Privacy Policy: Quick PO Builder for Shopping Carts

Last updated: April 27, 2026

This Privacy Policy explains what information the Quick PO Builder for Shopping Carts Chrome extension (“the Extension”) accesses, where that information is stored, and what is — and is not — done with it. The Extension is published by Weblytica, LLC (“we,” “us,” “our”).

If you have questions, email [email protected].

TL;DR

The Extension reads the shopping cart and checkout page you are actively viewing on Amazon, only when you click an action button in the side panel.
It writes purchase order records to a Google Sheet you choose and creates Google Docs in your Google Drive.
All data stays inside your own Google account.
We operate no servers. Nothing is sent to Weblytica or to any third party other than Google itself, which is required to read or write to your own Sheets and Drive.
We do not sell, share, monetize, or analyze your data.

1. What the Extension accesses

1.1. Pages you visit on Amazon

A content script runs on the following URLs:

https://www.amazon.com/gp/cart/view.html
https://www.amazon.com/cart
https://www.amazon.com/checkout/*
https://www.amazon.com/gp/buy/spc/*

The script reads the page DOM (product titles, ASINs, quantities, prices, totals, the delivery address shown on checkout) only when you click an action button in the side panel. It does not navigate, click, or automate any part of Amazon, and it does not run on any other website.

1.2. Your Google account (via Google OAuth)

When you click Sign in with Google, the Extension requests permission to:

“See your name, email address, and profile picture (used only to display ‘Signed in as …’)”
Read and write to spreadsheets you create or open with the Extension (Google Sheets API scope: spreadsheets).
Create and edit files the Extension itself creates in your Drive (Google Drive scope: drive.file). The drive.file scope deliberately limits the Extension to files it creates — it cannot see or touch any other file in your Drive.

You can revoke these permissions at any time at https://myaccount.google.com/permissions.

1.3. Your local settings

The Extension stores the following in your browser’s chrome.storage.local:

Your Google profile (email, name, profile picture URL) for the session.
The Google Sheet ID and tab name you have configured.
The cached title of that sheet.
Your color theme preference (light / dark / system).
Optional: a custom HTML template for the generated purchase order document.

These values stay on your device. They are not transmitted anywhere except as part of authenticated requests to Google’s APIs.

1.4. OAuth tokens

Google OAuth access tokens are managed by Chrome’s chrome.identity API. The Extension does not store tokens itself — it requests them from Chrome on demand. Tokens are short-lived and tied to your Chrome user profile.

2. What the Extension writes

2.1. To your Google Sheet

When you click Save Purchase Order, the Extension appends one row per line item to the tab you specified. Each row contains: a generated PO ID (UUID), an editable PO Number, the date, vendor, requested-by name, ship-to address, subtotal/shipping/tax/total, an optional Doc Link, optional notes, and per-item details (item number, ASIN, product title, Amazon URL, quantity, unit price, line total, variations, line note).

When you click the Drive icon to Generate a Google Doc, the Extension writes the resulting Doc URL back into the same rows.

When you click Edit PO and save, or Delete PO, the Extension updates or removes the corresponding rows in your Sheet.

2.2. To your Google Drive

When you click the Drive icon, the Extension uploads an HTML document to Drive with the MIME type application/vnd.google-apps.document. Drive converts the upload to a native Google Doc. The Doc is owned by you, lives in your Drive, and is not shared with anyone unless you choose to share it.

3. What the Extension does NOT do

It does not send any data to Weblytica, LLC or to any server we operate. We have no servers receiving Extension traffic.
It does not use third-party analytics, advertising, telemetry, error tracking, or fingerprinting.
It does not read pages other than the Amazon cart and checkout URLs listed above.
It does not access your Drive files except those it creates.
It does not sell, rent, share, or transfer your data to third parties.
It does not use your data for purposes unrelated to the Extension’s single function (capturing shopping cart line items into a purchase order).

4. Data retention and deletion

Local data: clearing your browser’s extension data, signing out, or uninstalling the Extension removes all locally stored values immediately.
Google account data: purchase orders saved to your Sheet and Docs created in your Drive are owned by you and persist until you delete them. Uninstalling the Extension does not delete files from your Google account.
Google OAuth grant: revoke the Extension’s access at https://myaccount.google.com/permissions to immediately invalidate its ability to read or write to your Google account.

5. Third parties

The Extension communicates only with Google’s APIs, on your behalf, using your OAuth grant:

https://sheets.googleapis.com/
https://www.googleapis.com/upload/drive/v3/files

These requests are governed by Google’s privacy policy: https://policies.google.com/privacy.

The content script reads pages on amazon.com. Amazon receives no request from the Extension; the script reads the page that your browser already loaded.

6. Children

The Extension is not directed to children under 13 and does not knowingly collect data from children.

7. Security

The Extension does not transmit data to any server we operate, so there is no server-side data store to protect.
All network calls go over HTTPS to Google.
Google’s OAuth flow handles credential exchange; the Extension never sees your Google password.

8. Changes to this policy

If we change how the Extension handles data, we will update this document and the “Last updated” date at the top. Material changes will also be reflected in the Extension’s release notes on the Chrome Web Store.

9. Contact

Questions, concerns, or data requests:

Weblytica, LLC
Email: [email protected]
Web: https://weblytica.com

Summary in plain English

We don’t have your data. Google has your data, in your account, where you put it. The Extension just helps you put it there.