Privacy Policy

1. The service and your choices

CRM2Spreadsheet transfers CRM data selected by an authorized Bitrix24 user into a Google spreadsheet selected for that purpose. This policy covers the public website and the CRM2Spreadsheet application.

Your organization decides which CRM records to export, who may configure exports and who can access the destination spreadsheet. Use the service only when you are authorized to process and share that information.

2. Information we process

Google connection information: account identifier, email address, display name and profile image URL, granted permissions, access and refresh tokens and connection status. Tokens enable authorized API calls and scheduled exports; we do not receive your Google password.

Spreadsheet information: the selected file identifier, name or URL and tab identifiers, titles and structure needed to validate the destination and write the export. The application processes the CRM records and field values included in the export you configure.

Bitrix24 and service information: portal and installation identifiers, authorization credentials, user identifiers, export settings, schedules, task status, row counts, timings and error details. Where you provide optional installation or support contact details, we also process those details.

Consent records may include the user, document version, date, IP address and browser information. Website requests and technical diagnostics may include request metadata, browser/device information and error events.

3. Why we use this information

We use this information to connect the correct portal and Google account, check access to the selected destination, execute manual and scheduled exports, display status and troubleshoot failures. We also use necessary records to support users, protect the service, record document acceptance and meet applicable legal obligations.

We do not sell Google user data, use it for targeted advertising, or use it to train general-purpose AI models.

4. Google permissions and file access

The application requests openid, email and profile to identify the connected Google account, and https://www.googleapis.com/auth/drive.file to work with files selected or used through the application. We do not request unrestricted access to all Google Drive files or all Google spreadsheets for the current connection flow.

Google Picker lets you select the spreadsheet. The service checks whether the file is a supported spreadsheet and whether the account can edit it. The file permission applies to the spreadsheet as a whole; selecting a tab in the application determines the export destination, not a separate Google permission boundary.

5. Sharing and service providers

Selected CRM data is sent to Google Sheets as directed by your export configuration. People with access to that spreadsheet may be able to see the exported data under the sharing settings you manage in Google.

Infrastructure and operational providers process information needed to host, deliver and diagnose the service. Error monitoring uses Sentry; operational metrics and traces use a managed-by-us SigNoz deployment. Diagnostic filtering is intended to remove credentials and unnecessary payloads. Please do not include sensitive content in support messages.

We may disclose information where required by law or necessary to investigate abuse and protect users. Access by service personnel is limited to what is needed for operation, security or an authorized support request. Third-party services, including Google and Bitrix24, also process data under their own policies.

6. Storage and protection

Connection credentials, configuration and operational records are stored on the service infrastructure. Export processing passes through the application servers; the resulting spreadsheet is stored in your Google account. Diagnostics and backups may retain related operational information.

We use HTTPS for public connections, access controls and credential filtering in diagnostics. Access tokens and secrets are not intended for public pages or browser URLs. No network service can promise absolute security.

7. Retention, disconnecting and deletion

We retain information while it is needed to provide the connection and exports, handle support and security matters, and meet applicable obligations. The period depends on the kind of record and its purpose; disconnecting Google is not a request to erase all historical configuration, journal, consent or backup records.

Disconnecting Google in the application clears the stored Google account details and tokens for the connection and pauses active exports. It does not delete your Google spreadsheet or the data already written to it. You can separately revoke the application’s access in your Google Account.

For access, correction or deletion requests, email admin@crm2spreadsheet.com with your portal domain and the request. We may ask for proof that you are entitled to act for the portal. We will explain any records that must be retained and handle the request within applicable requirements. Do not email access tokens or passwords.

8. Website storage and diagnostics

The public pages do not require a Google or Bitrix24 login. The application may use browser storage for necessary interface and connection state. Technical error and performance monitoring may operate on the website and application; it is used to maintain the service, not to build advertising profiles.

9. Google API data commitments

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements where applicable. Google data is used for the visible integration features described here. We do not grant unrelated third parties access to your files.

10. Changes and contact

We publish updates on this page with the revision date. If we introduce a new use of Google data, we will disclose it and obtain any required consent before that use begins. Questions about this policy or your data: admin@crm2spreadsheet.com.