Privacy Policy

← Reports Exporter for Xero

Reports Exporter for Xero, published by Cody Labs. Effective 28 September 2026.

Reports Exporter for Xero (the "add-on") moves your Xero data into your own Google Sheets. This policy explains what the add-on accesses and how that data is handled. The short version: your data flows directly between your Xero account and your Google Sheet. Report processing takes place in Google Apps Script; your financial report data and Xero OAuth tokens are not sent to Cody Labs servers.

Information the add-on accesses

• A Xero OAuth connection you authorize, used to authenticate to the Xero Accounting API on your behalf, scoped to the five supported read-only reports and organisation settings used to resolve financial-year dates.
• Financial report data, the report rows returned by the Profit and Loss, Balance Sheet, Trial Balance, Bank Summary, and Executive Summary reports you choose to save and run.
• Google spreadsheets you authorise: interactive exports use spreadsheets.currentonly; scheduled refresh uses drive.file and the Google Sheets API for individual spreadsheets you explicitly grant to the add-on. The add-on asks Google to grant access to the active document through its file-access prompt before enabling the report controls. This does not grant access to every file in your Drive.

Where your data goes

All processing happens inside Google's Apps Script runtime, in your Google account. Financial data is fetched from your Xero account and written into your spreadsheet. It is not sent to Cody Labs servers or Polar. Google Apps Script and the Google Sheets API process it to carry out your exports.

How your Xero OAuth connection is stored

Your Xero OAuth tokens are stored per user by the official Apps Script OAuth2 library, scoped to your Google account. They are never written into the spreadsheet and are not visible to other people you share the sheet with. Disconnect removes the locally stored Xero connection and attempts to revoke its refresh token with Xero. You can also manage the connection in Xero and revoke the add-on's Google access in your Google account.

License verification

If you enter a license key to unlock paid features, the add-on sends only that license key and the Cody Labs organization identifier to our payment processor, Polar, to confirm your subscription is active. No Xero data is involved. See Polar's privacy policy. A disabled legacy Gumroad verifier remains in the release only as a rollback path and is not called during normal use.

How the add-on uses Google user data

The add-on reads and writes spreadsheets you authorise for your saved exports. It uses spreadsheet metadata, destination tabs and completion notes to write and refresh the Xero reports you choose. Interactive access uses spreadsheets.currentonly. Background refresh uses drive.file and the Google Sheets API, so a scheduled spreadsheet does not need to be open. Each user's schedule registry stores the authorised file identifier, Xero organisation identifier, report configuration and latest execution status in Apps Script User Properties. The add-on:

• does not request unrestricted Drive access and uses background file access only for spreadsheets explicitly authorised for saved exports;
• never uses your Google user data for advertising, profiling, or training any model;
• never sells your Google user data or shares it with third parties; and
• never transmits it to Cody Labs or any external server, all processing runs inside Google's Apps Script runtime under your own account.

The add-on's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Data protection & security

We protect your data, including any sensitive data, with the following mechanisms:

• Encryption in transit: every network request (to the Xero API, and to Polar for license checks) is made over encrypted HTTPS/TLS.
• Encrypted, isolated credential storage: your Xero OAuth tokens are held by the official Apps Script OAuth2 library, encrypted at rest by Google and scoped to your own Google account. They are never written into the spreadsheet and are never exposed to other people you share the sheet with.
• Least-privilege access: the add-on requests spreadsheets.currentonly for interactive spreadsheet access, drive.file for explicitly authorised files, script.container.ui for its interface, script.external_request for the services described here, and script.scriptapp for its scheduled triggers.
• Read access only: this add-on only reads Xero data into your spreadsheet; it never writes back to your Xero account.
• Report processing: financial report rows and Xero OAuth tokens stay in the Google Apps Script and Sheets workflow described above; they are not sent to Cody Labs servers.
• Connection controls: disconnect removes the stored Xero connection and attempts remote token revocation. Scheduled exports stop fetching Xero reports when no authorised Xero connection is available. To cancel a schedule, set it to Manual only and save, or delete the saved export.

Data retention & deletion

Your Xero OAuth connection is stored in Apps Script User Properties and removed locally when you disconnect. Saved export settings and background schedule records are separate from the connection; successfully saving an export as Manual only or deleting it removes that export from the background registry. When a file has no scheduled exports left, its registry entry is removed. If file access is lost, the record remains with an error status until you remove its schedules after restoring access; disconnecting Xero does not itself delete saved export settings. Report data remains in your spreadsheet until you change or delete it. The add-on also keeps aggregate milestone counts (such as successful exports and licence activations) in Apps Script Script Properties and per-user flags to avoid counting a milestone twice. These counts contain no report rows or financial data.

Third-party services

• Xero: your own Xero account, accessed with the Xero OAuth connection you supply.
• Polar: handles paid subscriptions and verifies license keys during normal use.
• Gumroad: a disabled legacy verifier is retained only as a rollback path and is not called during normal use.

Changes

We may update this policy; material changes will be reflected by the effective date above.

Contact

Questions about this policy: [email protected].

Google Sheets™ is a trademark of Google LLC. Xero is a trademark of Xero Limited. This add-on is built by Cody Labs and is not affiliated with, endorsed, or sponsored by Google LLC or Xero Limited.