LIMITED TIME Lifetime Deal: Get the published plan features for a $399 one-time payment. Grab the Deal →

Privacy Policy

This policy explains how Rowform handles personal data when people visit the website, use the application, create forms, or respond to forms.

Last updated: August 1, 2026

1. Scope and roles

Rowform processes account, service, and website information to provide and improve the service. When a customer creates a form, that customer decides what to ask and why. The customer is generally the controller of respondent data, and Rowform processes that data to provide the service.

2. Information Rowform processes

Depending on how the service is used, Rowform may process account and contact information, form content, respondent answers, uploaded files, service settings, support communications, billing-related records, and technical usage information such as IP address, browser information, timestamps, and diagnostic events.

3. How information is used

Rowform uses information to provide forms and account features, deliver notifications, support customers, secure and troubleshoot the service, process payments through payment providers, meet legal obligations, and improve product reliability and usability.

4. Data location and subprocessors

Primary response data is stored through Supabase in the EU. Selected subprocessors may process limited data in other regions, as described in our DPA and subprocessor list. Rowform does not sell respondent data.

Supabase provides the primary database and related services in Frankfurt, Germany. Vercel may process request and delivery data through global infrastructure. ZeptoMail processes the limited contact and message data required to deliver transactional email in India. Other website and support vendors are identified in the subprocessor list.

Rowform uses subprocessors to provide the service. This necessary processing is not a sale of respondent data. Details about international processing are available in the Data Processing Addendum.

5. Retention

Rowform retains personal data for as long as needed to provide the service, meet contractual and legal obligations, resolve disputes, and protect the service. Retention can vary by data type and account status.

6. Cookies and website services

The marketing website uses necessary consent-management technology and may load analytics tags and support chat after interaction. See the Cookie Policy for details.

7. Privacy requests

Account holders can contact arjun@rowform.io about access, correction, deletion, export, objection, or other rights available under applicable law. Respondents should usually contact the organization that published the form first because that organization controls the form and its purpose.

8. Changes

Rowform may update this policy as the service or legal requirements change. The date above shows the latest published revision.