Privacy Policy

Introduction

Welcome to Rowsurf ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we handle your information. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered spreadsheet platform.

Information We Collect

Information You Provide to Us

• Account Information: When you create an account, we collect your name, email address, and password.
• Payment Information: Payment details are processed securely through Stripe. We do not store your complete credit card information on our servers.
• User Content: Documents, spreadsheets, and files you upload to use with our AI features.
• Communications: Information you provide when you contact our support team.

Information Collected Automatically

• Usage Data: Basic information about how you interact with our service, such as features used and session duration.
• Device Information: Browser type, operating system, and IP address for security and service functionality purposes.
• Log Data: Server logs that include timestamps and error reports to maintain and improve our service.

How We Use Your Information

We use your information solely to:

• Provide, maintain, and improve our AI spreadsheet services
• Process your payments through Stripe
• Enable AI features including document analysis and agentic automation
• Respond to your support requests and communications
• Ensure the security and integrity of our platform
• Comply with legal obligations

AI and Data Processing

Large Language Model (LLM) Processing

• We use third-party AI providers (including OpenAI and other LLM services) to power our AI features.
• Your documents and spreadsheet data may be processed by these AI providers to deliver our agentic functionality.
• We select AI providers that maintain strong privacy and security practices.
• Your data is processed on a per-request basis and is not used by us or our AI providers to train models.

Document Storage

• Documents you upload for RAG (Retrieval-Augmented Generation) are stored securely and used only to enhance your AI interactions within our platform.
• You maintain full ownership of your content and can delete it at any time.

Data Sharing and Third Parties

We do not sell, rent, or share your personal information with third parties, except in the following limited circumstances:

• AI Service Providers: We share necessary data with LLM providers (such as OpenAI) to deliver AI functionality. This data is processed according to their privacy policies.
• Payment Processing: Stripe processes payment information to handle subscriptions and transactions.
• Legal Requirements: We may disclose information if required by law, court order, or governmental regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

We do not use tracking technologies, analytics services, or advertising partners.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited employee access to user data on a need-to-know basis

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

• We retain your account information and content for as long as your account is active or as needed to provide services.
• You may request deletion of your account and associated data at any time.
• After account deletion, we will remove your personal information within 30 days, except where retention is required by law.
• Backup copies may persist for up to 90 days in our backup systems.

Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails (if applicable)

To exercise these rights, please contact us at hi@rowsurf.com.

State-Specific Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

Other U.S. State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights. Please contact us to exercise these rights.

Children's Privacy

Rowsurf is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will promptly delete it.

International Users

Rowsurf is based in the United States. If you are accessing our service from outside the U.S., please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending an email notification for significant changes (if you have an account)

Your continued use of Rowsurf after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: