Privacy policy — Google Sheets add-on

In short

The add-on collects no personal data. It has no account, no key, no analytics, no tracking and no cookies, and it stores nothing in your spreadsheet or on your Drive. What it sends to flatin.pt is the arguments you typed into a formula.

What it can reach

One address: https://flatin.pt/api/v1/. This is a setting rather than a promise — the add-on's manifest declares the urlFetchWhitelist list, and Google Apps Script refuses any request to any other address.

What it sends to flatin.pt

The arguments of the function you wrote, in one of two requests, and always without a key or a sign-up:

• FLATIN_IMT and FLATIN_SELO send to https://flatin.pt/api/v1/imt/calculate the price and three settings: the territory (mainland Portugal or the autonomous regions), own permanent home, and buyer aged 35 or under.
• FLATIN_IMI_RATE and FLATIN_IMI ask https://flatin.pt/api/v1/imi/rates/ for the IMI rate by the name or the code of the municipality. The answer carries the series of rates for every verified year.

The VPT — the taxable value you pass to FLATIN_IMI — stays in the sheet: the yearly tax is multiplied here, from the rate that came back. The tax year stays too: the whole series arrives at once and the year is picked inside the add-on.

Every request carries one fixed header, X-Flatin-Client, with the name and the version of the add-on — the same string for everybody. It identifies the program, not the person.

What it reads in your spreadsheet

The values the formula hands it, and nothing else: a custom function in Google Sheets receives its arguments and is left without access to the other cells and sheets, to the name of the file and to its address.

It also reads the language of your Google account, so that it can write its messages in Portuguese, English, Russian, Ukrainian, German, French or Dutch. That choice stays in the add-on and does not travel with the request; when the platform reports no language, the messages are in English.

Permissions it asks for

On installation Google asks you for two permissions:

• script.external_request — to contact flatin.pt. Without it the functions have nowhere to get numbers from.
• script.container.ui — to add the menu item and the side panel that explains the functions and names the source of the data and its licence.

Those are the two the manifest declares, and the list ends there: Drive, Gmail, Calendar, Contacts, the list of your spreadsheets and your Google identity are left out.

What is kept at Google

An answer from flatin.pt stays in the script cache — the temporary storage of Apps Script itself (CacheService), on Google's infrastructure — for 6 hours, the longest the platform allows. It is there so that recalculating the sheet, which Google Sheets does on its own on open and on edit, does not repeat the same question. The key is a digest of the request; the value is the answer of the API. A refusal is an answer too: if you typed a municipality the table does not have, the text you typed comes back in the error message and stays in the cache with it. After the 6 hours the platform deletes the entry.

What we keep

The application computes the answer and is left holding neither the price nor the result. The server logs record, as on any visit to flatin.pt, the IP address, the time, the address requested and the identification Apps Script sends as its User-Agent; they are kept 30 days to keep the service running, investigate incidents and limit abusive traffic, and are then deleted. The request leaves from Google Apps Script servers, so the IP address recorded is that of that infrastructure. The request goes through the hosting and network providers listed in the privacy policy, and the add-on is left adding no account, cookie or identifier that would tie those records to you.

Third parties

No analytics service, no error reporting service, no advertising and no data brokers. Nothing is sold, shared or passed on.

The add-on runs on Google Apps Script and is distributed through the Google Workspace Marketplace: the platform is operated by Google, and that relationship is between you and Google, under Google's own terms and privacy policy.

Who the controller is

The controller is HOLY CHAOS, UNIPESSOAL LDA (NIF 519403908, Porto, Portugal). Contact: info@flatin.pt.

Your rights, how to exercise them and how to complain to the supervisory authority (CNPD) are set out in the privacy policy and on the «Your data» page.