Fireform and Google Sheets

What Fireform does

• Create a new spreadsheet in the connected Google account, when you ask it to.
• Append a row to the spreadsheet and tab you named, each time someone submits that form.
• Read and write the header row of that tab, so your form fields line up with its columns.
• Show you which Google account is connected, using its email address.

What Fireform never does

• Open, read, or change any other kind of file in your Google Drive. Fireform holds no Drive permission at all.
• Read or write any spreadsheet other than the one you named, or delete spreadsheets, files, or rows.
• Sell or rent your Google data, or share it with advertisers or data brokers.
• Use your Google data to train machine learning or AI models, or send it to a third-party AI service.

About the permission we ask for

Google grants the Sheets scope at the account level, so the permission it issues technically covers spreadsheets in your account rather than a single file. We would rather say that plainly than imply a narrower grant. In practice Fireform reads and writes only the spreadsheet and tab you named.

We ask for it because you can identify a spreadsheet by pasting its URL or ID, including one someone else shared with you, and because a connected account is shared across a workspace. Google's narrower per-file scope covers only files an app created or that the signed-in person picked through Google's own file picker, and neither fits how this works.

Who can use a connected account

A Google account is connected to a workspace, not to one form. Every form in that workspace can select it, and so can anyone you give access to that workspace. They never see the stored credentials, but they can point their own form at a spreadsheet that account can reach.

Connect an account only to a workspace whose members you trust with that access. You can see every connected account, and disconnect any of them, from your workspace settings.

How your Google data is handled

Connecting Google Sheets stores your Google account email address, an access token and a refresh token (encrypted), and the spreadsheet ID and tab name you entered, on our European Union infrastructure. We use them for one thing only: writing your form responses into the tab you named. The response data itself is the data your own respondents submitted to your own form.

For each delivery we record only whether it succeeded or failed. We never store the contents of your spreadsheet, and we never build aggregated or derived data sets out of your Google data.

Fireform's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs, including the Google Sheets API, adheres to that policy and its Limited Use requirements.

Disconnecting and deleting

Disconnecting a Google account, from your workspace settings or from a form's integration settings, deletes the stored tokens immediately. Fireform can no longer reach that account, and every form in the workspace that was using it stops delivering. Deleting the workspace does the same. If your paid access ends and you do not renew within 30 days, we delete the tokens automatically.

Removing the integration from a single form, or clearing the spreadsheet URL, only stops that one form. It leaves the account connected and your other forms working. Disconnecting the account is what deletes the credentials.

You can also remove Fireform's access from your Google Account permissions page, which ends our access at once and permanently. Fireform does not detect that you have done it, so disconnect the account here as well, or email us at riddhesh@fireform.app, to have the unusable tokens removed. Rows already written, and any spreadsheet Fireform created for you, stay in your Google account, because those files belong to you, not to us.