**Last updated:** June 2026
**Product:** ThankQ Training Companion (web app and Chrome Extension)
**Provided by:** Actually Data Analytics
—
## 1. Who this policy applies to
This privacy policy applies to organisations and individuals using the ThankQ Training
Companion, which is available as:
– A web application hosted on Google Apps Script or a client-managed endpoint
– A Chrome Extension installed in the Google Chrome browser
—
## 2. What data is collected
### 2.1 Personal data
The ThankQ Training Companion does not collect, store, or process any personal data
about the people who use it.
Specifically, the tool does not:
– Require users to create an account or log in
– Collect names, email addresses, or any other identifying information
– Track individual users across sessions
– Use cookies or persistent browser storage to identify individuals
### 2.2 Configuration data (Chrome Extension only)
When an administrator configures the Chrome Extension, the following settings are stored
locally in the user’s Chrome browser using Chrome’s built-in sync storage:
– Organisation name
– Data source URL (the endpoint the extension fetches content from)
– Guide avatar image URL (optional)
– Full companion URL (optional)
This data is stored in Chrome’s sync storage, which means it may sync across devices
signed into the same Google account. It is not transmitted to or stored by Actually Data
Analytics. It can be cleared at any time using the Reset function in the extension settings.
### 2.3 Usage analytics (optional, disabled by default)
The Google Apps Script backend includes an optional analytics logging function that,
if enabled by the administrator, records the following to a Google Sheet within the
organisation’s own Google account:
– Timestamp of each event
– Whether a topic was opened or a question was expanded
– The topic ID and question index
This data contains no personal information. It is stored in the organisation’s own
Google Sheets environment and is not accessible to Actually Data Analytics unless the
organisation explicitly shares it. Analytics logging is disabled by default and must be
deliberately enabled in the Apps Script code.
—
## 3. How content is stored and served
### 3.1 Google Apps Script deployments
When organisations use Google Apps Script as their content backend, their training
content is stored in a Google Sheet within their own Google account. Actually Data
Analytics does not have access to this data unless the organisation chooses to share it.
Content is served by Google’s infrastructure under Google’s own terms of service.
### 3.2 SharePoint and Microsoft 365 deployments
When organisations use SharePoint or Microsoft 365 as their content backend, their
training content is stored entirely within their own Microsoft 365 environment.
Actually Data Analytics does not have access to this data.
### 3.3 Custom endpoints
Organisations using a custom endpoint are responsible for the data handling practices
of their chosen infrastructure.
—
## 4. Third-party services
The Chrome Extension fetches content from the data source URL configured by the
organisation’s administrator. No data is sent to any third party by the extension itself.
If the organisation’s data source is hosted on Google Apps Script, Google Sheets,
SharePoint, or any other platform, the data handling practices of that platform apply.
Users should refer to the relevant platform’s privacy policy:
– Google: https://policies.google.com/privacy
– Microsoft: https://privacy.microsoft.com
—
## 5. Chrome Extension permissions
The Chrome Extension requests the following permissions:
– **activeTab** — to detect which page the user is currently viewing, so the extension
can suggest relevant topics contextually. No page content is read or transmitted.
– **storage** — to save and retrieve the organisation’s configuration settings locally
in the user’s browser.
– **scripting** — to inject accessibility improvements into ThankQ CRM pages.
– **host_permissions** — to allow the content script to run on ThankQ CRM pages only.
The extension does not request access to browsing history, bookmarks, downloads,
or any other browser data.
—
## 6. Accessibility patches
The Chrome Extension automatically applies the following accessibility improvements
to ThankQ CRM pages:
– Adding a language attribute to the page if missing
– Injecting a skip-to-main-content link
– Labelling icon buttons that lack accessible names
– Adding empty alt attributes to images that are missing them
These changes are made locally in the user’s browser and are not transmitted anywhere.
—
## 7. Children
This product is intended for use by adults in a professional context.
It is not directed at or intended for use by children under the age of 16.
—
## 8. Data subject rights
As this product does not collect personal data, requests relating to access,
rectification, erasure, or portability of personal data under UK GDPR do not apply
to the ThankQ Training Companion itself.
For any questions about data stored in the organisation’s own Google Sheets or
SharePoint environment (such as analytics logs), users should contact their own
organisation’s data controller.
—
## 9. Changes to this policy
This policy may be updated when the product changes in ways that affect data handling.
The date at the top of this document reflects when it was last revised.
Organisations using the product will be notified of material changes.
—
## 10. Contact
For questions about this privacy policy or the data handling practices of the
ThankQ Training Companion:
**Actually Data Analytics**
Contact via: actuallydata.net
—
*This policy covers the ThankQ Training Companion product only. It does not cover
any other products or services provided by Actually Data or Actually Data Analytics.*