Privacy Policy

Privacy Policy for Feedback Assistant

Last updated: 31/03/2026

Feedback Assistant is a Chrome extension designed to help teachers and assessors insert pre-written feedback comments into Google Docs, Google Sheets and Google Slides using a personalised comment bank stored in Google Sheets.

This Privacy Policy explains what data is accessed, how it is used, and how it is protected.

1. Overview

Feedback Assistant does not collect, store, or transmit personal data to external servers. All data processing is limited to the functionality required to operate the extension.

2. Google Account Access (Identity Permission)

The extension uses Google authentication via Chrome Identity to allow users to securely access their own Google Drive and Google Sheets.

This access is used solely to:

• Locate or create a user-specific folder ("Feedback Assistant")
• Create and manage Google Sheets used as comment banks within the application
• Read and update comment data (abbreviations and associated feedback) stored in spreadsheets created by the extension

The extension does not access emails, contacts, or any other Google account data.

3. Google Drive and Google Sheets Data

The extension interacts with the Google Drive and Google Sheets APIs to:

• Create and manage a folder structure for comment banks
• Create new comment bank spreadsheets where required
• Write initial example comments to newly created spreadsheets
• Read and update data from spreadsheets and tabs created and managed by Feedback Assistant

All data accessed remains within the user’s Google account. No data is copied, transferred, or stored externally.

The extension does not access or scan the user’s entire Google Drive and only interacts with files created and managed within the Feedback Assistant folder.

4. Local Storage (Storage Permission)

The extension uses Chrome’s local storage to store:

• The currently active comment bank (abbreviations and comments)
• User selections such as chosen spreadsheet and tab

This data is stored locally on the user’s device and is not transmitted outside of the browser.

5. Content Interaction (Host Permissions)

The extension runs only on:

• Google Docs (docs.google.com)
• Google Sheets (docs.google.com/spreadsheets)
• Google Slides (docs.google.com/presentation)

Within these environments, the extension:

• Inserts user-selected or expanded comments into comment boxes
• Detects typed abbreviations and replaces them with full comments

The extension does not read, modify, store, or transmit the main document content.

6. No Data Collection or Tracking

Feedback Assistant:

• Does not collect personal data
• Does not track user activity
• Does not use analytics or tracking tools
• Does not use cookies
• Does not transmit any user data to external servers

7. No Remote Code Execution

The extension does not load or execute remote code. All scripts are packaged within the extension and run locally in the user’s browser.

8. Data Security

All interactions with Google services are handled via secure HTTPS connections and authorised using Google’s OAuth 2.0 framework.

User data remains within:

• The user’s Google account (Google Drive / Sheets)
• The user’s local browser storage

9. Data Retention and Deletion

Feedback Assistant does not store user data on external servers.

Data accessed through Google Drive and Google Sheets remains entirely within the user’s Google account and is limited to files created and managed by the extension. This data is subject to Google’s own data retention and deletion policies.

Any data stored locally by the extension is retained only while the extension is installed and is automatically removed when the extension is uninstalled.

Users can delete data at any time by:

• Deleting or modifying spreadsheets and folders within their Google Drive
• Clearing browser storage
• Removing the extension from their browser

When the extension is removed, all locally stored data associated with Feedback Assistant is deleted from the user’s device.

10. Third-Party Services

The extension only interacts with:

• Google Drive API
• Google Sheets API
• Chrome Extension APIs

No other third-party services are used.

11. User Control

Users have full control over their data:

• Comment banks can be edited or deleted at any time within Google Sheets
• Local storage can be cleared via browser settings
• The extension can be disabled or removed at any time

12. Changes to This Policy

This Privacy Policy may be updated to reflect changes in functionality or compliance requirements. Updates will be reflected in the "Last updated" date.

13. Contact

If you have any questions regarding this policy, please contact:

Rob Cooper
rob.feedbackassistant@gmail.com