security. Payment data is handled by Paddle and never reaches ShareLane or BiLingoPlus.

Deleting your data

• Stop sharing on a share removes everyone’s access to its copies at once. The copies stay in your Drive folder; delete them there if you want them gone.
• Delete on a share, once nobody has access, removes its setup from the spreadsheet and ShareLane’s records of its copies from your account.
• Erase my data (at the bottom of the panel) deletes what ShareLane keeps for your account, listed above, including the Pro status and checkout email, and stops its timer. It does not remove anyone’s access and does not delete copies: press Stop sharing first if you want access removed.
• The ShareLane log tab is part of your spreadsheet: delete it like any other tab.
• Uninstall ShareLane from your apps in Google Workspace™ Marketplace (in a spreadsheet: Extensions → Add-ons → Manage add-ons) and remove its access at myaccount.google.com/connections to cut it off from your account.
• To remove the Pro seat record, to have licence records erased at Paddle, or for anything else, write to info@bilingoplus.com. We answer within 30 days.

Children

ShareLane is not directed to children under 13 and does not knowingly collect their data. A teacher who shares grades decides what each student sees; a student’s address is used only to share their copy.

Changes

If ShareLane changes how it handles data, this policy will be updated before that version is published, and the date above will change. Material changes are also noted in the changelog.

Contact

ShareLane is operated by, and the data controller is, BiLingoPlus LLC, a Wyoming limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, USA · info@bilingoplus.com

Google Sheets™, Google Drive™, Gmail™, Google Apps Script™ and Google Workspace™ are trademarks of Google LLC. ShareLane is an independent product and is not endorsed by or affiliated with Google.