Overview
Airtable to Sheets moves your Airtable records into a Google Sheet that you already own. We do not keep a copy of your spreadsheets or your Airtable records. For manual and
scheduled syncs the add-on runs entirely inside Google's infrastructure and talks directly to Airtable's
API, so no record ever reaches a server of ours.
If you turn on live sync, a backend service of ours does take part, because a change has to be carried
between Airtable and your sheet at a moment when no browser is open. What that service holds, for how
long, and how it is protected is set out under What We Store, How We Protect Your Data, and Data Retention and Deletion below.
Authentication
We use Airtable's official OAuth 2.0 authentication system. Your Airtable credentials are never seen or stored
by us. Authentication tokens are stored securely in Google's PropertiesService (your personal Google account
storage) and are only used to communicate with Airtable's API. Access tokens expire after 1 hour and are
refreshed automatically. Refresh tokens are valid for 60 days.
Airtable OAuth Scopes
The add-on requests four Airtable OAuth scopes:
- schema.bases:read reads base, table, field, and view structure so you can browse your
bases and map fields to columns
- data.records:read reads record data from the tables and views you choose to sync
- data.records:write writes your Google Sheet edits back to Airtable records when you turn
on two-way sync for a sheet
- webhook:manage registers and removes Airtable webhooks on your bases when you turn on
live sync, so Airtable can notify the add-on of changes
The add-on writes to Airtable only in one case: you turned on two-way sync for a specific synced sheet, and
you edited a row in that sheet. Those edits are queued and pushed to Airtable when you run the update.
Sheets without two-way sync are never written back. Deleting a row in your sheet does not delete the record
in Airtable, and linked record, attachment, and collaborator fields are never written back even when
two-way sync is on. You choose which bases to share during the OAuth consent screen.
What Data We Access
The add-on accesses the following data from your Airtable account:
- Records: Record data from the tables and views you choose to sync
- Fields: Field definitions (names, types, IDs) for column mapping
- Base/table/view schema: Navigation structure so you can browse and select sync sources
Data flows directly from Airtable to your Google Sheet. We never store your Airtable data on our servers.
What We Store
In your own Google account. The following sits in Google's PropertiesService, tied to your
Google account and your spreadsheet. We hold no copy of it:
- Sync configuration: your selected bases, tables, views, and sync settings
- OAuth tokens: your Airtable authentication tokens
- Subscription status: your plan tier and subscription ID, used to unlock features
On our backend. Nothing below is created unless you turn on live sync or two-way sync, and
all of it is removed when you disconnect:
- Your Google account email, used as the key that ties a sync to the person who set it up
- An encrypted Google OAuth refresh token, collected through the separate authorization
screen shown when you switch a sync to live. It lets the backend write a change into your sheet after the
browser has closed. It is stored encrypted and is never used for anything but that write.
- An encrypted Airtable OAuth token, used the same way for the Airtable side
- Live sync registrations: the spreadsheet ID, sheet ID, base ID, and table ID of each sync,
so an incoming Airtable notification can be matched to the right tab
- A short-lived queue of pending edits: for a row you edited in the sheet, the row number
and which columns changed, held only until the edit is pushed to Airtable
- Install and trial records: your email, first name if Google supplies one, and the dates
you installed, connected, first synced, and started or ended a trial
One exception is worth naming plainly. To stop a change we just pushed to Airtable from bouncing straight
back into your sheet, the backend briefly records the cell values it wrote so it can recognise its own echo.
Those values are deleted automatically five minutes later. This is the only case in which any content from
your sheet rests on our infrastructure at all, and it is never read for any other purpose.
Google Workspace Permissions
The add-on requests these Google OAuth scopes and no others:
- .../auth/spreadsheets reads and writes the spreadsheet you chose as the destination for a
sync
- .../auth/script.external_request lets the add-on call Airtable's API and our own backend
- .../auth/script.scriptapp creates the background triggers that run scheduled syncs and
detect your sheet edits
- .../auth/userinfo.email reads your Google account email, which identifies your
installation, your plan, and your trial
How We Use Google User Data
"Google user data" means the data the scopes above give us access to. Each one is used for a single stated
purpose, and for nothing else:
- Your spreadsheet content is read so that a sync can tell which rows already exist, which
rows you edited, and where each column belongs. It is written so that Airtable records can be placed into
the tab you selected, and so that rows you edited can be pushed back to Airtable when you turn on two-way
sync. It is used for no other purpose.
- Your Google account email is used to identify your installation, to apply your plan and
trial, to tie a live sync to the person who created it, and to send you service email about your own
account, such as a trial ending or a payment failing.
- Your Google authorization for live sync is used only to write a change into the
spreadsheet you already selected. It is never used to open, list, or search any other file.
