QR
QR Attendance - ConvertSharp

Privacy Policy - QR Code Attendance Tracking By ConvertSharp

Effective Date: October 10, 2026

This Privacy Policy describes how the "QR Code Attendance Tracking By ConvertSharp" Google Workspace™ Add-on (referred to as "QR Attendance Tracker", "the Add-on", or "we"), developed and operated by convertsharp.com, collects, processes, and protects your information. We enforce a strict privacy-first, serverless architecture in full compliance with the Google API Services User Data Policy, GDPR, and CCPA.

1. Minimal Scopes & Information We Access

The Add-on operates serverless within the Google Workspace™ environment and requests strictly the minimal OAuth scopes required for user interface rendering, active spreadsheet management, and identity verification:

  • https://www.googleapis.com/auth/spreadsheets.currentonly
    Data Access & Use: Strictly limited to the single active spreadsheet document where you explicitly open the Add-on. Used to read roster member names and UIDs, insert generated QR code images into designated cells, and log attendance check-in timestamps. The Add-on cannot access or view any other spreadsheets or files in your Google Drive™.
  • https://www.googleapis.com/auth/script.container.ui
    Data Access & Use: Allows the Add-on to display its modal dialogs and sidebars inside Google Sheets™ (including the Live Webcam Scanner sidebar, Attendance Analytics Dashboard, Settings modal, and printable badge view).
  • https://www.googleapis.com/auth/script.external_request
    Data Access & Use: Used solely to fetch high-resolution QR code rendering graphics from whitelisted endpoints (api.qrserver.com).
  • https://www.googleapis.com/auth/userinfo.email
    Data Access & Use: Used to securely recognize the logged-in user account for licensing and personalized settings.

2. Zero Access to Google Drive & Google Forms

Zero Sensitive or Restricted Scopes Required:

  • Zero Google Drive Permissions: The Add-on does NOT request or use any Google Drive permissions (drive or drive.file). All ID badge printing and PDF exports are handled client-side directly within your browser via standard print protocols (Print to PDF), keeping your Google Drive completely untouched.
  • Zero Google Forms Permissions: The Add-on does NOT request or use any Google Forms permissions (forms or forms.body). It cannot read, modify, or delete any of your Google Forms. Attendance check-ins run through our secure direct Web App endpoint or voluntary client-side form submissions.

3. Geolocation (GPS) Data Policy

When students or employees scan their attendance QR code on a mobile device, the browser may request optional HTML5 Geolocation permission:

  • Purpose: Geolocation coordinates (Latitude and Longitude) are captured exclusively to verify on-site presence and prevent proxy or remote attendance.
  • Storage: Coordinates are written directly into your Google Sheet™ document (under Column "GPS Location"). ConvertSharp does not track, store, or transmit this location data to any external server.
  • User Consent: Location access is subject to standard browser permissions. Users can choose to grant or deny access in their browser settings.

4. Serverless Architecture & Zero Third-Party Storage

Your roster, student identifiers, phone numbers, and attendance logs are 100% owned and stored within your private Google Workspace™ account. We do not maintain an external database of your students or employees, nor do we sell, rent, or monetize your data.

5. Google API Services User Data Policy Compliance

QR Code Attendance Tracking By ConvertSharp's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

  • We only use user data to provide or improve user-facing features that are prominent in the Add-on's user interface.
  • We do not transfer user data to third parties, advertising platforms, data brokers, or information resellers.
  • We do not use or transfer user data for serving advertisements.
  • Human personnel do not read your spreadsheet or attendance data.

6. Children's Privacy (COPPA & FERPA Compliance)

Because our Add-on is widely used in educational institutions and schools, we take student privacy with the utmost seriousness:

  • We do not collect personal identifiers from students on our servers.
  • All student records reside exclusively inside the teacher's or school district's Google Workspace for Education tenant.
  • We fully comply with FERPA and COPPA principles.

7. Data Retention & Deletion

Since all data is stored inside your own Google Sheet™, you retain 100% control over retention. You can clear rows or delete the entire spreadsheet at any time from Google Drive™.

8. Contact Us

If you have any questions about this Privacy Policy or wish to make an inquiry, please contact our Data Protection team:

ConvertSharp Data Protection & Support
Website: https://convertsharp.com
Email: [email protected]