Privacy policy

What the app reads

For each order: its number, when it was placed, its status, the total, how much was refunded, the currency, the names and quantities of the items, the name of the payment method, the customer's note, and the billing name and email (unless you turn those off). Rowly asks BigCommerce for read-only access to orders and to your store's name and address, and for webhooks that tell it when an order is created, changed or refunded. It does not read addresses, phone numbers, card or payment details, products, customers' other records or anything else, and it cannot change anything in your store.

Where it writes

Into the table the app created where you chose: a Notion page in your Notion workspace, or an Airtable base. That table is yours. Notion's or Airtable's own terms and privacy policy apply to it, you can edit or delete any row, and the app never reads it back except to update a row it created.

The only outside services the app writes to are Notion and Airtable, and only the one you connected.

If you choose "Connect Notion", you approve Rowly on Notion's own screen and pick the pages it may use. Notion then hands the connection to lmbtechnology.com, LMB Technology's website, which exchanges it for a Notion token, holds that token encrypted for at most 15 minutes until the app collects it, and then deletes it. When Notion asks for the token to be renewed, the app renews it through the same website; the token passes through and is not kept there.

What it keeps

Rowly's server keeps a little bookkeeping for each store:

• The access token BigCommerce gave Rowly when you installed it, encrypted with AES-256, plus your store's name, address and the owner's email from the install.
• Your Notion or Airtable token (and Notion's refresh token), encrypted with AES-256, plus which service you connected, where the table is, and your two settings.
• Which row holds which order (the order's id, the row's id, and a fingerprint of what was last written), so a change edits its row instead of adding one.
• A log of recent syncs: the order number and total, the result, the time, and an error message if one happened. Entries older than 30 days are deleted.
• If you buy Pro: your plan's status and the Stripe ids of the subscription.

Order contents and your customers' names and emails are not stored: they pass through the server on the way to your table.

Where it runs

Rowly's server runs on Fly.io in Chicago, Illinois (United States), with its database on an encrypted volume there. The encryption key for tokens is kept apart from the database, in Fly's secret store. Only LMB Technology can reach the server.

How long

For as long as the app is installed. Pressing "Disconnect" on Rowly's page deletes the Notion or Airtable token, the order-to-row list and the log immediately. When you uninstall the app, BigCommerce tells Rowly's server and it deletes the same records for your store, and BigCommerce removes Rowly's webhooks. Rows already in your table stay, because they are yours.

Your customers' details

The customer's name and email are written to your table so a row reads the way the order does. You can turn this off with "Include customer name and email"; rows are then cleared of those details as their orders next change. You decide what happens to your customers' data in your table, and requests from your customers are yours to answer: the app holds no other copy.

What it does not do

• It does not sell, share or use any data for advertising, analytics about your customers, or anything other than writing your orders to your table.
• It does not read your table back, except to update a row it created.
• It does not change anything in your store.
• It does not contact any service other than your store and the one you connected.

Billing

Rowly Pro is sold by LMB Technology through Stripe Checkout. Stripe handles the payment; Rowly's server only learns that your store's subscription is active, and never sees your card details. Invoices, your card and cancelling are in Stripe's billing portal, reached from "Manage plan" on Rowly's page.

Changes and contact

If this policy changes, we will update this page and the date at the top. Questions about the app or your data go to hello@lmbtechnology.com, or through our contact page. Using the app is also covered by the Rowly terms.