SkillGrouper Privacy Policy

Effective Date: 10/6/25

SkillGrouper (the “Tool”) is a Google Workspace Add-on developed and maintained by CJD Solutions LLC  ("we", "us", or "our"). This Privacy Policy explains what data SkillGrouper can access, how that data is used, and your rights regarding that data.

By installing or using SkillGrouper, you agree to the terms of this Privacy Policy.

If you do not agree, do not use the Tool.

1. Overview

SkillGrouper is designed for educators to analyze student assessment data and generate instructional groups.

SkillGrouper operates within the user’s Google account and only interacts with spreadsheets that the user explicitly opens the SkillGrouper add-on within.

SkillGrouper contacts an external Apps Script Web App server, only for the purposes of verifying the user's license to use the Tool and to optionally collect aggregate usage data for the user's domain administrator if the Google Workspace domain administrator opts in as described in Section 3.1. No student data is ever transmitted externally.

SkillGrouper does not collect, sell, or share any personally identifiable student information (PII).

This tool is for use by school teachers and administrators. Licenses will only be provided to users over the age of 18.

2. Google Scopes and Access

SkillGrouper requests the minimum necessary Google OAuth scopes to perform its intended educational functions.

a. `https://www.googleapis.com/auth/drive.file` , Non-sensitive

Required to allow SkillGrouper to access and modify only the specific spreadsheet the user opens the add-on in.

b. `https://www.googleapis.com/auth/userinfo.email` , Non-sensitive

User email addresses are used only for verifying license status and, if the user's domain administrator has opted-in, for enabling usage reports as outlined in Section 3.1.

c. `https://www.googleapis.com/auth/spreadsheets` , Sensitive

Allows SkillGrouper to write to the currently open spreadsheet and to copy from the template sheet. This scope is required (rather than the current-only or read-only scopes) in order to create a copy of the template sheet in the user's current sheet and then edit it. 

This scope is strictly used to copy the template spreadsheet and edit the currently open spreadsheet. SkillGrouper may not utilize this scope to access or modify any other spreadsheet files.

d. `https://www.googleapis.com/auth/script.external_request` , Sensitive 

This scope allows SkillGrouper to securely contact a private web app that maintains SkillGrouper's licenses and log of usage statistics. All communications are encrypted using HTTPS. 

SkillGrouper does not contact any external services other than this specific web app. No student data is ever transmitted externally.

SkillGrouper will securely send the user's email to the server to verify the user's license status. If the user's domain administrator has opted-in, the user will securely send aggregate usage information that does not contain any identifying student information to this server to be logged. Explicit restrictions on what data may be logged is outlined in Section 3.1.

This scope is required as it allows users to log usage data to a single secure location without allowing users to read the data of other users. Domain administrators can access the information specific to their domain at any time by contacting us using the information in Section 9.

SkillGrouper does not request or use any additional Google API scopes.

You may revoke SkillGrouper's access to these scopes at any time through your Google Account's security settings.

3. Data Handling and Storage

SkillGrouper’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

SkillGrouper does not use any external databases containing student data. All student data remains fully contained in your Google Sheets files.

The only external data SkillGrouper is required to access outside of the user's active sheet includes:

a. Template Spreadsheet

One specific spreadsheet file owned by cdedrick00@gmail.com is used as a read-only source for creating new SkillGrouper templates when the user selects “Create.” SkillGrouper does not write any data to this spreadsheet.

b. License Database Web App

SkillGrouper makes a UrlFetchApp request to a secure Web App to determine whether the user or their organization has an active SkillGrouper license. The Web App maintains its license data in a private Google Spreadsheet. By default, the Web App does not save any data that it receives from UrlFetchApp requests.

3.1 Usage Logging (Optional Administrator Opt-in)

Usage logging occurs only if the Google Workspace domain administrator opts in at the time of purchase. No data is logged by default.

