Privacy Policy: FedSignals for Google Sheets

Last updated: 2026-10-30 · Publisher: FedSignals Data · Contact: fedsignals.alerts@gmail.com · Online: https://fedsignalsdata.com/privacy/sheets

FedSignals for Google Sheets brings public government contract opportunities that match your saved searches into your spreadsheet. By default it uses the FedSignals service: you sign in with Google and the add-on asks our service for matching records.

What the add-on sends us

A Google identity token (to identify you), your saved searches' filters, and which product you're using. It never sends your spreadsheet's contents.

Who we are

FedSignals Data ("we") publishes the FedSignals Chrome extension and FedSignals for Google Sheets, and runs the FedSignals service they connect to. Contact: fedsignals.alerts@gmail.com.

Where the data comes from

Contract data comes from public, official sources: SAM.gov contract opportunities and USAspending.gov award data (U.S. government), and TED tenders (Publications Office of the European Union). We collect the U.S. data once a day into our own cache. EU tenders are looked up when a Pro search asks for them.

What the FedSignals service stores

The service runs on Cloudflare Workers, with a Cloudflare D1 database. When you sign in with Google, Google tells us your Google account ID and email address. We store, per product:

• Your account: your Google account ID, a salted SHA-256 hash of your email address (not the email address itself), your plan (Free or Pro), and if you subscribe, your Stripe customer ID, Stripe subscription ID, subscription status, billing period and renewal date.
• Your saved searches: for each saved search, its ID and the filters you set (for example keywords, NAICS codes, set-asides, agency and sources), with the time it last ran. This is how we enforce plan limits and avoid sending you the same data twice.
• What you've already seen: short hashes of the records already sent for each saved search, so that only new matches are flagged.
• Usage counters: how many requests your account made today, for the daily limit.

Our cache (Cloudflare KV) holds only the public contract data; it holds nothing about you. Our code does not write your email address, sign-in token or keys to logs. Cloudflare, our host, processes each request (including your IP address) to deliver it. Our Worker's request logs (Cloudflare Workers Logs) record request details such as the time, path and status; they are kept for 3 days on our Cloudflare plan (7 days from December 1, 2026, when Cloudflare's new log retention starts) and then deleted automatically.

Payments

Payments are processed by Stripe. When you start a checkout, we send Stripe your email address and your account ID so it can create your subscription. Stripe collects your card details directly; we never see or store your card number. Stripe's privacy policy: https://stripe.com/privacy

Who else receives data

• Google: to check your sign-in token.
• Stripe: for payments, as above.
• TED (api.ted.europa.eu): when a Pro search includes EU tenders, we send TED your search keywords and filters (without your identity) and cache the answer for up to 2 hours.
• Cloudflare: our hosting provider.

We do not sell your data, share it for advertising, or use it for advertising. We use no analytics or tracking.

Retention

• Saved searches unused for 30 days are deleted automatically, and the list of records already sent for a search is deleted after 60 days without updates.
• Daily usage counters are deleted after 2 days; cached TED answers expire after 2 hours.
• Request logs at Cloudflare (Workers Logs) are deleted after 3 days (7 days from December 1, 2026).
• Your account record (plan and Stripe IDs) is kept while you use FedSignals, until you delete it (below).

Cancelling and deleting your data

• Cancel Pro: use Manage subscription (extension: Account tab; Sheets: the FedSignals sidebar). It opens Stripe's billing page, where you can cancel, change your card, see invoices or switch between monthly and yearly. A cancelled subscription stays Pro until the end of the period you've paid for, then moves to Free.
• Delete my data: use Delete my data in the same places and confirm. We immediately delete your account record (the hashed email ID, plan and Stripe IDs), saved searches, the list of records already sent to you, and usage counters, for both the Chrome extension and the Sheets add-on. If you have an active subscription, we cancel it immediately first (no further charges; no refund for the current period) and tell you so. If the cancellation fails, nothing is deleted and you can try again. The extension also clears its data in your browser; the add-on removes its settings and keys for your account (the tabs in your spreadsheet are your own file).
• Stripe keeps its own payment records as the law requires. Request logs at Cloudflare expire after 3 days (7 days from December 1, 2026).
• If you can't use these buttons, email fedsignals.alerts@gmail.com from the Google account you signed in with and we will cancel or delete for you.

Children

FedSignals is not directed to children under 13.

Changes

We post changes on this page and update the date above.

Your spreadsheet and Google data

• Only the current spreadsheet: the add-on uses the spreadsheets.currentonly scope. It can't open your other files. It writes results only to tabs it creates in the spreadsheet you're using (FedSignals - <search name> and FedSignals - Recompetes).
• Document properties (visible to the spreadsheet's editors) hold your saved searches.
• User properties (only you) hold your settings and any optional keys (see Advanced mode). Keys are never written into the sheet or shown back.
• One time-driven trigger if you turn on automatic updates. "Turn automatic updates off" removes it.

Scopes

spreadsheets.currentonly (write results to this spreadsheet), script.container.ui (show the sidebar and menu), script.external_request (reach the FedSignals service), script.scriptapp (the optional automatic-update trigger), openid and userinfo.email (sign-in).

Advanced mode (optional): your own keys

If you turn on Advanced mode and enter your own Apify token or SAM.gov API key, they are stored in your user properties and the add-on sends requests with them from Google's Apps Script servers straight to that service (Apify: https://apify.com/privacy-policy, SAM.gov: https://sam.gov/content/privacy). Your keys never reach our service.

Removing the add-on's data

Turn automatic updates off, delete the FedSignals - ... tabs, and uninstall the add-on. To delete what our service stores, use Delete my data in the sidebar (see "Cancelling and deleting your data" above).

Google API Services User Data Policy

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use your Google account ID and email address only to sign you in and manage your plan. Spreadsheet content is used only to show and update results for you. It isn't transferred to us or to anyone else, and humans don't read it.