Whole Minds Reports Privacy Policy
Last Updated: August 29, 2025
This Privacy Policy explains how the Whole Minds Reports add-on (“Add-on”) handles information. We designed the Add-on so your settings and files stay in your Google account.
Information We Collect and Store
The Add-on stores only the settings and files you choose to save, using Google’s PropertiesService and a dedicated folder in your Google Drive. These remain in your Google account; we (the developers) do not receive or access your content.
Saved items may include:
- User Information: Your name, credentials, supervisor’s name/credentials.
- Custom Content: School list, custom report heading, custom introductory text.
- Uploaded Files: Logo, signature image, and an optional results image saved in a folder named “Whole Minds Reports Add-on Files.”
How We Use Information
We use your saved information only to generate and format reports inside Google Docs as you direct (e.g., populate headers/signature blocks and insert your saved images). We do not transmit or share your data outside Google Workspace services. Processing occurs within your Google account; nothing is sent to non-Google servers. Google for Developers
Scopes, Access, and Google’s “Limited Use”
We request only the minimum OAuth scopes required for visible, user-facing features (listed in the Add-on sidebar/About page and on our website). We do not sell data, serve ads, allow human reading of your content, or use data to train generalized AI/ML models. We adhere to Google’s API “Limited Use” and Workspace user-data policies. Google for Developers+1
Security and Logging
- We don’t log report content. Operational logs (if any) are limited to non-content metadata (e.g., timestamps, error codes) for reliability.
- Google encrypts data at rest and in transit within Workspace. You can revoke the Add-on’s access anytime in your Google Account’s third-party access settings. Google for Developers
- Support: Never email live student/client data. If you share materials for troubleshooting, de-identify them first.
Data Retention and Deletion
All saved data remains in your Google account until you remove it. You can delete at any time by:
- Deleting the “Whole Minds Reports Add-on Files” folder in Google Drive;
- Using the Add-on’s Delete Settings action (or manually clearing PropertiesService values); and
- Revoking access in your Google Account permissions if desired. Google for Developers
Regulatory Notes (FERPA/HIPAA/COPPA/GDPR/CPRA)
- We do not receive or store student/client data; schools and professionals remain responsible for compliance with FERPA, HIPAA, COPPA, and other laws in their own environments. Protecting Student Privacy
- HIPAA users: Compliance depends on your Google Workspace configuration and a BAA with Google; Apps Script and Workspace can be configured for HIPAA under Google’s HIPAA program. We are not your BA and do not process PHI on our systems. Google ServicesGoogle HelpGoogle Workspace
- We don’t target or market to children under 13. The Add-on is for professional use by adults.
Third-Party Services
The Add-on operates solely within Google Docs/Drive/Apps Script. Your use of Google services is also governed by Google’s Privacy Policy. Google Policies
Incident Notification
If we become aware of a security event in our systems that could affect the Add-on’s integrity or authorization, we will notify affected users and provide next steps.
Changes
We may update this policy and will post the new effective date.
Contact
wholemindsinitiative@gmail.com