What permissions are required to use Magical Forms

When you sign up to Magical Forms, you are asked to accept the following authorizations:

Scope	How we use it
Google Drive icon See, edit, create, and delete all of your Google Drive files	This scope is required to perform the following actions: Copying Magical Forms templates to your Google Drive
See, edit, create, and delete your spreadsheets in Google Drive	This scope is required to perform the following actions: Saving data into the spreadsheets that you've linked to your forms.

Does the Magical Forms server list my files?

No.

Magical Forms only reads your files in the client browser using the Google Picker API. At no point do we browse files in your drive using our backend servers using the Google Drive API.

Does the Magical Forms server read my spreadsheets?

The Magical Forms server will read the first row of spreadsheets that you have linked to a form to get the headers for the columns. It does not read any other part of the spreadsheet.

It does not read any spreadsheets that you have not linked to a form.

Does Magical Forms update my files?

The Magical Forms server will update spreadsheets that you have linked to a form by adding rows and columns as the form is submitted.

Magical Forms will never update a spreadsheet that you have not linked to a form.

Does Magical Forms delete my files?

No.

Magical Forms will never delete a file in your drive. Even if you delete the form, it will not delete the sheet you have linked to it.

Why does Magical Forms need full access to Drive?

If you create a form with a spreadsheet template, Magical Forms needs access to your drive so it can copy that template to your drive. We need full write access to your drive for this action. We only use this permission for copying templates that you selected. Nothing else.

What data is stored by Magical Forms?

• User information: We store Google user profile information to link your forms to your Google account. We do not store passwords.

• Tokens: We cache a temporary access token generated by Google. These tokens automatically expire and are automatically deleted from our cache as soon as they expire. We also securely store a refresh token to generate new access tokens as needed.

• Spreadsheet information: We only store the ids of the spreadsheet that you chose when you link it to a form. We do not store any other information or data that is inside a linked spreadsheet or any data that is added to a spreadsheet using Magical Forms.