This policy describes how the LoneScale Enrichment add-on for Google Sheets accesses, uses, shares, protects, retains and deletes Google user data. It applies to the add-on only. Our general terms and our Data Processing Agreement are published separately on this website.
1. Who we are
Loneline SAS, trading as LoneScale, registered in France. For any question or request relating to this policy, contact happy@lonescale.com.
2. What Google user data the add-on accesses
The add-on requests four OAuth scopes, each at the narrowest level available for the feature it supports.
- Your Google Account email address (userinfo.email). We read the email address and no other profile field.
- The content of the spreadsheet the add-on is open in (spreadsheets.currentonly). We read only the rows you choose to enrich, which typically contain a first name, last name, LinkedIn URL and company name. This scope is limited to the single document in which you opened the add-on. The add-on cannot see or access any other file in your Google Drive.
- Permission to display the add-on sidebar inside Google Sheets (script.container.ui). No data is read through this scope.
- Permission to send outbound requests (script.external_request), used only to call the LoneScale API over HTTPS.
The add-on does not access Gmail, Google Calendar, Google Chat, Google Contacts, or any file in Google Drive other than the open spreadsheet.
3. How we use Google user data
- The rows you select are sent to the LoneScale API for the sole purpose of looking up verified professional email addresses and phone numbers, which are then written back into your spreadsheet.
- Your Google Account email address is used only to identify your LoneScale account and apply the correct enrichment credit balance.
- We do not use Google user data for advertising.
- We do not use Google user data to develop, improve or train artificial intelligence or machine learning models. The LoneScale enrichment pipeline performs deterministic lookups against contact databases and involves no AI or ML processing of any kind.
4. What we share, and with whom
To fulfil an enrichment request, LoneScale may query external data providers, which act as processors under contract.
We do not sell Google user data, do not transfer it to data brokers, and do not transfer it to any party that would use it to develop, improve or train AI or ML models.
5. How we protect Google user data
- All data is encrypted in transit using TLS, and encrypted at rest.
- Access to production systems is restricted to authorised personnel on a least-privilege basis, protected by multi-factor authentication, and logged.
- LoneScale completed a SOC 2 Type 2 audit covering January to April 2026 with a clean opinion. The report is available on request.
- LoneScale operates under the GDPR as a data processor for customer data.
- We maintain a documented incident response process and will notify affected customers of any personal data breach in accordance with applicable law.
6. Retention and deletion
Your Google Account email address and the data you submit for enrichment are retained for as long as your LoneScale account remains active, and are deleted within sixty (60) days of contract termination.
Enrichment results are written into your own spreadsheet and remain under your control in your Google Drive.
You may request deletion at any time at happy@lonescale.com, revoke access at myaccount.google.com/permissions, and uninstall the add-on from the Google Workspace Marketplace.
7. Limited Use
LoneScale's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
8. Changes to this policy
We will update this page if our practices change, and will revise the date shown at the top.