Calrows
Calrows for IT admins
Calrows is a Google Sheets™ add-on that turns spreadsheet rows into Google Calendar™ events, exports a calendar to a sheet, and builds timesheets from calendar events. This page is written for the Google Workspace administrator who has been asked to approve it. It lists exactly what the add-on accesses, what it never does, where data goes, and the Admin console steps to approve or install it. Questions: [email protected], answered within one business day.
Someone on your team was blocked when installing Calrows? That means your organisation only allows approved Marketplace apps, which is a sensible default. The steps in Approving Calrows take about two minutes. If you are the employee, here is a note you can send your admin.
At a glance
| App name on the Marketplace | Calrows: Sheets™ Calendar™ Sync, Export, Timesheet (app ID 163011926713) |
|---|---|
| Listing | workspace.google.com/marketplace/app/calrows_sheets_calendar_sync_export_time/163011926713 |
| Type | Editor add-on for Google Sheets™ (Apps Script). Appears under Extensions › Calrows inside a spreadsheet. |
| Developer | Calrows, an independent developer based in Bengaluru, India. Contact |
| Google OAuth verification | Completed. The Calendar scope is a Google "sensitive" scope, and the app passed Google's verification for it. |
| Where your data is processed | Inside Google's own infrastructure (Apps Script, Sheets, Calendar), under each user's account. Nothing is copied to Calrows servers. |
| Outbound connections | One: licence.calrows.com (Cloudflare Workers), which receives the user's email address and a licence key to answer "Free or Pro". No spreadsheet or calendar content is ever sent. |
| Payments | Paddle.com Market Ltd is the merchant of record. Calrows never sees card details. |
| AI | None. No data is used for AI, machine learning or advertising. |
| Policies | Privacy policy · Terms of service · Refund policy |
What Calrows asks for, and why
These are the exact OAuth scopes declared by the add-on. A user sees them on Google's permission screen the first time they open Calrows.
| Permission shown to the user | Scope | What Calrows does with it |
|---|---|---|
| View and manage spreadsheets that this application has been installed in | spreadsheets.currentonly | Reads the rows in the spreadsheet the user opens the add-on in, and writes event IDs, exports, timesheets and the Sync Log back into that same spreadsheet. It cannot open any other spreadsheet. |
| See, edit, share, and permanently delete all the calendars you can access using Google Calendar | calendar | This is the standard wording for Google's CalendarApp service, which has no narrower option for add-ons. Calrows uses it only to list calendar names in the picker, then to create, update and read events in the one calendar the user selects. See what it never does. |
| Display and run third-party web content in prompts and sidebars inside Google applications | script.container.ui | Shows the Calrows sidebar inside Google Sheets. |
| Allow this application to run when you are not present | script.scriptapp | Runs automatic sync on a schedule (every hour, 6 hours or day) only if the user turns it on, and continues long syncs in chunks so large sheets finish within Google's time limits. |
| Connect to an external service | script.external_request | The single licence check to licence.calrows.com, described above. |
| See your primary Google Account email address | userinfo.email | Identifies the account for the licence check, so Pro can be unlocked per person. |
What Calrows never does
- Never creates, deletes or re-shares a calendar, and never changes who a calendar is shared with.
- Never reads calendars the user did not select, except to list their names in the calendar picker.
- Never reads spreadsheets other than the one the add-on is opened in.
- Deletes an event only when all three are true: Calrows itself created the event, its row has been removed from the sheet, and the user clicks Remove and confirms. The same deletion can run on a schedule only if the user explicitly ticks that option when turning on automatic sync.
- Never sends invitations on the user's behalf: people listed in a Guests column are added to the event as guests, with invitation emails switched off.
- Never stores spreadsheet contents or calendar events on any server operated by Calrows.
- Never sells, rents or shares data with anyone, and never uses it for advertising, profiling or model training.
- Never emails users from the add-on.
What is stored, and where
| Location | Data | Who controls it |
|---|---|---|
| Inside the user's spreadsheet (Google Drive) | A hidden column of event IDs, a hidden tab listing the events Calrows created, a Sync Log tab, the column mapping and the chosen calendar. | The user. Deleting those tabs or the spreadsheet removes it. |
| Apps Script user properties (Google) | A monthly count of new events on the free plan, and a cached "is this account Pro" answer. | Google, under the user's account. |
| licence.calrows.com (Cloudflare Workers, KV storage) | For paying customers only: the email address given at checkout, the plan and its expiry date. Free users are looked up but no record is created for them. | Calrows. Deleted on request to [email protected]. |
| Paddle | Checkout email and payment details entered by the buyer. | Paddle, as merchant of record. |
Approving Calrows in the Google Admin console
Only an administrator of your Google Workspace organisation can do this; Calrows cannot change these settings from its side. Steps and menu names are from Google's own documentation, linked at the end of each step.
- Allow users to install it. Admin console › Apps › Google Workspace Marketplace apps › Apps list › Allowlist app. Search for Calrows, select it, choose the organisational units or groups it applies to, and click Finish. Calrows then appears under "Approved for you" in the Marketplace for those users. (Google help: manage the Marketplace app allowlist)
- If your organisation restricts Calendar data for third-party apps, mark Calrows as Trusted. Admin console › Security › Access and data control › API controls › Manage App Access › Configure new app. Search for Calrows, choose Trusted, and click Finish. Without this, users in a restricted organisation see an error when the add-on tries to reach Calendar. (Google help: control which third-party apps access Google Workspace data)
- Optional: install it for everyone, or for selected groups. Admin console › Apps › Google Workspace Marketplace apps › Apps list › Install app. Search for Calrows, then choose Everyone at your organization or Certain groups or organizational units, and click Finish. Calrows then appears under Extensions in Google Sheets for those users without each person installing it. (Google help: install Marketplace apps for your organization)
An admin install does not give Calrows, or anyone else, access to your organisation's data. The add-on still runs under each user's own account, in the spreadsheet they open and the calendar they choose, and each user may still be shown Google's permission screen the first time they use it.
Plans for organisations
- Free: every user. Manual sync both ways, 50 new events a month, exports and timesheets up to 50 events at a time.
- Pro: per person, $6 for a month or $48 for a year. A one-time payment with no automatic renewal, bought by the user at calrows.com/pricing.
- Team: one yearly payment for up to 10 people ($190), 25 people ($390) or 50 people ($690). Send the list of email addresses after purchase and each person is switched on within one business day. Pro is tied to each person's Google account, so it works the same whether users installed Calrows themselves or an admin installed it for them. Details and the quote request are at calrows.com/pricing.
For security questionnaires
| Hosting | Google Apps Script for all add-on logic; Cloudflare Workers and KV for the licence server; Cloudflare Pages for this website. |
|---|---|
| Data in transit | HTTPS only. |
| Sub-processors | Google (add-on runtime, Sheets, Calendar), Cloudflare (licence server, website), Paddle (payments). No others. |
| Data retention | Nothing retained outside the user's Google account except the licence record for paying customers, kept while the licence is valid and deleted on request. |
| Data deletion | Users remove in-sheet data by deleting the tabs or spreadsheet; licence records are deleted on request to [email protected]; revoking access at myaccount.google.com/permissions stops all access immediately. |
| Access by Calrows staff | No access to any customer's spreadsheet or calendar data. The licence server exposes only email, plan and expiry, to the developer. |
| Incident contact | [email protected] |
For employees: a note to send your admin
If Google told you that your administrator needs to approve Calrows, copy this into an email or chat message to your IT team.
Hi, I'd like to use Calrows, a Google Sheets add-on that syncs spreadsheet rows with Google Calendar and builds timesheets from calendar events. It's blocked for our organisation at the moment.
It's verified by Google, keeps all data inside our Google account, and only connects out to its licence server with my email address. Everything it accesses and the Admin console steps to approve it are on one page: https://calrows.com/admins
Could you allowlist it (Apps › Google Workspace Marketplace apps › Apps list › Allowlist app), and mark it Trusted under API controls if we restrict Calendar access? Thanks!