Privacy Policy
Monte Carlo Risk Simulator — Google Sheets™ add-on.
Effective date: July 16, 2026

In short: the Monte Carlo Risk Simulator add-on processes your spreadsheet data entirely on your own device, inside your browser. Alma Learning does not collect, receive, store, sell, or share your spreadsheet contents or any other Google user data. All communication between your browser and Google is protected by encryption.

This Privacy Policy describes how Alma Learning AI, Inc. ("Alma Learning", "we", "us", "our") handles information in connection with the Monte Carlo Risk Simulator add-on for Google Sheets (the "Add-on"). It applies specifically to the Add-on.

1. What Google user data the Add-on accesses
To provide its features, the Add-on requests the minimum Google OAuth scopes required to function:

• https://www.googleapis.com/auth/spreadsheets.currentonly — permission to view and manage only the specific spreadsheet in which the Add-on is running. The Add-on uses this to read the model values and formulas you designate (assumption cells, forecast cells, data ranges you select) and to write analysis results, tables, and charts back into that same spreadsheet.
• https://www.googleapis.com/auth/script.container.ui — permission to display the Add-on's menu and sidebar inside Google Sheets. This scope does not provide access to any user data.

The Add-on cannot access other files in your Google Drive, your email, your contacts, your calendar, or any other Google user data. We do not collect your name, email address, or account profile information through the Add-on, and the Add-on contains no analytics, tracking, or advertising technologies.

2. How the Add-on uses this data
Spreadsheet data accessed by the Add-on is used for one purpose only: to perform the analyses you request — Monte Carlo simulation, sensitivity and scenario analysis, data tables, forecasting, regression, distribution fitting, and portfolio optimization — and to write the results into your spreadsheet. All numerical computation runs locally, in your own browser session, using open-source scientific libraries executed as WebAssembly. The Add-on has no server backend operated by Alma Learning, and your spreadsheet data is never transmitted to Alma Learning.

We do not use Google user data for advertising of any kind, for determining credit-worthiness or lending purposes, for creating databases, or for training artificial-intelligence or machine-learning models.

3. Storage, retention, and deletion
Alma Learning does not store Google user data. Because computation happens in your browser and results are written directly into your own spreadsheet, all data remains at all times within your Google account and your device:

• Your spreadsheet stores your model and the analysis results the Add-on writes (for example, the "Simulation Results" sheet and a hidden configuration sheet named _RiskConfig that records which cells you assigned as assumptions and forecasts). This data is under your control: you can edit or delete these sheets at any time, and deleting them removes the data permanently.
• Your browser session holds data only while the Add-on is open; it is discarded when you close the sidebar or the spreadsheet.
• Alma Learning systems retain nothing, because no Google user data ever reaches us. Since we do not collect this data, there is no copy held by us to retain or delete.

If you contact our support by email, we retain that correspondence (your email address and the message you send) only as long as needed to resolve your request and to meet our legitimate business and legal obligations, after which it is deleted. You may request deletion of your support correspondence at any time by writing to support@almalearning.ai.

4. Sharing, transfer, and disclosure
We do not sell Google user data. We do not share, transfer, or disclose Google user data to third parties, because we never receive it in the first place. There are no third-party processors, data brokers, information resellers, or advertising partners involved in the Add-on's operation.

5. How we protect your data
Security procedures and safeguards are in place to protect the confidentiality of your data:

• Encryption in transit. All communication between your browser and Google's servers — including every read and write the Add-on performs on your spreadsheet — is encrypted using HTTPS/TLS. We use encryption to protect your information whenever it moves over a network.
• Local-only processing. The strongest protection mechanism in the Add-on's design is architectural: sensitive spreadsheet data never leaves your browser and your Google account, which eliminates the risk of interception, breach, or misuse on external servers.
• Least-privilege access. The Add-on requests only the narrowest available scopes. It can access the single spreadsheet it runs in — not your Drive, email, or other data — so even in the worst case, exposure is limited to data you have already placed in that spreadsheet.
• Sandboxed execution. The Add-on runs inside Google's Apps Script environment, which enforces sandboxing, content-security policies, and Google's own platform security controls, and is protected by your Google account's authentication (including any two-factor authentication you have enabled).
• Restricted development access. Access to the Add-on's source code and its Google Cloud project is limited to authorized Alma Learning personnel, protected by strong authentication.

6. Limited Use disclosure
Monte Carlo Risk Simulator's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we only use Google user data to provide and improve the Add-on's user-facing features; we do not transfer it to third parties except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with prior notice to users; we do not use it for advertising; and we do not allow humans to read it — which, in the Add-on's case, is guaranteed by the fact that the data never reaches us at all.

7. Third-party components
When the Add-on's sidebar starts, your browser downloads open-source scientific computing libraries (the Pyodide runtime with NumPy and SciPy) from the jsDelivr public content delivery network over an encrypted connection. These requests fetch software files only; they do not include your spreadsheet contents or personal information. Like any web request, they expose standard technical information (such as your IP address) to the CDN operator, subject to jsDelivr's privacy policy. The Add-on also renders charts using Google Charts within Google's own infrastructure.

8. Children's privacy
The Add-on is suitable for general audiences and does not knowingly collect personal information from anyone, including children. Use of the Add-on under a Google account managed by a school or guardian is governed by the terms of that account.

9. Your choices and rights

• Revoke access at any time: visit myaccount.google.com/permissions and remove the Add-on's access, or uninstall it in Google Sheets via Extensions → Add-ons → Manage add-ons.
• Delete Add-on data: delete the results sheets and the hidden _RiskConfig sheet from your spreadsheet, or delete the spreadsheet itself.
• Ask us anything: depending on where you live, you may have rights to access, correct, or delete personal information and to lodge complaints with a supervisory authority. Because we do not collect Google user data through the Add-on, such requests will typically concern support correspondence only; contact us and we will honor applicable rights.

10. Changes to this policy
We may update this Privacy Policy from time to time. The current version, with its effective date, will always be posted at this page, and we will notify users of material changes to how the Add-on handles Google user data — for example, through the Add-on's Marketplace listing or our website — before they take effect.

11. Contact
Questions about these Privacy Policy or the Add-on:
support@almalearning.ai
Support page