Privacy policy

This policy explains how the CiviCRM Connect Gmail add-on (“the add-on”), published by Third Sector Design (“we”), accesses, uses, shares, protects, retains and deletes Google user data.

Summary

The add-on connects Gmail to your own CiviCRM site. Google user data goes only from Gmail to the CiviCRM site you connect. We don’t run a server for the add-on, and we don’t collect, store, sell or share your Google user data.

Google user data the add-on accesses

The add-on requests these Google OAuth scopes and accesses only the data listed. Scope Google user data accessed are

• gmail.addons.current.message.readonly – The email you have open: sender, recipients (To, Cc, Bcc), subject, date, plain-text body and Message-ID header. Only while you have that email open with the add-on.
• gmail.addons.execute – Lets the add-on run inside Gmail. No data on its own. The userinfo.email is your Google account email address.
• script.locale – Your language and time zone settings.
• script.external_request – No Google user data on its own. Lets the add-on connect to the CiviCRM site you choose.

The add-on can’t read any email other than the one you have open, and it can’t send, change or delete email. It doesn’t access your contacts, calendar, Drive or any other Google data.

How the add-on uses Google user data

• The open email: to show its sender, recipients, date and a short preview in the add-on, to look up the people on it in your CiviCRM, and when you ask to add a person to CiviCRM or record the email as an activity.
• Your email address: to leave you out of the list of people on the email.
• Your locale and time zone: to show the email’s date in your time zone.

Google user data is used only to provide these features to you. It isn’t used for advertising, profiling, or to train AI or machine-learning models.

Who Google user data is shared with

The add-on transfers Google user data to one place only: the CiviCRM site whose URL you paste in, and only for these actions:

• When you open an email: the email addresses of the people on it and its Message-ID, so the add-on can show who is already in CiviCRM and whether the email is already recorded.
• When you click Add: that person’s name and email address, to create a contact.
• When you click Record this email: the subject, plain-text body, sender, recipients and Message-ID, to create an activity.

That CiviCRM site is chosen and controlled by you or your organization, not by us. Once data reaches it, the organization that runs that site controls it, under its own privacy policy.

We don’t sell, rent, transfer or disclose Google user data to anyone else, including Third Sector Design, advertisers, data brokers or other third parties. No person at Third Sector Design can read your Google user data.

How Google user data is protected

• The add-on runs on Google Apps Script, inside Google’s infrastructure. There is no Third Sector Design server that receives your data.
• Data is sent to your CiviCRM site only over HTTPS (encrypted in transit). The add-on refuses URLs that don’t start with https://, and it can only connect to the domains listed in its manifest.
• Requests to CiviCRM are authenticated with your personal access token, sent in a request header. Each token belongs to one CiviCRM user and only works for the Gmail Connect actions that user has permission for. You can revoke it at any time by regenerating it in CiviCRM.
• Your settings are kept in Google Apps Script user properties, which only the add-on, running as you, can read. Google encrypts this storage at rest.
• The add-on asks for the narrowest Gmail scope that works: read-only access to the one email you have open.

Retention and deletion of Google user data

• Email content (subject, body, recipients) is not stored by the add-on. It is read from Gmail each time you open an email and is discarded when the add-on card closes.
• Your email address, locale and time zone are not stored.
• Your settings (your CiviCRM URL with its access token, the site address and your CiviCRM display name) are kept in Google Apps Script user properties until you click Disconnect under Settings, which deletes them immediately.
• Error logs: if the add-on hits an unexpected error, Google Apps Script records the error message in our Google Cloud project’s logs. These messages may include the address of your CiviCRM site, but never email content. Google Cloud Logging deletes them automatically after its default retention period (30 days). They are used only to fix bugs.
• Data in CiviCRM: contacts and activities you create are stored on your CiviCRM site, not by us. To delete them, delete them in CiviCRM or contact whoever runs your CiviCRM site.

To ask us to delete anything we hold, email info@thirdsectordesign.org.

Removing access

• Click Disconnect under Settings in the add-on to delete your stored settings.
• Regenerate your URL in CiviCRM (Contacts >> Gmail Connect) so the old token stops working.
• Uninstall the add-on, or remove its access at myaccount.google.com/permissions.

Google API Services User Data Policy

CiviCRM Connect’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Changes

If we change this policy, we’ll update the date at the bottom of this page.

Contact

Third Sector Design, info@thirdsectordesign.org, or GitLab Issues.

Terms of service

These terms apply to the CiviCRM Connect Gmail add-on (“the add-on”), published by Third Sector Design (“we”). By installing or using the add-on, you accept them.

The service

The add-on connects Gmail to a CiviCRM site that you or your organization runs. It’s provided free of charge.

Your responsibilities

• Only connect CiviCRM sites you’re allowed to use, and keep your personal Gmail Connect URL private. Anyone who has it can act in CiviCRM as you.
• You and your organization are responsible for the data you record in CiviCRM, including having a lawful basis to record other people’s contact details and emails.
• Don’t use the add-on to break the law or to send, collect or store data you aren’t allowed to.

Your data

How the add-on handles data is described in the privacy policy.

No warranty

The add-on is provided “as is”, without warranty of any kind. We don’t guarantee it will be available, error-free or compatible with every CiviCRM site.

Limitation of liability

As far as the law allows, we aren’t liable for any indirect, incidental or consequential loss, or for loss of data, arising from your use of the add-on.

Open source

The add-on’s source code is available at lab.civicrm.org/extensions/civicrmconnect under the GNU Affero General Public License v3.0. That licence, not these terms, covers your use of the source code.

Changes and termination

We may change these terms or stop offering the add-on. If we change the terms, we’ll update the date at the top of this page. You can stop using the add-on at any time by uninstalling it.

Contact

Third Sector Design, info@thirdsectordesign.org, or GitLab Issues.

Support

For help with CiviCRM Connect, email info@thirdsectordesign.org.

You can also report bugs or ask questions on GitLab Issues.