Privacy Policy

Last updated: 21 October 2026

In short: your spreadsheet data stays in Google. GSTR-2B Reconciler runs on Google Apps Script, has no server of its own, and reads and writes only the spreadsheet it is opened in. The only call it makes outside Google is a Pro licence-key check with Dodo Payments, which carries the licence key and a fixed product name and nothing from your spreadsheet.

Who we are

GSTR-2B Reconciler ("the Add-on") is a Google Sheets editor add-on that reconciles a GSTR-2B downloaded from the GST portal against a purchase register. It is operated by Rishabh Chulet, an independent developer in India ("the Operator", "we", "us"). The Add-on is not affiliated with Google LLC, the Goods and Services Tax Network, CBIC or the Government of India.

Google user data the Add-on accesses

The Add-on requests exactly three OAuth scopes and uses each for one purpose:

The Add-on does not request your name, email address, Google profile, contacts, Gmail, Calendar or any other Drive file, and does not run in the background: it acts only when you open its menu or use its sidebar.

How the Add-on uses that data

Spreadsheet data is used only to provide the features you see in the sidebar and result tabs: to find the header rows and suggest a column mapping, to match invoices, to calculate ITC totals, to write the result tabs into the same spreadsheet, and to count invoices against the free plan's monthly limit. The processing happens inside Google Apps Script on Google's servers, while you run the Add-on. The Operator does not receive a copy.

What is stored, and where

In your spreadsheet

• The result tabs listed above, written each time you click Reconcile. Each run replaces the Add-on's own result tabs; it never changes your source tabs.
• In the spreadsheet's document properties, which travel with that spreadsheet and are readable only by the Add-on: the tabs you chose, their header rows and column mapping, the client name you typed, and your date and amount tolerances, so next month's run for the same client is one click.

In your Google account's storage for this Add-on

Google Apps Script user properties, which are tied to your Google account and to this Add-on only:

• Pro licence (if you enter one): the licence key, the activation ID Dodo Payments returns, the product name, and the dates it was activated and last checked. The sidebar shows the key masked.
• Free-plan counter: the current month and, for each GSTR-2B data set you reconciled that month, the number of invoices counted and a short one-way fingerprint of the set, so that re-running the same data in the same month is not counted twice. The fingerprint is an 8-character hash; it does not contain GSTINs, invoice numbers or amounts. Only the current month is kept.

All of the above is stored by Google within your Google account and your spreadsheet. The Operator has no server that receives it and cannot see it.

Data that leaves Google

• Licence checks (Pro only): when you click Activate, the Add-on sends your licence key and a fixed instance name ("GSTR-2B Reconciler for Google Sheets") to Dodo Payments' licence API at live.dodopayments.com. Afterwards it sends the key and its activation ID at most once a week, or when you click Check again, to confirm the key is still valid. Dodo replies whether the key is valid. No spreadsheet data, email address or Google account information is sent. See Dodo Payments' privacy policy. On the free plan the Add-on makes no outside calls at all.
• Purchases: payments are handled entirely by Dodo Payments as merchant of record on Dodo's own checkout page, not inside the Add-on. The Operator receives your email address and order details from Dodo to send your licence and provide support; card and bank details never reach the Operator.

The Add-on uses no analytics, advertising, tracking or AI services.

Error logs

As for every Apps Script add-on, Google records each run of the Add-on and the text of any error in the Operator's Google Cloud project. Error messages are short descriptions written by the Add-on (for example, that a column is not mapped) and may include the name of a tab in your spreadsheet; they do not include invoice data. Google keeps these logs for a limited period (30 days by default) and the Operator uses them only to find and fix faults.

Sharing

We do not sell, rent or share Google user data, and we do not transfer it to anyone. Nothing read from your spreadsheet is sent to the Operator, to Dodo Payments or to any other third party.

Google API Services User Data Policy and Limited Use

GSTR-2B Reconciler's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs will also adhere to the Google Workspace API User Data and Developer Policy.

In particular, data the Add-on obtains through Google APIs, including any data aggregated, anonymised or derived from it:

• is used only to provide or improve the reconciliation features that are visible in the Add-on's sidebar and result tabs;
• is not transferred to anyone, except as necessary to provide or improve those features with your consent, for security purposes, to comply with applicable law, or as part of a merger, acquisition or sale of assets with your explicit prior consent;
• is not used or transferred to serve advertising, including retargeting, personalised or interest-based advertising, and is never sold or transferred to advertising platforms, data brokers or information resellers;
• is not used to determine creditworthiness or for lending purposes;
• is not used to create, train or improve any machine learning or artificial intelligence model;
• is not read by any person, unless you give us your affirmative agreement to view specific data (for example, when you share a spreadsheet with us for support), it is necessary for security purposes such as investigating abuse, or it is required to comply with applicable law.

Anyone working on the Add-on on the Operator's behalf is bound by the same rules.

How your data is protected

• Your data is processed and stored only on Google's infrastructure, under your Google account's permissions and your spreadsheet's sharing settings.
• The Add-on's scope is limited to the spreadsheet it is opened in; it cannot open other files.
• The only outside connection is to a single allowlisted address over HTTPS, and it carries no spreadsheet data.
• The Operator runs no server and keeps no database of your data, so there is nothing of yours for us to lose.

Retention and deletion

• Result tabs: stay in your spreadsheet until you delete them or the spreadsheet.
• Document properties (tab choices, mapping, client name, tolerances): stay with the spreadsheet and are deleted with it.
• Licence key: click Remove key in the Add-on's Licence pane to delete it from your account's storage.
• Free-plan counter: only the current month is kept; the previous month's record is overwritten by your first run in a new month.
• Error logs: deleted automatically by Google after the retention period (30 days by default).
• Removing access: uninstall the Add-on from Extensions → Add-ons → Manage add-ons, and revoke its access at myaccount.google.com/permissions. After that the Add-on cannot read or write any of your spreadsheets.
• Order records held by Dodo Payments are retained according to their policy and applicable tax law. The Operator keeps your email address and order details for as long as needed for support and as required by Indian tax law.

To ask about, correct or delete any data the Operator holds about you (order details and support emails), write to the address below.

Children

GSTR-2B Reconciler is a professional tool and is not directed at children under 18.

Changes

Material changes to this policy will be published on this page with a new date. If we ever change how the Add-on uses Google user data, we will tell you in the Add-on and ask for your consent before the new use begins.

Contact

Operator: Rishabh Chulet
Address: Madhya Pradesh, India
Email: support@creet.in