Privacy Policy

What Pluckr does

Pluckr is a Google Docs add-on that extracts embedded inline images from the document where you open its sidebar. It lists image previews, names, dimensions, and file sizes, and lets you copy, download, rename, or convert images to AVIF, WebP, JPEG, or PNG. Image conversion and resizing run in your browser. Google Apps Script reads document image data and prepares ZIP archives of original images when you request them.

Pluckr is sold as a one-time purchase. To tell whether you have bought it, the add-on asks Google for an identity token for your account and sends that token to Pluckr’s licence service, which answers whether a paid licence exists for your account.

Information the add-on accesses

• Images in the current document. After you choose to scan or refresh a scan, Google Apps Script reads embedded inline images from the document body, including images nested in tables and document tabs. It reads image bytes, file type, and dimensions to display and export those images. It does not currently extract floating images or images in headers, footers, or footnotes.
• Document name. Google Apps Script uses the document name to name an original-image ZIP download.
• Google account identity and email. When you open Pluckr, the add-on asks Google for an identity token. The token contains your Google account ID and, because the add-on requests the email scope, your email address. They are used only to check and record your licence.
• Licence and purchase record. Pluckr’s licence service stores your Google account ID, your email address, whether you have a paid licence, the date of purchase, and the order and customer references from Polar. It does not store document content or your identity token.
• Authorization. The add-on requests access to the current document, permission to display a Google Docs sidebar, and your Google account identity and email for licence checks. Its manifest uses the documents.currentonly, script.container.ui, openid and userinfo.email scopes. It does not request access to browse your entire Google Drive.

How document data is handled and shared

Google Apps Script reads image bytes from the current document and returns them to the sidebar for previews and browser-side conversion. When you request a ZIP of originals, Apps Script assembles that archive and returns it to the sidebar. This means image data is processed by Google Docs and Google Apps Script, which are operated by Google LLC, as necessary to provide the add-on’s features. Pluckr does not send document images to a separate Pluckr server or disclose them to other companies or people. The add-on’s only requests to Pluckr’s licence service contain your identity token and nothing from your document. When you download a file, it is transferred to your device at your request; when you click Copy, the image is written to your device clipboard. Google may process data under its own terms and privacy practices.

We do not sell Google user data, use it for advertising, allow human review of document images, train AI or machine-learning models with the data, or share it for purposes unrelated to the add-on’s image extraction and export features. Website hosting and content-delivery providers may receive ordinary connection information when you visit docpluckr.com, as described below; they do not receive document image data through the add-on.

Licence checks and purchases

Pluckr is a one-time purchase. Payments are processed by Polar. When you buy, Polar collects your payment and billing details under its own privacy policy; Pluckr does not receive or store your card number. To start your checkout, Pluckr’s licence service gives Polar your Google account ID, as your customer reference, and your email address. When your payment succeeds, Polar tells the licence service that the order was paid, with your order and customer references and your email address, so your licence can be recorded against your Google account. If your payment is refunded, Polar tells the licence service and your licence is switched off.

Pluckr’s licence service is hosted on Convex. Each time you open Pluckr it verifies your Google identity token with Google’s public keys and looks up the licence for your account. It uses your account ID and email only to check whether you have a paid licence, to provide purchase support and refunds, and to prevent misuse of licences. We do not sell this information, use it for advertising, or share it for purposes unrelated to the add-on. Convex and Polar process it on our behalf under their own terms and privacy policies.

Data protection

Pluckr uses the following safeguards for data accessed by the add-on:

• Limited access. The manifest requests the documents.currentonly scope to limit document access to the document where the add-on is being used, script.container.ui to display its sidebar, and openid and userinfo.email to identify your licence. Google authorization controls access, and you can revoke it through your Google Account permissions.
• Encryption in transit. Image data moves between Google Docs, Google Apps Script, and the sidebar through Google’s Apps Script service. Connections to Google services use HTTPS/TLS, and Google manages the service and infrastructure safeguards. See Google’s encryption-in-transit documentation.
• Temporary processing. The add-on holds image data and conversion results in memory while a scan, preview, conversion, or download is being prepared. It does not write document image bytes to persistent storage or application logs. The add-on does not keep a separate copy after the requested operation completes.
• Identity verification. The licence service accepts only identity tokens that Google has signed and that were issued for this add-on, and it does not store the token. Requests to it use HTTPS.
• Server-side licence check. The add-on’s server code reads document images only after it has verified a short-lived licence confirmation, signed by the licence service and tied to your Google account.
• No separate image store. Pluckr does not create a persistent server-side copy or apply a separate encryption layer to document images. Google’s own security and data-handling practices govern its processing of data in Google services.

These measures describe the current add-on implementation. They do not make Pluckr responsible for Google’s independent infrastructure, security controls, or retention practices.

Retention and deletion

Pluckr does not retain document images after the requested operation. Image previews and conversion results exist in sidebar memory while needed; original-image ZIP archives are generated for the download you request. Closing the sidebar releases its in-memory data. Downloads saved to your device remain there until you delete them. Google’s independent operational retention, if any, is governed by Google’s policies. You can stop future access by uninstalling the add-on and revoking its authorization in your Google Account settings.

Pluckr keeps your licence record (Google account ID, email address, licence status, purchase date, and Polar order and customer references) for as long as your licence is active, and keeps a refunded purchase on record as well, until you ask us to delete it. To have your record deleted, email support@docpluckr.com. Deleting it ends your licence, and we cannot restore it without proof of purchase. Polar keeps payment and tax records for the period the law requires, under its own policy.

Website and third-party services

Google hosts the Docs add-on and Apps Script runtime. Convex hosts Pluckr’s licence service and Polar processes payments, as described above. The docpluckr.com website is hosted by Cloudflare and loads some scripts from content-delivery networks, including Webflow’s. When you visit the website, those providers may receive ordinary connection information such as your IP address, browser details, and requested URLs under their own policies. Pluckr does not use this add-on to serve advertising or behavioral analytics.

Google API Services and Limited Use

Pluckr’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the image-extraction and export features you request and to check and record your licence. Your Google account ID and email address are never used for advertising or sold, and humans do not read them except with your consent, for security, or to comply with law. We transfer them only to our service providers, Convex and Polar, as needed to provide these features.

Revoking access

You can revoke Pluckr’s authorization from your Google Account permissions or uninstall the add-on from Google Docs. Revoking access prevents future authorized use of the current document by the add-on. You can also choose Log out in the add-on’s menu, which revokes its authorization. Revoking access does not delete your licence record; to delete it, email support@docpluckr.com.

Changes to this policy

We will update the “Last updated” date when this policy changes. If a change affects how the add-on handles Google user data, we will describe the updated practices here.

Terms of Use

Your use of Pluckr is also governed by our Terms of Use.

Contact

Questions or privacy requests? Email support@docpluckr.com.