Privacy Policy

Effective Date: 2025-06-15

This Privacy Policy explains how RowPrompt ("Service", "we", "us", "our"), operated by Michal Strnad (IČO: 07662491, Zlatnická 82, 252 41, Zlatníky-Hodkovice - Zlatníky, Czech Republic), collects, uses, stores, and protects your personal information.

1. What Information We Collect

• Account Information: Email address and password (hashed/encrypted).
• Uploaded Files: CSV files you upload and generated results.
• Usage Data: IP address, device information, and general activity logs.
• Payment Information: Managed by Lemon Squeezy (we do not process or store your payment card details).
• Communications: Any data you send to us via email or contact forms.
• Cookies and Tracking: See [Cookie Policy].

2. How We Use Your Data

• To operate, provide, and secure the Service.
• To process your uploaded files and deliver the resulting data.
• To manage your account and authentication.
• To communicate with you (service notices, updates, marketing emails—opt-out available).
• For analytics and Service improvement.
• To fulfill legal obligations if necessary.

3. Legal Basis for Processing

We process data based on:

• Your consent (e.g., marketing emails, non-essential cookies),
• Performance of a contract (provision of the Service),
• Our legitimate interest (security, fraud prevention, analytics),
• Compliance with legal requirements.

4. Data Retention

• Uploaded files and results: Kept for 30 days after processing, then deleted automatically.
• Account data: Stored as long as the account is active. Deleted upon account removal.
• Other data: Kept as long as necessary for the Service or legal reasons.

5. Data Sharing

We may share data with:

• Service Providers: (Google Cloud, MongoDB, Mailgun, Google Analytics, Google Tag Manager, Lemon Squeezy, Stripe) for hosting, analytics, payment processing, and communications.
• Authorities: If required by law. We do not sell or trade your personal information.

6. International Transfers

Your personal data is generally stored and processed within the European Union. We make efforts to avoid transferring data outside the EU, except for service provider requirements (all providers used are GDPR-compliant to the best of our knowledge). One of the exceptions we want to highlight is that we use OpenAI API which:

• Does not guarantee that the data will be processed in the EU
• Has recently been ordered to keep records of all user requests indefinitely by the court in the case of OpenAI vs. New York Times. More details can be found here.

7. Data Security

We implement appropriate security measures to protect your information. However, no method is 100% secure and we cannot guarantee absolute data security.

8. Your Rights

Under EU GDPR, you have the right to:

• Access your data
• Correct or update data
• Request deletion (“right to be forgotten”)
• Object to processing or restrict use
• Withdraw consent at any time (where applicable)

To exercise these rights, email info@rowprompt.com.

9. Children’s Privacy

RowPrompt is not intended for anyone under the age of 16. We do not knowingly process data of children under 16.

10. Changes to This Policy

We may update this Privacy Policy occasionally. Updates will be posted on this page and marked by the date above.

11. Contact

If you have questions or requests, contact Michal Strnad at info@rowprompt.com.