Privacy notice
Who operates Rowlark
Rowlark is operated by Pony Nguyen in Vietnam. For privacy questions, account deletion, or requests about your personal data, email support@rowlark.app. This notice is effective September 17, 2026.
Catalog files stay local
The synthetic sample and CSVs selected by signed-in users are processed in browser memory. No raw catalog data is uploaded, stored in browser storage, logged for analytics, or fetched from image URLs. Refreshing or clearing removes working changes. Downloaded files remain on your device until you delete them.
Data we use
We use your email address to create and secure your account, send verification or recovery messages, provide support, and manage access. Essential session cookies keep you signed in. If you save a Pro preset, we store its name, selected rule identifiers, decimal convention, and export mode. Presets never contain raw catalog rows or review results. We also process limited request and technical data, such as IP address and browser or request details, when needed to deliver and secure the service, enforce rate limits, and investigate errors. Optional product analytics stays off unless you allow it. If allowed, Google Analytics and PostHog receive sanitized page paths and a small set of product action counts. Query strings, CSV content, filenames, cell values, email addresses and auth links are excluded; PostHog autocapture and session replay are disabled.
Service providers
Cloudflare delivers and protects the website. Supabase provides account authentication and account-linked storage. Resend sends account and support emails. Google provides Gmail for support correspondence and Drive storage for encrypted backups; with your optional consent, Google Analytics also measures sanitized site activity. With your optional consent, PostHog measures allowlisted product actions without autocapture, person profiles or session replay. GitHub Actions runs the scheduled encrypted-backup process. These providers receive only the account, message, request, or technical data needed for their role and may process it outside Vietnam where they operate. Lemon Squeezy processes checkout as merchant of record and presents its buyer terms before payment.
Retention and deletion
Saved presets remain until you delete the preset or your account. Expired concurrency locks and rate-limit counters become eligible for cleanup 24 hours after they expire or reset and are removed by the next successful scheduled cleanup. Private backups follow a 30-day retention schedule. Ordinary support correspondence is retained for 12 months after the request closes. Billing, dispute, webhook, deletion, security, and other legally relevant records may be kept as long as reasonably necessary for payment reconciliation, fraud prevention, dispute handling, security, and legal or accounting obligations.
Your choices
You can keep optional analytics off, allow it, or withdraw consent at any time through Analytics choices. Withdrawing stops new app events and clears analytics identifiers available to Rowlark in your browser. You can delete saved presets in your account and use the available account-deletion flow. You may also email support@rowlark.app to request access to, correction of, or deletion of your personal data. We will respond according to applicable law. Account deletion removes account-linked presets; limited records described above may remain where they are still necessary.
Open the fixed sample · Review your CSV · Privacy · Terms · Refunds