We do not sell Google user data. We do not share it with advertisers, data brokers, or any third party for
their own purposes. We do not use it for advertising, credit, or lending decisions, and we do not use it to
train any AI or ML model. The add-on contains no AI or ML component. We do not build profiles of you and we
do not analyse the contents of your spreadsheets.
How We Protect Your Data
Sensitive data, meaning your OAuth tokens and anything read from your spreadsheet, is protected as follows:
- Encrypted in transit. Every connection is HTTPS with TLS. This covers the add-on to
Google's APIs, the add-on to Airtable, and the add-on to our backend. We accept no unencrypted traffic.
- Encrypted at rest. Every OAuth token our backend holds, for Google and for Airtable
alike, is encrypted with AES-256-GCM under a fresh random initialisation vector per token. The encryption
key is held as a server-side environment variable and is never written to the database, so a copy of the
database on its own does not yield a usable token.
- Tokens are never exposed to the browser. Decryption happens only inside our backend at
the moment a token is exchanged. No token is sent to any web page, and none appears in a URL.
- Authenticated access. Every call from the add-on to our backend carries a shared secret
and is rejected without it. Airtable's change notifications are verified by an HMAC-SHA256 signature
before they are acted on, so a forged notification cannot cause a write to your sheet.
- Least privilege. Tokens in your own Google account sit in user-scoped storage, readable
only by your account. Our backend holds the smallest set of identifiers it needs to route a change, and
no spreadsheet content beyond the five-minute echo record described above.
- No human access. Staff do not read your spreadsheet content or your Airtable records.
Production access is limited to the people who operate the service, and is used only to keep it running,
to investigate abuse or a security problem, or where the law requires it. We will ask your permission
before looking at anything specific to your account for a support request.
Data Retention and Deletion
We keep no copy of the contents of your spreadsheets or your Airtable records. Those are read and written in
place and are kept only by Google and Airtable. Everything we do retain is listed below with its own
lifetime. The first four items are Google user data:
- Google OAuth refresh token (live sync): kept while live sync is on. Turning live sync
off, disconnecting, or revoking the add-on's access from your Google account marks it revoked at once and
it is deleted permanently within 30 days. You can also revoke it yourself at any time at myaccount.google.com/permissions.
- Google account email: kept while your installation is active, so that your plan and
trial resolve correctly. Deleted on request.
- Spreadsheet and sheet identifiers: kept for as long as the live sync that uses them
exists. Deleting the sync or disconnecting deletes them.
- Pending sheet edits and echo records: deleted as soon as the edit is pushed to Airtable.
Echo records expire automatically five minutes after they are written, whether or not anything else
happens.
- Airtable access tokens: expire after 1 hour. Refresh tokens are valid for 60 days and are
deleted the moment you disconnect.
- Sync configuration: your selected bases, tables, views, and settings are kept in Google's
PropertiesService for as long as the sync exists. Deleting a sync deletes its configuration.
- Install and trial record: your email, plan tier, and trial dates are kept while your
installation is active, so that features and trial eligibility resolve correctly.
You can delete this data yourself at any time, without contacting us:
- Disconnect in the add-on menu removes your Airtable connection, all sync configuration,
and every background trigger the add-on created.
- Uninstalling the add-on removes its stored properties from your Google account along with
it.
- Revoking access at myaccount.google.com/permissions withdraws the Google authorization directly. Our backend marks the token revoked the next time it is
used and deletes it permanently within 30 days.
Disconnecting keeps one small record against your Google account, holding your plan tier and trial start
date, so that reconnecting does not hand back a trial already used. To have that deleted as well, along with
anything else we hold about you, write to hello@airtabletosheets.com and we will erase it within 30
days and confirm to you when it is done. Any spreadsheets and tabs the add-on wrote are yours and are never
deleted by us.
Limited Use of Google User Data
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms:
- We use Google user data only to provide and improve the sync features described on this page, and for no
other purpose.
- We do not sell Google user data, and we do not transfer it to data brokers or advertisers.
- We do not use Google user data for advertising, credit, or lending decisions.
- We do not use Google user data to develop, improve, or train any AI or ML model, and we do not pass it to
any third-party service that would. The add-on contains no AI or ML component.
- Humans do not read your data, except where you have given permission for a specific support request, where
it is needed for security purposes such as investigating abuse, or where the law requires it.
Third-Party Services
Airtable to Sheets integrates with:
UpSys is not affiliated with Airtable (Formagrid, Inc.).
Website Analytics
Our marketing website uses Umami, a privacy-focused analytics
tool that does not use cookies and does not collect personal information. The Google Sheets add-on itself
does not include any analytics or tracking.