Privacy Policy — Property Kanban

Last updated: July 19, 2026

Property Kanban is a Chrome extension that turns your own Google Sheets into a property management workspace. This policy explains what data we handle, where it lives, and your rights.

1. Data you own (stored in YOUR Google account)

All of your business data — tasks, properties, tenants, finances, rent records, documents, and history — is stored exclusively in Google Sheets and Google Drive files that belong to your own Google account. The extension creates one spreadsheet (your database) and one Drive folder (your documents) in your account. We, the developers, have no access to this data and it never passes through our servers.

2. Data we collect and store (minimal)

To provide subscription functionality we store only:

• Your Google account email address — used to sign you in and to look up your subscription status.
• Subscription status — whether your paid subscription is active and its expiration date, received from our payment processor via secure webhooks.

This data is stored in a Supabase (PostgreSQL) database hosted in the cloud and is used solely to verify your subscription. It is never sold, shared, or used for advertising.

3. Google API scopes and how we use them

• userinfo.email — to identify your account and check your subscription.
• spreadsheets — to create and sync your database spreadsheet (tasks, finances, etc.).
• drive.file — to upload and manage documents (leases, receipts) in a dedicated folder in your Drive, created by the app.
• forms.body — to create a tenant request form in your Google account on your request.
• forms.responses.readonly — to read new tenant requests submitted through that form and turn them into tasks.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Payments

Paid subscriptions are processed by Lava.top. When you pay, Lava.top collects your email address and payment details according to its own privacy policy. We receive only your email and subscription status — never your card details.

5. Data retention and deletion

Your spreadsheet and Drive data remain in your Google account forever — they are yours; delete them anytime in Google Drive. Your email + subscription record is kept while your subscription exists and is deleted upon request. To request deletion, email us at the address below.

6. Third-party services

• Google APIs (Sheets, Drive, Forms, OAuth) — store and sync your data in your account.
• Supabase — stores your email and subscription status.
• Render — hosts the subscription verification server (processes email lookups).
• Lava.top — payment processing.

7. Security

All communication uses HTTPS. Webhook authenticity is verified cryptographically. We store no Google access tokens on our servers — tokens live only inside your browser.

8. Changes to this policy

If we change this policy, the updated version will be posted at this URL with a new "Last updated" date.

9. Contact

Questions or deletion requests: ShevcovIvanA@gmail.com