Privacy Policy

Rowen ("we," "us," or "our") operates the form backend service available at rowen.in. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using Rowen, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create a Rowen account, we collect your name and email address. This information is used to identify your account, send you service-related notifications, and provide customer support.

Form Submission Data

When end users submit forms through endpoints you create on Rowen, we collect and store the data included in those submissions. This may include names, email addresses, phone numbers, messages, and any other fields present in your forms. The specific data collected depends entirely on the form fields you choose to include.

Uploaded Files

If your forms accept file uploads, we store those files securely on our infrastructure. Files are associated with the corresponding form submission and are accessible through your Rowen dashboard.

Technical Data

We automatically collect certain technical information when forms are submitted, including the submitter's IP address, user agent string, and the referring URL. We use this data for spam detection, abuse prevention, and service analytics.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Rowen service
• Process and store form submissions on your behalf
• Send email notifications when new submissions arrive
• Send auto-reply emails to form submitters on your behalf, when you configure this feature
• Detect and prevent spam, abuse, and fraudulent form submissions
• Deliver form submission data to integrations you enable (Google Sheets, webhooks, etc.)
• Communicate with you about your account, service updates, and support requests
• Generate aggregated, anonymized analytics about service usage

3. Google Sheets Integration

Rowen offers an optional Google Sheets integration that allows form submission data to be automatically written to a Google Sheets spreadsheet. When you enable this integration:

• We request access to the Google Sheets API through Google's OAuth 2.0 authorization flow. You explicitly grant this access through Google's consent screen.
• We store the resulting OAuth tokens securely and encrypted in our database. These tokens are used solely to write form submission data to sheets on your behalf.
• We only access Google Sheets that are created or designated by Rowen for the purpose of storing your form data. We do not read, modify, or access any other files in your Google account.
• You can revoke this access at any time by disconnecting the integration from your Rowen dashboard or by revoking access through your Google Account security settings.

4. Third-Party Services

We use the following third-party services to operate Rowen. Each has its own privacy policy governing its use of data:

• Resend — We use Resend to deliver email notifications and auto-reply emails. Resend processes recipient email addresses and email content on our behalf.
• Vercel — Our application is hosted on Vercel. Vercel may collect standard server logs including IP addresses and request metadata.
• Neon— We use Neon as our PostgreSQL database provider. All account data, form configurations, and submission data are stored in Neon's infrastructure.
• Cloudflare — We use Cloudflare Turnstile for spam protection on form endpoints where this feature is enabled. Cloudflare may collect IP addresses and browser metadata to distinguish human users from bots.

5. Data Retention

We retain your account information and form submission data for as long as your account remains active. You can delete individual submissions, entire forms, or your complete account at any time through your Rowen dashboard. When you delete data, it is permanently removed from our active databases. Backups containing deleted data may persist for up to 30 days before being automatically purged.

6. Your Rights

You have the right to:

• Access your data — View all form submissions and account information through your dashboard.
• Export your data — Download your form submissions in CSV or JSON format at any time.
• Delete your data — Delete individual submissions, entire forms, or your complete account.
• Correct your data — Update your account information (name, email) through your account settings.

To exercise any of these rights, you can use the tools available in your Rowen dashboard or contact us at Nikhiln8885@gmail.com.

7. Cookies and Authentication

Rowen uses httpOnly JWT cookies for authentication. These cookies are strictly necessary to keep you logged in and to secure your session. They are set when you log in and cleared when you log out. We do not use advertising cookies, tracking cookies, or any third-party analytics cookies. Because we only use essential cookies required for the service to function, we do not display a cookie consent banner.

8. Data Security

We take reasonable measures to protect your data, including encryption in transit (TLS/HTTPS), secure storage of credentials and OAuth tokens, and regular security reviews of our infrastructure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Rowen is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by posting a prominent notice on our website. We encourage you to review this page periodically. Your continued use of Rowen after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: