Privacy policy
Last updated 4 November 2026.
Tidyfield is run by an independent developer. This policy covers Tidyfield Donor Sync (the spreadsheet and its script) and this website. Contact: privacy@tidyfieldapps.com.
In short
- Your donor data stays in your Google account. Tidyfield never receives it.
- Your copy contacts only the platforms you connect, Lemon Squeezy (to check your license) and this website (to check for a new version).
- This website uses no cookies, no analytics and no tracking.
How the product works
You make a copy of a Google Sheet that contains a script. The copy and its script belong to you and run in your Google account on Google's servers. The script reads gifts, donors, campaigns and recurring plans from Zeffy, Givebutter or Donorbox with the API keys you enter, and writes them into your spreadsheet. Tidyfield has no server in between.
Data the script handles in your account
- Donation data from the platforms you connect or the CSV files you import: amounts, dates, campaigns, statuses, and donors' names, emails, postal addresses and phone numbers. You can turn off copying addresses and phone numbers in Settings.
- API keys, saved in the script's private storage for your spreadsheet (Apps Script document properties). They are sent only to the platform they belong to and never shown again in full.
- Your Google account email, used to label who set up automatic sync and to send you a failure email if you allow it. The email goes from your account to yourself.
What leaves your Google account
| Recipient | What | Why |
|---|---|---|
| Zeffy, Givebutter, Donorbox | Your API key with each request | To read your data from your own account there |
| Lemon Squeezy (license service) | Your license key and an activation label made of your spreadsheet's name and ID | To activate and check your license, about once a week |
| donors.tidyfieldapps.com | A request for /version.json, with no information about you | To tell you when a newer version exists, at most once a day |
Google runs the script and stores your spreadsheet under Google's privacy policy.
Google user data
The script uses Google permissions only to read and write the spreadsheet it is attached to, show its sidebar, run automatic syncs, contact the services listed above and email you about failures. Tidyfield Donor Sync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. No Google user data is transferred to Tidyfield, sold, used for advertising, or used to train AI models.
Purchases
Lemon Squeezy is our merchant of record. It collects your name, email, billing address and payment details under its own privacy policy. We receive order details (name, email, country, plan) to provide your license and support. We keep them as long as needed for tax and accounting.
Support email
If you email us, we keep the conversation to help you and delete it on request. Please never send API keys, license keys or donor data.
This website
The site is hosted on Cloudflare Pages. It sets no cookies and runs no analytics or advertising scripts. Cloudflare processes technical data such as IP addresses to deliver and protect the site.
Your choices
- Turn off addresses and phone numbers in Settings; existing ones are removed from the Gifts tab.
- Disconnect a platform to delete its key; delete a platform's gifts from the spreadsheet; delete the spreadsheet to remove everything.
- Remove the script's access at myaccount.google.com/permissions.
- For purchase records, email privacy@tidyfieldapps.com to see, correct or delete them, where the law allows.
Your donors
You remain responsible for your donors' data in your spreadsheet, as you are for the platforms you use. Share the spreadsheet only with people who should see donor information.
Children
The product and site are for organizations and are not directed at children.
Changes
We post changes here and update the date at the top. Significant changes are announced to customers by email.