Permissions & OAuth Scopes

CertifyForms uses non-restricted scopes only, meaning the add-on doesn't require additional security review from Google. This ensures faster deployment and updates.

Why Does CertifyForms Need Permissions?

CertifyForms requires specific permissions to automate certificate generation and delivery. All permissions are used exclusively to provide core functionality and your data is never shared with third parties.

OAuth Scopes Explained

Below is a complete list of permissions (OAuth scopes) that CertifyForms requests when you install the add-on:

Google Forms™ Access

https://www.googleapis.com/auth/forms.currentonly

Purpose: Access the form where the add-on is installed to read quiz settings and questions.

https://www.googleapis.com/auth/forms

Purpose: View and manage your forms to access form structure and settings.

https://www.googleapis.com/auth/forms.responses.readonly

Purpose: Read form responses to calculate scores and determine which respondents qualify for certificates.

Google Drive™ Access

https://www.googleapis.com/auth/drive.file

Purpose: Create and manage certificate PDF files, access certificate template slides, and organize files in folders.

User Information

https://www.googleapis.com/auth/userinfo.email

Purpose: Identify your email address for account management and billing purposes.

Script Operations

https://www.googleapis.com/auth/script.container.ui

Purpose: Display the add-on sidebar and dialogs within Google Forms™.

https://www.googleapis.com/auth/script.external_request

Purpose: Communicate with the SwiftSoft backend for license validation and email delivery via AWS SES.

https://www.googleapis.com/auth/script.scriptapp

Purpose: Enable add-on functionality and trigger execution.

Security & Privacy

Our Privacy Commitment

  • All scopes are non-restricted and standard for add-on functionality
  • Your data is never shared with third parties
  • We only access the minimum necessary data to provide the service
  • All communications are encrypted (HTTPS)
  • Certificate emails are sent via AWS SES (secure, reliable email service)
  • You can revoke permissions at any time through Google Account settings

How to Review Permissions

You can review and manage the permissions granted to CertifyForms at any time:

  1. Visit your Google Account Permissions page
  2. Find "CertifyForms" in the list of third-party apps
  3. Click to view detailed permission information
  4. You can revoke access at any time (note: this will disable the add-on functionality)

Google's Limited Use Requirements

CertifyForms' use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

Have Questions About Permissions?

We're happy to answer any questions about the permissions CertifyForms uses and how your data is protected.

Contact Privacy Team

Google Forms™, Google Sheets™, Google Slides™, Google Drive™, and Google Workspace™ are trademarks of Google LLC.