Privacy Policy

Introduction

This Privacy Policy explains how Attager (the “Service”) collects, uses, and protects information when you use our Gmail™ add-on to save email attachments to Google Drive™. We keep it simple, transparent, and aligned with Google Workspace™ Marketplace requirements.

Who We Are

• Product: Attager Gmail™ add-on
• Purpose: Save Gmail™ attachments into organized Google Drive™ folders
• Legal entity (Data Controller): Skamatic Sp. z o.o., registered in Poland (EU)
• Registered address: Długa 29, 00-238, Warsaw, Poland
• Contact: support@attager.com
• Data Protection Officer (if applicable): [DPO Name], [DPO Email]
• EU/UK representative (if applicable): [Representative Name], [Representative Contact]

Ownership and Trademarks

Skamatic Sp. z o.o. is the legal owner and operator of the Attager product. “Attager” and associated logos are trademarks or registered trademarks of Skamatic Sp. z o.o. in applicable jurisdictions. All other product names or marks are the property of their respective owners.

What We Collect

From Google Workspace™

• User email address: Used to identify your account, show license status, and deliver add-on functionality.
• Gmail™ metadata and attachments: Accessed only to find and save attachments according to your task filters. We do not read the content of your emails beyond what is necessary to process attachments (such as sender, subject, filenames).
• Google Drive™ folders: We create folders and files according to your settings. We do not access other files unless required to save the attachments you instruct us to save.

From Your Device

• Add-on settings: Task definitions, trigger settings, date formats, and processed email markers are stored as user properties in your Google Apps Script™ account.

Payments via Stripe

• Email address: We send your email to Stripe to locate your customer record and subscription.
• No card data handled by Attager: Payment cards, billing addresses, and tax data are collected and processed directly by Stripe. Attager does not receive or store this information.

How We Use Information

• Provide the Service: Process Gmail™ messages to find attachments and save them to Google Drive™ based on your tasks and triggers.
• Licensing: Check your subscription status to enable multiple tasks (Pro) or limit to one task (Free).
• Support and safety: Diagnose issues (logs) and protect the Service against misuse.

Data Storage and Retention

• User properties: Task settings, triggers, and processed email markers are stored in Google Apps Script™ User Properties under your account.
• Drive files: Attachments are saved to your Google Drive™; you control retention and deletion.
• No persistent servers: Attager does not maintain a separate user database with your content. Any cached/derived data exists within your Google Apps Script™ environment.

Data Sharing

• Stripe: We share your email address with Stripe to manage billing and subscriptions. Stripe handles all card payments and tax calculations.
• No selling: We do not sell your personal information.
• Legal and safety: We may disclose information if required by law or to protect users and the Service.

Security

• Google OAuth scopes: The add‑on requests only the permissions necessary for its built‑in features and core operation. Permissions are granted at installation.
• Least access: We operate within Google’s Apps Script environment and do not extract your data to external systems except to send your email address to Stripe for licensing.

Google OAuth Permissions (Scopes) We Request

Attager uses Google OAuth permissions (“scopes”) so it can access Gmail™, Google Drive™, and Google Apps Script™ features inside your Google Account™. You can review or revoke access at any time via your Google Account™ permissions page.

Below we explain, in plain language, why each scope is needed and how it is used.

Gmail access

• gmail.readonly (view email messages and settings)

  • Why Attager needs it: To find emails that match your filters and to retrieve attachments so they can be saved to Google Drive™.
  • How it’s used:
    • Search your mailbox based on criteria you set (for example: sender, subject keywords, date range).
    • Read message metadata to identify messages with attachments.
    • Download attachment file content from matching emails.
    • Transfer those attachments to the destination folder you chose in Google Drive™.
  • What we don’t do:
    • We do not store or transmit email body content to our servers.
    • We do not send Gmail content to third parties.

• gmail.addons.current.message.readonly (view the currently open message when the add‑on is running)

  • Why Attager needs it: To show context-aware information in the Gmail™ sidebar while you are viewing an email (for example, attachment count and task suggestions).
  • What we don’t do: We do not save the current email’s content outside your Google Account™.

• gmail.addons.execute (run the add‑on in Gmail™)

  • Why Attager needs it: Required to display the Attager sidebar UI in Gmail™ and let you start actions (run a task, configure settings).

Google Drive access

• drive (see, edit, create, and delete all of your Google Drive files) — restricted
  • Why Attager requests this scope: To create folders and upload the attachment files you choose to save to Drive.
  • How it’s used:
    • Create folders (often date-based) according to your configuration.
    • Upload attachment files extracted from emails to the Drive folder you select.
    • Check whether a destination folder already exists to avoid duplicates.
    • Let you browse/select a destination folder (for example via a picker-style UI).
  • Important note: This scope is classified by Google as “restricted” because it can allow broad Drive access. Attager’s intended behavior is limited to saving attachments to locations you choose.
  • What we don’t do:
    • We do not sell, share, or export your Drive files to external services.
    • Attager’s normal operation does not require deleting or modifying your existing Drive files; it focuses on creating folders (when needed) and uploading attachments.

Google Apps Script / automation access

• script.triggers (create and update Google Apps Script triggers)

  • Why Attager needs it: To schedule automatic runs (time-based triggers) for tasks you enable.
  • How it’s used: Create/update/remove triggers when you change automation settings.

• script.scriptapp (allow the application to run when you are not present)

  • Why Attager needs it: To run your scheduled tasks in the background, so attachments can be saved automatically even when you are not actively using Gmail™.

• script.external_request (connect to an external service)

  • Why Attager needs it: To call external APIs required for licensing.
  • How it’s used: Connect to the Stripe API for Pro license verification.
  • Data shared externally: Only your email address is sent to Stripe for subscription lookup; no Gmail or Drive content is shared with Stripe.

• script.storage (store preferences in script properties)

  • Why Attager needs it: To store your task configuration (filters, folder patterns, schedules) in your Google Apps Script™ environment under your Google Account™.

Identity scope

• userinfo.email (view your email address)
  • Why Attager needs it: To identify your account and manage licensing (Free vs Pro) tied to your email address.

Your Choices

• Revoke access: You can remove the add-on or revoke permissions in your Google Account™.
• Delete data: Use Settings → Clear Attager Data to remove tasks, triggers, and processed markers from User Properties. Delete any Drive folders/files you no longer want.
• Control tasks: Enable/disable tasks, adjust filters, and change trigger windows to limit processing.

Children’s Privacy

Attager is not directed to children under 13 and does not knowingly collect personal information from children.

International Use

Attager may be used internationally. Stripe may process payments and taxes in your region according to its own compliance obligations.

Changes to This Policy

We may update this policy from time to time. When we make changes, we will update the “Last updated” date and, where appropriate, notify users.

Contact Us

• Company: Skamatic Sp. z o.o., Długa 29, 00-238, Warsaw, Poland
• Email: support@attager.com
• Website: https://attager.com

Last updated

• See repository history for the most recent update date.