01Who we are
RowFold Inc. ("RowFold," "we," "us") operates the RowFold workspace platform. We are the data controller for personal information collected through our marketing site and the data processor for information you store in your workspaces.
02What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Name, email, password hash, profile picture | Create and manage your account |
| Workspace content | Tables, records, fields, automations, forms, files you upload | Provide the Service |
| Usage data | Pages visited, features used, error logs, performance metrics | Improve and secure the Service |
| Billing data | Company name, address, payment method (via Stripe) | Process payments & comply with tax laws |
| Communications | Support tickets, sales conversations, in-app messages | Respond to you and improve service |
We do not collect: biometric data, precise location, advertising identifiers, or browsing history beyond our own properties.
03How we use information
- To provide the Service: store and process your workspace content, deliver features, and respond to your requests.
- To improve: understand which features are used and where users get stuck, fix bugs, and inform the roadmap. Aggregated and anonymized.
- To communicate: service announcements, security notices, billing receipts, and (with your consent) product updates.
- To secure: detect and prevent abuse, fraud, and security incidents.
- To comply: meet legal obligations including tax, accounting, and lawful information requests.
04AI features & your data
When you use AI features (workspace generation from a description, plain-English answers about your data, field suggestions, and import analysis), the relevant portion of your data is processed by our AI provider, Anthropic, via the Claude API. AI calls are made on a per-request basis — no persistent fine-tuning on your content. Search in the ⌘K palette is keyword matching that runs entirely in our database: search queries and results are never sent to an AI provider.
05Sharing
We share information only with:
- Sub-processors who help us operate the Service — currently cloud hosting (Microsoft Azure), and Anthropic for AI features. We will update this policy before adding new categories of sub-processor.
- Workspace members you've invited — they see workspace content per the permissions you set.
- Legal authorities only when compelled by valid legal process, and we will challenge requests we believe are overbroad.
- An acquirer in the event of a sale or merger, with notice and option to delete your account first.
We never sell personal information or workspace content.
06Your rights
Depending on your location, you have rights including: access, correction, deletion, portability (export), restriction, and objection to processing. Use the in-app data tools (Settings → Privacy → Export / Delete) or email privacy@rowfold.com. We respond within 30 days.
07Data retention
We keep workspace content for the life of your account. After account deletion, content is removed from our active systems within 30 days and from backups within 90 days. Some records (billing, security logs) are retained for up to 7 years for legal compliance.
08International transfers
RowFold is operated from the United States. If you access the Service from elsewhere, your data may be transferred to the US. For EU/UK users we rely on Standard Contractual Clauses; full details are in our DPA.
09Security
We encrypt data in transit and at rest, run continuous security monitoring, and limit employee access by role. Report vulnerabilities to security@rowfold.com.
10Cookies & analytics
We use a small number of strictly necessary first-party cookies (authentication, preferences). We do not use third-party analytics or advertising trackers today. If we introduce product analytics in the future, we will update this policy first and provide a way to opt out before anything is collected.
11Children
RowFold is not directed to children under 16. We do not knowingly collect information from anyone under 16. If you become aware that a child has provided us information, email privacy@rowfold.com.
12Changes
We may update this Privacy Policy from time to time. Material changes will be communicated by email and via in-app notice at least 30 days before they take effect.
13Contact
Privacy questions, access requests, or complaints: privacy@rowfold.com. Our Data Protection Officer can be reached at dpo@rowfold.com. Postal: RowFold Inc., 14 Cedar Ave, Suite 200, Portland, OR 97214, USA.