Privacy policy

Staff Scheduler (staff-scheduling.kindoflost.com), the Shift Optimizer add-on for Google Sheets and the MCP server for AI assistants. Last updated September 27, 2026.

These tools are run by me, Mario, the person behind Kind of Lost (kindoflost.com). Contact: mario@kindoflost.com. Versión en español más abajo.

Shift Optimizer add-on for Google Sheets

What it can access. The add-on asks Google for three permissions: to see and edit only the spreadsheet it is opened in (not your other files, not your Drive), to show its menu and sidebar, and to connect to my server at staff-scheduling.kindoflost.com.

What it reads and when. Nothing happens until you press a button. When you press Optimize roster, the add-on reads the tabs of the current spreadsheet (your shifts, posts, people, skills, availability and parameters) and sends them over HTTPS to my server. When you press Insert example tabs, it only downloads example data and writes it into new tabs.

What I do with it. The data is used for one thing: computing the roster, which is sent back and written into a new tab of your spreadsheet. The spreadsheet content is held in the server's memory only while the solve runs and for at most 15 minutes after, so the sidebar can collect the result, and is then discarded. It is not written to disk or a database, not used to train any model, not sold, and not shared with anyone.

What I log. For each run I record one anonymous row: the date and time, that the run came from the add-on, the number of shifts and people in the result, how long the solve took and whether it succeeded. No names, no spreadsheet content, no email address and no IP address are stored. To stop any one user from overloading the server, the add-on sends Google's temporary per-user key (an anonymous, rotating identifier, not your email) which is held in memory for rate limiting only.

Google user data. The add-on's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing it. Uninstall the add-on from Extensions → Add-ons → Manage add-ons, or revoke its access at myaccount.google.com/permissions. Since I keep nothing from your spreadsheet, there is nothing to delete on my side.

The web tool (staff-scheduling.kindoflost.com)

Workbooks you upload are read to solve the model and are not kept afterwards; the same anonymous run log described above applies. The pages use Google Analytics to count visits. If you choose to leave your email for tool updates, it is stored only to send those updates, and you can ask me to delete it at any time.

How your data is protected

Encryption in transit. The add-on, the web tool and the MCP server only talk to my server over HTTPS (TLS). Nothing is accepted over plain HTTP.
No storage of your content. Spreadsheet and roster data is kept only in the server's memory: while the solve runs and, for the add-on and MCP server, for at most 15 minutes after so the result can be collected. It is never written to a database or to permanent disk, and it is not included in logs or backups.
Isolation. Each solve runs in its own short-lived process, which is discarded when the solve ends, so one user's data is never held in the same process as another's.
Minimal access. The add-on requests only the permission to read and edit the spreadsheet it is opened in, never your other files. The run log holds only anonymous counts (no names, no spreadsheet content, no email address, no IP address).
Restricted access. Only I, the developer, can access the server and its configuration. No one else, and no third party, receives your data.
No AI/ML training. Data received through the add-on, including any data obtained from Google Workspace APIs, is not used to develop, improve or train generalized or non-personalized AI or machine-learning models, by me or by anyone else.
Hosting. The server runs on Render (render.com) in the United States. Render provides the infrastructure only; it does not use or share the data passed through it.

If you believe your data was exposed, email mario@kindoflost.com and I will respond promptly.

MCP server for AI assistants (staff-scheduling.kindoflost.com/mcp)

When you connect an AI assistant (Claude, ChatGPT or another MCP client) to the server, the assistant sends the roster input it built from your conversation: shift times, posts, people's names or labels, skills, availability and rules. I never see your conversation itself, only what the assistant chooses to send to the tool. That input is used only to compute the roster, is held in memory while the solve runs and for at most 15 minutes after so the assistant can collect the result, and is then discarded. It is not written to disk, not used to train any model, not sold and not shared. Each run writes the same anonymous log row described above (date and time, that it came from an AI assistant, counts, duration, result), with no names and no roster data. The calling address is held in memory for up to 10 minutes for rate limiting only. What the assistant does with the result is governed by that assistant's own privacy policy.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Política de privacidad (español)

Complemento Optimizar turnos para Google Sheets. Pide tres permisos: ver y editar solo la planilla en la que se abre (no sus otros archivos ni su Drive), mostrar su menú y panel lateral, y conectarse a mi servidor staff-scheduling.kindoflost.com. No hace nada hasta que usted pulsa un botón. Al pulsar Optimizar cuadrante, lee las hojas de la planilla actual y las envía por HTTPS a mi servidor, que calcula el cuadrante y lo devuelve para escribirlo en una hoja nueva. El contenido se mantiene en memoria solo mientras se resuelve y como máximo 15 minutos después, y luego se descarta: no se guarda en disco ni en una base de datos, no se usa para entrenar modelos, no se vende ni se comparte. Por cada corrida registro una fila anónima (fecha y hora, origen, cantidad de turnos y personas, duración y resultado), sin nombres, sin contenido de la planilla, sin correo ni dirección IP. El uso y la transferencia de información recibida de las APIs de Google se ajustan a la Política de datos de usuario de los servicios de API de Google, incluidos los requisitos de uso limitado. Puede desinstalarlo desde Extensiones → Complementos → Administrar complementos o revocar el acceso en myaccount.google.com/permissions.

Servidor MCP para asistentes de IA. Si conecta un asistente (Claude, ChatGPT u otro), este envía los datos del cuadrante que armó a partir de su conversación (horarios, puestos, nombres o etiquetas de las personas, habilidades, disponibilidad y reglas). No veo su conversación, solo lo que el asistente envía a la herramienta. Se usa solo para calcular el cuadrante, queda en memoria mientras se resuelve y como máximo 15 minutos después, y se descarta. Registro la misma fila anónima por corrida, sin nombres ni datos del cuadrante; la dirección que llama se guarda en memoria hasta 10 minutos solo para limitar el uso. Lo que el asistente haga con el resultado se rige por la política de privacidad de ese asistente.

Cómo se protegen sus datos. Todo viaja cifrado por HTTPS (TLS). El contenido de su planilla o cuadrante solo se mantiene en memoria (máximo 15 minutos) y nunca se guarda en una base de datos, en disco permanente, en registros ni en copias de seguridad. Cada corrida se ejecuta en un proceso propio que se descarta al terminar. El complemento solo pide acceso a la planilla en la que se abre. Solo yo, el desarrollador, tengo acceso al servidor. Los datos recibidos, incluidos los obtenidos de las APIs de Google Workspace, no se usan para desarrollar, mejorar ni entrenar modelos generalizados de IA o aprendizaje automático. El servidor está alojado en Render (render.com), en Estados Unidos. Contacto: mario@kindoflost.com.