If SkillGrouper is licensed by a Google Workspace domain, the domain administrator will be presented the option at the time of purchase to opt-in to an optional feature for logging summary-level usage statistics of all accounts within their domain. The log is stored in a private Google Spreadsheet and is not shared with any other users. When the data is requested, a new spreadsheet file is created with a copy of the data filtered to only show users in the requested domain, and is sent to the domain administrator's email as a Google Drive attachment.

The domain administrator can contact CJD Solutions LLC using the contact information in Section 9 at any time to: 

• Opt-in to tracking usage data.

• Opt-out of tracking usage data, at which point SkillGrouper will immediately cease to log usage information for all users within the domain.

• Request to receive the usage data for all users within their domain.

• Request that all usage data be permanently deleted from SkillGrouper's log.

If your Domain Administrator has opted in, the information written to the log contains no student-identifiable data and includes ONLY:

• The current date/time

• The user’s email address

• The name of the assessment

• The total number of students assessed

• The number of students at full proficiency (aggregate only)

• The number of classes flagged for Tier 1 intervention

• The number of students who received needed intervention through Tier 1 (aggregate only)

• The Tier 2 group settings (max # groups, max group size, grouping type, and what to do with students below proficient on multiple skills)

• The number of groups created for Tier 2 intervention

• The number of students grouped into Tier 2 intervention groups (aggregate only)

• The number of ungrouped students, if any (aggregate only)

This information helps administrators monitor general usage and instructional impact while preserving student privacy. 

As a user, you have the right to contact CJD Solutions LLC using the contact information in Section 9 to learn whether your domain administrator has enabled this feature.

4. Data Retention and Deletion

By default, SkillGrouper does not retain, transmit, or store user data on external servers, except for the list of emails and domains with active licenses to use the Tool.

All spreadsheet content, including student names and scores, remains within the user’s Google Drive. If the user's account is part of a Google Workspace domain, the domain administrators retain their access to all files within the user's account, including sheets created by SkillGrouper.

If a user’s license expires, SkillGrouper ceases to access their data entirely, except for their email address (to determine the status of the license). The user retains full access to all previously created spreadsheets and may continue to delete or modify them at any time. Interactive tools in the SkillGrouper side panel will not be able to access or modify the user's data until the license is renewed.

If a Google Workspace domain administrator opts-in to the usage tracking feature described in Section 3.1, summary-level usage data for domain users will be logged in an external Google Spreadsheet via a secure Web App. This usage data is accessible only to the opting domain administrator and CJD Solutions LLC. This data will be retained until the domain administrator requests that it be deleted. This data can be requested by the domain administrator at any time.

5. Data Security

All processing occurs within the Google Sheets environment using Google Apps Script, under Google’s existing security and authentication framework.

By default, SkillGrouper never transmits your spreadsheet content to external systems.

If your account is part of a Google Workspace domain, your domain administrator may have opted-in to reporting summary-level usage statistics to a secure Web App as described in Section 3.1. Any data sent or received by SkillGrouper uses Google's  `https://www.googleapis.com/auth/script.external_request` API to make secure HTTPS requests.

As a user, you have the right to contact CJD Solutions LLC using the contact information in Section 9 to learn whether your domain administrator has enabled this feature.

6. Third-Party Sharing

SkillGrouper does not share user or student data with any third parties. No third-party services, processors, or storage systems are used for data handling or analysis.

CJD Solutions LLC does not sell or transfer any data for advertising, analytics, or marketing purposes.

7. Compliance

SkillGrouper is designed to operate in compliance with:

• The Family Educational Rights and Privacy Act (FERPA)

• The Children’s Online Privacy Protection Act (COPPA)

• Google Workspace Marketplace Developer Data Policy and Limited Use Policy

All data remains owned and controlled by the user or their Google Workspace organization. No identifying student data is made accessible to CJD Solutions LLC through the use of SkillGrouper.

8. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted publicly with a revised effective date. Continued use of the Tool after changes are made constitutes acceptance of the new terms.

9. Contact

For questions about this Privacy Policy or data handling practices, contact: cdedrick00@gmail.com

You can also send responses to the "contact us" form on this website.