The short version
Orders only
Number, date, status, totals, items, payment method name, note, and the customer's name and email unless you turn those off.
Writes to your table
Into a table Rowly creates in your own Notion workspace or Airtable base, with the access you approved in Notion or the token you pasted.
Keeps almost nothing
Your token, encrypted; which row holds which order; and a 30-day activity log. No order contents, no customer records.
Nothing sold
No analytics about your customers, no advertising, no sharing. The app does one thing.
What the app reads
Nothing is sent until you press "Connect this store to Rowly". After that, the plugin sends, for each order when it is created or changes: its number, when it was placed, its status, the total, how much was refunded, the currency, the names and quantities of the items, the name of the payment method, the customer's note, the link to the order in your admin, and the billing name and email (unless you turn those off). When you connect, it also sends your store's address and name. It never sends addresses, phone numbers, card or payment details, products, or anything about your other customers or your WordPress users. Every request is signed with a secret only your store and Rowly know.
Where it writes
Into the table the app created where you chose: a Notion page in your Notion workspace, or an Airtable base. That table is yours. Notion's or Airtable's own terms and privacy policy apply to it, you can edit or delete any row, and the app never reads it back except to update a row it created.
The only outside services the app writes to are Notion and Airtable, and only the one you connected.
If you choose "Connect Notion", you approve Rowly on Notion's own screen and pick the pages it may use. Notion then hands the connection to lmbtechnology.com, LMB Technology's website, which exchanges it for a Notion token, holds that token encrypted for at most 15 minutes until the app collects it, and then deletes it. When Notion asks for the token to be renewed, the app renews it through the same website; the token passes through and is not kept there.
What it keeps
Rowly's server keeps a little bookkeeping for each store:
- Your store's id and the secret it signs requests with, encrypted with AES-256, plus your store's name and address.
- Your Notion or Airtable token (and Notion's refresh token), encrypted with AES-256, plus which service you connected, where the table is, and your two settings.
- Which row holds which order (the order's id, the row's id, and a fingerprint of what was last written), so a change edits its row instead of adding one.
- A log of recent syncs: the order number and total, the result, the time, and an error message if one happened. Entries older than 30 days are deleted.
- If you buy Pro: your plan's status and the Stripe ids of the subscription.
Order contents and your customers' names and emails are not stored: they pass through the server on the way to your table.
Where it runs
Rowly's server runs on Fly.io in Chicago, Illinois (United States), with its database on an encrypted volume there. The encryption key for tokens is kept apart from the database, in Fly's secret store. Only LMB Technology can reach the server.
How long
For as long as the app is installed. Pressing "Disconnect" on Rowly's page deletes the Notion or Airtable token, the order-to-row list and the log immediately. When you press “Disconnect this store” or delete the plugin, it tells Rowly's server, which deletes the same records and the store's secret. Rows already in your table stay, because they are yours.
Your customers' details
The customer's name and email are written to your table so a row reads the way the order does. You can turn this off with "Include customer name and email"; rows are then cleared of those details as their orders next change. You decide what happens to your customers' data in your table, and requests from your customers are yours to answer: the app holds no other copy.
What it does not do
- It does not sell, share or use any data for advertising, analytics about your customers, or anything other than writing your orders to your table.
- It does not read your table back, except to update a row it created.
- It does not change anything in your store.
- It does not contact any service other than your store and the one you connected.
Billing
Rowly Pro is sold by LMB Technology through Stripe Checkout. Stripe handles the payment; Rowly's server only learns that your store's subscription is active, and never sees your card details. Invoices, your card and cancelling are in Stripe's billing portal, reached from "Manage plan" on Rowly's page.
Changes and contact
If this policy changes, we will update this page and the date at the top. Questions about the app or your data go to hello@lmbtechnology.com, or through our contact page. Using the app is also covered by the Rowly terms.
Questions about Rowly?
Email hello@lmbtechnology.com and a person answers, usually the same day.