PRIVACY POLICY

Recognition, with
respect for your data.

Version 15 November 2026 · Website and Google Sheets add-on.

Who we are

CertCompose is provided by Alive & Thrive Ventures in Australia. This policy covers certcompose.com, the CertCompose Google Sheets add-on and support communications. For privacy questions, contact sean@aliveandthriveventures.com.

Information used by the add-on

• Spreadsheet data: column headings, selected recipient rows, certificate fields and processing status. These may include names, course details, dates, awards and any custom information you choose to include.
• Templates and files: the contents of templates you create or connect, including branding, logos and signatures. The app creates Slides templates, working copies and PDF outputs in your Google Drive and records their links in your sheet.
• Saved app data: settings, file identifiers, field mappings, mapped recipient values, template text, batch journals and monthly usage records. These are stored in Google Apps Script user properties, scoped to your Google account within the app.

This information is used to generate and preview certificates, maintain your settings, resume interrupted work, avoid duplicate outputs and enforce the monthly allowance. The app uses Google authorisation tokens to make permitted Google API requests; it does not intentionally store tokens in app records or logs.

Where information goes

The add-on runs through Google Sheets and Google Apps Script and calls Google Drive and Slides APIs. Certificate generation does not send your spreadsheet or certificate content to the CertCompose marketing website, OpenAI, a separate CertCompose processing server or an AI model. Google processes the data through its services under the terms and privacy settings applicable to your account.

CertCompose does not request access to your entire Drive, send certificates to recipients or change file-sharing permissions. Access to the files is controlled by Google Drive permissions. People with access to your spreadsheet may see its data and PDF links, so check sharing before using personal information.

Website hosting and cookies

This website is hosted using OpenAI Sites and Cloudflare infrastructure. Delivering and securing the site may involve processing technical information such as your IP address, browser/device details, requested URL, request time and security events. The providers may retain service and security logs under their own policies; we do not control their retention periods or promise that visiting the website creates no logs.

Our website code does not add analytics, advertising pixels, marketing cookies, a sign-up form or payment tracking. Hosting providers may use technologies necessary to operate and protect their services. The website does not accept certificate uploads. See the OpenAI privacy policy, Cloudflare privacy policy and Google privacy policy for their information-handling practices.

If you contact support

We receive your email address, message and any attachments you choose to send. We use them to answer your request, investigate problems, handle privacy complaints and maintain necessary support records. Support correspondence is handled through our Google Workspace email account. Please use fictional examples and remove recipient details from screenshots. Never send passwords, verification codes or authorisation tokens.

We do not routinely review certificate content. If troubleshooting requires access to information you provide, we use it only for that request and restrict access to people who need it. We retain support correspondence only for as long as reasonably needed to resolve and follow up the request, manage disputes or meet legal obligations, and then delete or de-identify it. You can request deletion using the contact above.

Sharing and overseas processing

We do not sell or rent personal information. We use Google for the add-on and support, and OpenAI Sites/Cloudflare for website hosting. These providers operate internationally, so information may be processed outside Australia, including in the United States and other countries where they operate. We may also disclose information where required by law or reasonably necessary to investigate misuse or protect legal rights, subject to applicable law and the Google user-data restrictions below.

Retention and removal

Your templates, PDFs and working copies remain in Google Drive until you delete them. Spreadsheet content and tracking columns remain in your sheet. Google controls its own Trash, backup and account-retention processes.

App settings and unfinished jobs remain available for recovery. Completed or stopped job records are replaced when a later job starts; usage records needed to prevent duplicate counting may persist until you remove saved app data.

1. In the sidebar, open Help → Recovery & remove saved data.
2. Type REMOVE and confirm. This clears this Google account’s saved settings, mappings, recipient values, journals and file references across spreadsheets in this installation. Saved jobs cannot resume afterward.
3. Only the current UTC month’s aggregate PDF count remains, without recipient values or file identifiers. It is removed the next time you open the app after that month ends. If you do not reopen the app, it can remain in Google’s app storage.
4. Review and delete Drive files and spreadsheet data separately if you also want those removed. Other Google accounts’ saved data is unaffected.

Uninstalling the add-on or revoking access does not itself delete all saved app data or your files. If possible, use the removal control first, then uninstall or revoke access in your Google account. If you cannot open the app or removal fails, contact us for help. We may need you to restore access temporarily to run the account-specific removal; do not share your password.

Your choices, requests and complaints

You choose which rows, templates and fields to use and can stop using the app at any time. You can ask us to explain, access, correct or delete personal information we hold about you, or make a privacy complaint, at sean@aliveandthriveventures.com. We may ask for proportionate information to confirm your identity. We will investigate and respond within a reasonable time, explain any lawful reason we cannot fulfil a request, and tell you what further steps are available.

If the certificate was issued by another organisation, contact that organisation to correct its source data or certificate. If you are unhappy with our response, you may contact the Office of the Australian Information Commissioner or another relevant privacy regulator, where applicable.

Google user data

CertCompose’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used to provide and improve the certificate features you request. It is not sold, used for advertising, used for credit decisions or used to train general-purpose AI or machine-learning models.

Policy changes

We will update this page and its version date when our practices change. Material changes to Google data use will be explained before they take effect, with fresh consent where required. This policy does not authorise additional Google permissions.