Privacy policy

KRIBA & Co, Lake Forest, CA, United States, is the data controller for RowDocs. Privacy questions and requests go to rowdocs@kriba.co, and are usually answered the same day — there is not much to look up.

Every RowDocs tool runs inside your browser. Spreadsheets you open, the data in them, the filenames, and the documents RowDocs generates are processed on your own device and are never transmitted to us or to anyone else. We do not store them, cannot read them, and could not hand them over if we were asked to.

This is not a promise you have to take on trust — it is observable in your browser’s network tab while a tool runs, which is what the walkthrough walks you through.

Three things, and that is the whole list:

• Purchase data, if you buy Pro. Your name, email, billing address and any tax identifier go to Polar Software, Inc. at checkout. We receive the resulting order record and licence key so we can support you — never your card number.
• Licence checks. About once a day your browser asks Polar Software, Inc. whether your key is still valid. That request carries the key and this product’s identifiers, and — like any web request — your IP address. It carries nothing about your files.
• Server logs. Loading a page generates an ordinary request log at our host. See the processor table below.

No analytics, no trackers, no cookies. There is no Google Analytics on this site and no third-party tracking script of any kind. We removed analytics rather than ask you to dismiss a consent banner on a site whose whole argument is that we do not touch your data. Your licence key is kept in your own browser’s local storage so Pro stays on between visits; that is storage on your device, not a cookie sent to us.

Purchase and licence data: because we need it to perform the contract you entered into when you bought Pro. Server logs: our legitimate interest in keeping the site up and unabused. Where consent would be the applicable basis, we have avoided the processing that requires it — that is what the missing analytics stack is.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and there is no fourth party.

Order and licence records are kept for as long as the subscription lives and then for seven years, because tax and accounting law requires it. Server logs roll off within 30 days. Support emails are kept for two years and then deleted.

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, or ask for it in a portable format. Email rowdocs@kriba.co from the address you bought with and we will act within 30 days.

California residents: the CCPA and CPRA rights to know, delete, correct, and opt out apply. We have nothing to opt out of — we do not sell or share personal information — and we will never treat you differently for exercising a right.

UK and EEA residents: the same requests are your GDPR rights, and you can also complain to your local supervisory authority. Please tell us first; we would rather fix it.

KRIBA & Co is based in the United States, and our processors are US companies, so the little data described above is processed there. Transfers out of the UK and EEA rely on the processors’ standard contractual clauses.

RowDocs is a tool for work and is not directed at children. We do not knowingly collect anything from anyone under 16. If you believe a child has bought a subscription, email us and we will refund and delete it.

If what we process changes, this page changes with it — in the same release, not afterwards — and the effective date at the top moves. Material changes are emailed to Pro subscribers before they take effect.