Data processing — Roles & scope

For the content in your workspaces, you are the Controller and we are the Processor. You decide what personal data to put into RowFold, why, and who may see it; we process it to run the Service for you. For your own account and our marketing site, we are the Controller — the names and email addresses of your workspace members, billing contacts, support conversations, and usage data about how the product is used. That processing is described in the Privacy Policy and is not governed by this DPA. The subject matter, duration, nature, purpose, data types and categories of data subject are set out in Annex I. What you are responsible for. You warrant that you have a lawful basis for the personal data you put into RowFold and for instructing us to process it, that you have given data subjects whatever notice their law requires, and that your instructions do not require us to break the law. We cannot assess the lawfulness of data we cannot see the context for.