Privacy Policy
Overview
FormChime (“the add-on”) is a Google Apps Script add-on that runs inside your own Google account. We do not operate servers and do not receive your form data.
Data the add-on accesses
• The title, questions and responses of the single Google Form where you use the add-on (to build notifications).
• Settings you enter: LINE Channel Access Token, recipient IDs, selected fields, message template, license key.
Where data is stored
The following is stored in Apps Script User Properties, tied to your Google account and this add-on. Other editors of the same form cannot read it, and we (the developer) cannot access it:
• Per form: LINE Channel Access Token, recipients, field selection, template and display options, most recent error message
• The list of form IDs where notifications are enabled
• License key and license-check cache
• This month’s usage count
• Language setting
• A random identifier (used to generate the marker below and prevent duplicate notifications)
Exception: to prevent duplicate notifications from several editors, the add-on writes a pseudonymous marker to the form’s Document Properties: a hash derived from that random identifier, the time notifications were enabled, the time of the last successful send, and (if applicable) the takeover time. Every editor who uses the add-on on this form can read it; the same user has the same marker value on different forms. It contains no email, token or response data. The marker remains until the person who enabled it turns notifications off, uses “Clear settings” or “Delete all my data”, or another editor takes over after 14 days without a successful send.
Roles
For the personal data of people who fill in your form, you (the form owner) are the data controller. Please tell respondents on your form that their responses will be sent to you as LINE notifications.
Who data is sent to
• LINE: according to your settings, the form title, the titles and answers of selected questions, the submission time and your custom template text are sent with the recipient IDs to the LINE Messaging API (api.line.me, operated by LY Corporation). “Send test” sends question titles with sample values. File-upload questions show only the number of files; uploaded files are never read or sent.
• Polar: the add-on calls the Polar API (Polar Software Inc.) to validate your license and sends only your license key and our Polar organization ID — never form responses or Google account data. Polar can link the license key to your purchase record (including the email used at checkout). License status is rechecked about every 24 hours (about every hour if invalid). Checkout data is provided by you directly to Polar.
• Nothing is shared with any other third party or used for advertising.
International transfers
• Google: the add-on runs on Google’s infrastructure and your settings are stored by Google LLC under its privacy policy, and may be processed in the United States or other countries. Requests to LINE and Polar are sent from Google’s servers.
• LY Corporation: notification content sent to LINE is processed and stored under LY Corporation’s privacy policy and may be processed in Japan and other locations.
• Polar: license checks and payment data are processed by Polar in the United States.
Retention
• We do not operate servers, keep no server logs and keep no copies of responses.
• Settings in User Properties are kept until you use “Clear settings” (this form) or “Delete all my data” (everything). Removing the add-on or revoking access alone does not delete them.
• Only the current month’s usage count is kept; older months are deleted automatically. Only the latest error per form is kept, and it is cleared after a successful send.
• The pseudonymous marker in Document Properties is kept as described above.
• Delivered LINE messages are retained under LY Corporation’s policies; Polar retains payment and subscription records under its own policy.
Broadcast
Paid plans can optionally broadcast to all friends of your Official Account. It is off by default. Broadcasting sends the notification to every friend, so do not use it for responses that contain personal data — use it only for notices such as “new sign-up”.
OAuth scopes
• https://www.googleapis.com/auth/forms.currentonly — access only the form where the add-on is in use (the add-on only reads the form structure and responses).
• https://www.googleapis.com/auth/script.external_request — call the LINE Messaging API and Polar API.
• https://www.googleapis.com/auth/script.scriptapp — create the form-submit trigger that sends notifications automatically.
• https://www.googleapis.com/auth/script.container.ui — show the add-on sidebar in Google Forms.
The add-on does not request Google Drive, Gmail or any other broad scopes.
Google API Services User Data Policy
FormChime’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Payments
Paid plans are processed by Polar as Merchant of Record under Polar’s privacy policy. We never see your card details.
Deleting your data
• “Clear settings”: deletes this form’s LINE token, recipients, field selection, template, error log, license cache and trigger, and the pseudonymous marker you created on this form. Your license key, language, this month’s usage, random identifier and other forms’ settings are kept.
• “Delete all my data”: deletes your User Properties (settings for every form, license key, language, random identifier, past months’ usage) and all your triggers, plus your marker on the current form. Only this month’s notification count (a number with no identifying data) is kept for the free quota and is deleted automatically next month. Markers on other forms are outside what the add-on can reach from here; they are replaced when another editor takes over after 14 days, or you can open the add-on on each form and use “Clear settings”.
• Removing the add-on or revoking access alone does not delete stored data — use the buttons above first. You can revoke access under Third-party apps in your Google account.
Your rights
Depending on applicable law (e.g., GDPR, Thailand’s PDPA, Japan’s APPI, Taiwan’s Personal Data Protection Act), you may request access to, correction of, or deletion of your data by emailing contact@formchime.com. Most data lives only in your Google account and can be removed with the buttons above.
Contact
contact@formchime.com
Changes
Changes will be posted on this page with a new effective date. Effective date: October 21, 2026