Privacy policy for Choice Limit

Choice Limit is an add-on for Google Forms™. This page explains what it reads, where that data stays, and the little we keep ourselves.

Effective date: [EFFECTIVE DATE]

In short

Choice Limit runs inside your Google Form, on Google's servers. The answers people give and their email addresses stay in your Google account. They are never sent to us.
It can only open the form you use it in. It does not ask for access to your Drive, your Sheets or your Gmail inbox.
Emails to the people who fill in your form go out from your own Google account.
If you buy a licence, our licence service keeps the email address of your Google account and a record of the purchase. Dodo Payments handles the payment itself.
We do not sell data, show ads, or use your data to train AI models.

Who we are

Choice Limit is made by Tiny Add-ons. In this policy "we" and "us" mean Tiny Add-ons, operated by [LEGAL NAME, ADDRESS].

"You" means the organiser: the person who installs Choice Limit and uses it on their form. The people who fill in the form are called respondents.

For your form and its responses, you decide what is collected and why, and Google stores it. For the licence record described below, we are responsible for it.

What the add-on reads

When you install Choice Limit, Google asks you to allow these permissions, in Google's own words. Each one is used only for the job listed.

What Google asks you to allow	Why Choice Limit needs it
View and manage forms that this application has been installed in	To read your questions, options and responses, and to show places left, hide or relabel a full option, and close the form when you have asked it to. It cannot open any other form.
Display and run third-party web content in prompts and sidebars inside Google applications	To show the Choice Limit side panel in the form editor.
Allow this application to run when you are not present	To check each new response a few seconds after it arrives, even when you are not looking at the form.
Connect to an external service	To ask our licence service whether your Google account has paid. It is used for nothing else and connects only to our own server.
Send email as you	To send the status emails described below. It cannot read your inbox.
See your primary Google Account email address	To send you emails about your form, and to tie a licence to your account.

With these permissions, Choice Limit reads:

the questions and options of the form you open it in;
for each response: the time it arrived, the answers to the questions you put limits on, the answer to the question you choose under "Show people by" (often the person's name), and the email address, if your form collects email addresses;
the email address and language setting of your Google account, so emails and the side panel are in your language.

It does not read your other forms, your files, your contacts or your emails.

Where form data is kept

Everything Choice Limit needs to run your form is stored in your Google account, attached to the form itself:

your settings: the limits, what happens when an option is full, and which emails you want;
who holds each place and who is waiting, recorded by Google's response number, option and time. Names and email addresses are not copied into this record; Choice Limit reads them from the response when it needs them.

In your Google account's settings for the add-on, it also keeps which form the free plan is in use on, and that form's title.

Your responses themselves stay where Google Forms keeps them. Choice Limit does not copy them anywhere else, and none of this is sent to Tiny Add-ons.

Emails the add-on sends

Choice Limit sends emails through your Google account, from your address, so replies come to you. They count towards your account's daily email limit set by Google.

To respondents, at the email address collected by your form: that they are on the waiting list, that a place is now theirs, or that you freed their place.
To you: when an option or every option is full (you choose which), when the free plan is nearly used or used up, when Google's daily email limit stopped some emails, and when Google needs your permission again.

The emails contain your form's title, the option, and the person's status. They do not pass through our servers.

What our licence service stores

The licence service is a small server run by us. It answers one question: has this Google account paid?

To ask, the add-on sends the email address of the Google account that is using it. It sends this when you open Choice Limit, after you return from checkout, and when your form is close to the free plan limit. If the account has not paid, the service answers no and does not keep the address.

If you buy a licence, the service stores:

the email address of the Google account the licence belongs to;
the purchase record: the order reference from Dodo Payments, the date, the amount, and whether it was refunded.

The add-on also sends us a few anonymous counts about setup, such as "limits turned on" or "free plan limit reached", so we can see where people get stuck. They carry a random number instead of your email address, and never contain form titles, questions, answers or anyone's email address.

Nothing about your respondents ever reaches the licence service.

Payments

Purchases are handled by Dodo Payments, which acts as the merchant of record: it is the seller on your receipt, takes the payment and handles sales tax. You give your card or other payment details to Dodo, not to us, and Dodo uses them under its own privacy policy, which you can read on the Dodo Payments website.

When a payment succeeds or is refunded, Dodo tells our licence service, with the order reference and the email address attached to the order. We keep only the licence record described above. We never see your full card number.

Google user data and Limited Use

Choice Limit's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, data Choice Limit gets from your Google account:

is used only to run the add-on's features that you can see in the side panel and in its emails;
is not sold, and is not used or transferred for advertising, credit checks or any purpose unrelated to those features;
is not used to train artificial intelligence or machine learning models;
is not read by a person, unless you ask us to look into a problem and agree to it, it is needed for security or to investigate abuse, or the law requires it.

We do not sell or rent personal data. We use a few service providers to run the business, and they process data only on our behalf:

Dodo Payments, for checkout, receipts, refunds and sales tax;
Cloudflare, which hosts this website and the licence service;
PostHog, which counts the anonymous setup events.

We may also disclose data if the law requires it. These providers may process data outside your country, under their own safeguards for international transfers.

This website

This website does not set cookies and does not use advertising or tracking scripts. Our web host may keep short-lived server logs, such as IP addresses and pages requested, to keep the site secure.

How long we keep data

Data stored with your form stays in your Google account until you delete it, as described below.
The licence record is kept while your licence exists. If you are refunded, the licence is removed.
Dodo Payments keeps its own records of the sale for as long as tax and accounting rules require.

Deleting your data

Data in your Google account. Press Turn off in Choice Limit's Setup to stop it working on a form. To remove the add-on, uninstall it from the add-ons menu in Google Forms. You can also remove its access at any time on your Google Account's Third-party apps and services page. Deleting a form deletes everything Choice Limit stored with it.

Data we hold. Email [SUPPORT EMAIL] from the Google account the licence belongs to, and ask us to delete your data. We will delete your licence record within 30 days and tell you when it is done. After that, the add-on treats your account as being on the free plan. Records Dodo Payments must keep by law stay with Dodo.

If you filled in a form

The form belongs to its organiser, and your answers are stored in their Google account. We do not receive your answers or your email address. To see, change or delete your response, contact the person who sent you the form. You can reply to any email you got about your place; the reply goes to them.

Choice Limit is a tool for organisers and is not directed at children. A school using it with students is responsible for doing so under its own rules.

Your rights

Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to how we use it, and to complain to your data protection authority. To use any of these rights, email [SUPPORT EMAIL]. We will answer within 30 days. We are based in [COUNTRY OF ESTABLISHMENT].

Changes to this policy

If we change this policy, we will update it on this page and change the date at the top. If a change affects what Choice Limit reads or what we keep, we will say so here before it applies, and email people who have bought a licence.

Contact

Questions about privacy: [SUPPORT EMAIL]. Post: [LEGAL NAME, ADDRESS].