Privacy policy

What the app reads

For each payment (a Stripe charge): when it was made, the amount, how much was refunded, the currency, its status (succeeded, pending, refunded, disputed and so on), its description, the kind of payment method (for example "Visa" or "ACH"), the customer's name and email from the payment's billing or shipping details, and the payment's id. It reads a payment when Stripe tells it the payment was made or changed, and when you press "Add recent payments" to bring in up to your 100 most recent payments.

It asks Stripe for three permissions: to read payments (charges), to read disputes, and to receive events. It does not read card numbers, bank account numbers, addresses, your balance, payouts, products or customers' other records, and it cannot create, change or refund anything on your account.

Where it writes

Into the table the app created where you chose: a Notion page in your Notion workspace, or an Airtable base. That table is yours. Notion's or Airtable's own terms and privacy policy apply to it, you can edit or delete any row, and the app never reads it back except to update a row it created. Test-mode payments go to their own table.

The only outside services the app writes to are Notion and Airtable, and only the one you connected.

If you choose "Connect Notion", you approve Rowly on Notion's own screen and pick the pages it may use. Notion then hands the connection to lmbtechnology.com, LMB Technology's website, which exchanges it for a Notion token, holds that token encrypted for at most 15 minutes until the app collects it, and then deletes it. When Notion asks for the token to be renewed, the app renews it through the same website; the token passes through and is not kept there.

What it keeps

Rowly's server keeps a little bookkeeping for each account and mode (live or test):

• Your Notion or Airtable token (and Notion's refresh token), encrypted with AES-256, plus which service you connected, where the table is, and your two settings.
• Which row holds which payment (the payment's id, the row's id, and a fingerprint of what was last written), so a refund edits its row instead of adding one.
• A log of recent syncs: the amount and currency, the result, the time, and an error message if one happened. Entries older than 30 days are deleted.
• If you buy Pro: your plan's status and the Stripe ids of the subscription.

Payment contents and your customers' names and emails are not stored: they pass through the server on the way to your table.

Where it runs

Rowly's page inside your Stripe Dashboard is served by Stripe. Its server runs on Fly.io in Ashburn, Virginia (United States), with its database on an encrypted volume there. The encryption key for tokens is kept apart from the database, in Fly's secret store. Only LMB Technology can reach the server.

How long

For as long as the app is installed. Pressing "Disconnect" in the app deletes the token, the payment-to-row list and the log immediately. When you uninstall the app, Stripe tells Rowly's server and it deletes the same records for that account. Rows already in your table stay, because they are yours.

Your customers' details

The customer's name and email are written to your table so a row reads the way the payment does. You can turn this off with "Include customer name and email"; rows are then cleared of those details as their payments next change. You decide what happens to your customers' data in your table, and requests from your customers are yours to answer: the app holds no other copy.

What it does not do

• It does not sell, share or use any data for advertising, analytics about your customers, or anything other than writing your payments to your table.
• It does not read your table back, except to update a row it created.
• It does not change anything on your Stripe account.
• It does not contact any service other than Stripe and the one you connected.

Billing

Rowly Pro is sold by LMB Technology through Stripe Checkout. Stripe handles the payment; Rowly's server only learns that your account's subscription is active, and never sees your card details. Invoices, your card and cancelling are in Stripe's billing portal, reached from "Manage plan" in the app.

Changes and contact

If this policy changes, we will update this page and the date at the top. Questions about the app or your data go to hello@lmbtechnology.com, or through our contact page. Using the app is also covered by the Rowly terms.