▤Basepull

Privacy Policy

Basepull is a Google Sheets add-on operated by Omoseka Inc. (株式会社おもせか), Okayama, Japan.

What the add-on accesses

The add-on requests permission to read and write only the spreadsheet it is opened in (spreadsheets.currentonly), to call external web services (script.external_request, used solely for api.airtable.com and our license server), to create time-based triggers for scheduled syncs, and to read your Google account email address.

Where your data goes

Airtable records are fetched by Google Apps Script running inside your own Google account and written directly into your spreadsheet. They are never transmitted to, stored on, or visible to Omoseka Inc. Basepull connects to Airtable using Airtable's official OAuth 2.0 flow, so we never ask for or receive an API key. The resulting access and refresh tokens are stored in your Google account's user properties for this add-on, can be deleted at any time with "Disconnect Airtable", and can be revoked from your Airtable account settings.

What we store

To verify Pro subscriptions, the add-on sends your Google account email address to our license server. We store the email, Stripe customer and subscription identifiers, and subscription status. Payments are processed by Stripe; we never see card numbers.

Limited Use disclosure

Basepull's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it.

Sharing, transfer and disclosure

We do not sell, rent or trade Google user data, and we do not share it with third parties for their own purposes. Airtable records never reach our servers: they are fetched by Apps Script running in your own Google account and written straight into your spreadsheet. The only Google user data that leaves your account is your Google account email address, which is sent to (a) our own licence endpoint, a Google Apps Script web app operated by Omoseka Inc., and (b) Stripe, Inc., our payment processor, acting on our instructions solely to identify your subscription. Beyond these two, we disclose data only when required by law or valid legal process. We do not use Google user data for advertising or profiling, and we do not use it to develop, improve or train generalised artificial intelligence or machine learning models.

How we protect your data

All traffic between the add-on, Airtable, our licence endpoint and Stripe uses HTTPS with TLS. Your Airtable OAuth tokens and your sync settings are held in Apps Script user properties inside your own Google account and are encrypted at rest by Google; we have no way to read them. Licence records (email address, Stripe customer and subscription identifiers, status) are stored in a Google account protected by two-step verification and are accessible only to the company representative, on a least-privilege basis. Calls to the licence endpoint require a shared secret. Records are kept only while the subscription is active and are deleted within 30 days of a deletion request.

Who we are, and your rights

The data controller is Omoseka Inc. (株式会社おもせか), 1492-5 Tamasu, Kita-ku, Okayama 701-1154, Japan. For any privacy question or request, write to mail@omoseka.com and we will respond within 30 days.

Where the EU or UK GDPR applies to you, our legal bases are: performance of a contract for the licence check that keeps your subscription working, and our legitimate interests in running and securing the service for support and abuse prevention. We do not rely on consent for marketing because we do not send marketing email.

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing, and to receive it in a portable form. Exercise any of these by emailing us. You also have the right to lodge a complaint with your local supervisory authority.

On international transfers: we are established in Japan, which the European Commission has recognised as providing an adequate level of data protection, so no additional transfer mechanism is required for data moving from the EEA to us. Our payment processor, Stripe, Inc., is in the United States and operates under its own data protection framework and standard contractual clauses.

We keep licence records only while your subscription is active, and delete them within 30 days of cancellation or of a deletion request. The service is not directed at children and we do not knowingly collect data from anyone under 16.

Deletion

Uninstalling the add-on and clicking "Disconnect Airtable" removes all stored properties from your Google account. Email mail@omoseka.com to have your license record deleted.

Last updated: September 23, 2026