Last updated: April 2026
Workorder Schedule for Lightspeed is a browser extension that connects to the Lightspeed Retail R-Series API to display your shop's workorder schedule. This privacy policy explains what data is accessed and how it is handled.
The extension accesses workorder data from your Lightspeed Retail account via the official Lightspeed API. This includes workorder details, customer names, employee names, and workorder line items. This data is used solely to display your workorder schedule within the extension.
All workorder and customer data is processed locally in your browser. No workorder data, customer data, or any other Lightspeed business data is transmitted to any third-party server or stored outside your browser. Your Account ID and OAuth tokens are stored locally in your browser's extension storage.
The extension uses OAuth 2.0 to authenticate with Lightspeed on your behalf. When you authorize the extension, your temporary authorization code and refresh token are sent to a Cloudflare Worker (ls-oauth-proxy.ls-proxy.workers.dev) operated by the extension developer. This Worker exists solely to securely exchange tokens with Lightspeed's OAuth server. The API client secret is stored on the Worker so that it never needs to be included in the extension code.
The Worker does not log, store, or retain any data. It forwards your authorization code or refresh token to Lightspeed, receives the access token, and returns it to the extension. No other data passes through the Worker.
The OAuth callback page hosted on GitHub Pages is used to receive the authorization code during the manual authentication flow. No data is logged or stored by that page.
The extension communicates with the following services:
Lightspeed Commerce (api.lightspeedapp.com, cloud.lightspeedapp.com) — to fetch your workorder data and authenticate your account.
Cloudflare Workers (ls-oauth-proxy.ls-proxy.workers.dev) — operated by the extension developer to securely handle OAuth token exchange. Only authorization codes and refresh tokens are sent to this service; no business data is transmitted.
No data is shared with any other third party.
If you have questions about this privacy policy, contact us at calendarlightspeed@gmail.com.