Email wording & the email log — Good to know

• Emails that carry a working link — a sign-in link, a password reset, an approve or decline button — never have their body stored in the log. Anyone who could read it could use it. Who it went to, when, and whether it arrived are all still there. • Message bodies are kept for a limited window and then cleared; the rest of each row is kept for a year. • RowFold's own emails — invitations, sign-in links, security alerts, welcome and verification — aren't editable by anyone. They carry RowFold's name and sending domain, which is what makes them trustworthy when one tells somebody their password just changed.