Privacy Policy
Last updated 13 August 2026
Bulk AI Studio (“the Service”) is operated by VMNebula (“we”). This policy explains what we collect, why, who it is shared with, and how to remove it.
Limited Use of Google user data
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Concretely: we do not use, transfer, or sell your Google Workspace data — raw, aggregated, or derived — to develop, train, improve, or fine-tune any generalized or foundational AI or machine learning model. We train no models of any kind. Spreadsheet content is sent to Google Cloud™ Vertex AI to produce the result you asked for, returned to your sheet, and used for nothing else. Under Google Cloud’s terms, content sent to Vertex AI is likewise not used to train Google’s models. No human at VMNebula reads your cell content, and it is not used to build evaluation sets, benchmarks, or prompts.
What we access, and why
Your Google™ account
When you sign in we receive your email address and your Google account identifier from the openid and userinfo.email scopes. We store both so that one account works across the Sheets add-on and this website with a single credit balance. We do not receive or store your Google password.
Spreadsheet content
The add-on requests the spreadsheets.currentonly scope. This is deliberately the narrowest scope available: it grants access only to the spreadsheet the add-on is open in, and only while it is open. We cannot see, list, or open any other file in your Google Drive, and we do not request Drive or Gmail access.
Cell content you pass to a function — for example the text in =BAI_TRANSLATE(A2, "Arabic") — is sent to our API for processing. Content you do not reference in a function is never transmitted.
Other scopes
script.external_request lets the add-on call our API and nothing else. script.container.ui lets it draw the sidebar. Neither grants access to your data.
Where your text goes
Text you submit is processed by Google Cloud™ Vertex AI to generate the result. We use Vertex AI’s global endpoint, which means Google may process the request in any of its regions rather than one we pin. Under Google Cloud’s terms, content sent to Vertex AI is not used to train Google’s models. Your account, credits, and usage records are stored in the us-central1 region (Iowa, USA).
If you use BAI_LIVE, your question is additionally sent to Google Search so the answer can reflect current information. Do not use BAI_LIVE with confidential text.
What we store
| Data | Why | Retained |
|---|---|---|
| Email and Google account ID | Identify your account across surfaces | Until you delete the account |
| Credit ledger | Bill accurately and answer billing disputes | Until account deletion; append-only |
| Usage records (operation, tier, token counts, cost) | Show your usage; capacity planning | Until account deletion |
| Website page views | Count visits to this website and clicks on the install button. No cookie, no identifier of any kind — we cannot tell one visitor from another, and this is never linked to your account | Indefinitely, as counts |
| Cached results | Spreadsheets recalculate constantly. Caching means an unchanged cell is not billed again | 30 days |
The cache stores the generated result keyed by a hash of the request. It is scoped so that one customer’s cached results are never served to another.
Who else receives data
- Google Cloud — hosting, database, and the Vertex AI models that produce results.
- Stripe — payments. Stripe receives your email and billing details. We never see or store your card number.
- YouTube™ — the introduction video on our homepage. Because it plays automatically, the player loads whenever you open the homepage, and YouTube receives your IP address and browser details at that moment. We embed it through
youtube-nocookie.com, Google’s privacy-enhanced domain, which does not set advertising or personalisation cookies. No other page on this website embeds anything.
We do not sell your data, and we do not share it for advertising.
No analytics or advertising third parties. This website uses no Google Analytics, no advertising pixels, and no cookies for tracking. Visit counts are recorded by our own service with no cookie and no identifier, which is also why we can tell you how many pages were viewed but not how many people viewed them. The homepage video described above is the only third-party content anywhere on this website, and it is not used to track you.
Your choices
- Revoke access at any time from your Google account permissions.
- Request deletion of your account and associated data by emailing us. We will delete it within 30 days, except records we must keep for tax or accounting purposes.
- Request a copy of your data by the same route.
Security
Traffic is encrypted in transit. The database is not reachable from the public internet and is encrypted at rest. Credentials are held in a managed secret store, not in code or configuration files.
Children
The Service is not directed at anyone under 16 and we do not knowingly collect their data.
Changes
We will update the date at the top when this policy changes. Material changes will be notified by email before they take effect.
Contact
osamaaminemail@gmail.com
Governing law: the Islamic Republic of Pakistan, with the courts of Islamabad having jurisdiction