1. Introduction
RowDesk is a browser-based workspace for preparing CSV and XLSX data before CRM and business-system imports. This policy describes the marketing website, its free CSV tools and the browser-local dataset workflow described in the RowDesk product documentation.
Local processing concerns the contents of your dataset. It does not mean that visiting the website involves no network requests or that RowDesk collects no information. This draft describes the free-tool email capture and usage events currently implemented, separately from raw dataset processing.
2. Information we may collect
The free CSV tools send limited usage metadata to the RowDesk API. Events record tool views, file selection, successful parsing and processing, export clicks, email-gate display and completion, export completion and clicks to continue in RowDesk. These events help us understand product use and reliability.
- Event name, tool identifier, free-tool surface and an anonymous browser-session identifier.
- Bucketed file sizes and row counts, column counts and operation durations.
- Allowlisted success or failure metadata where sent; no arbitrary diagnostic text or dataset values.
Email for free-tool downloads
Before the first export, the free tools ask for an email address. The RowDesk API stores the email, its trimmed lowercase form, the first source tool and first/last-seen timestamps. Repeated submissions with the same normalized email update the existing lead. No account or email verification is required.
The optional marketing checkbox is unchecked by default. Each submitted choice is stored separately with its source, wording version and timestamp. Providing an email for export is not marketing consent. Email-capture events can reference the lead record; product-event metadata does not contain the email itself.
Dataset contents are excluded from analytics
Raw spreadsheet or CSV cell values must not be sent to analytics. Dataset samples, dataset email addresses and filenames that may contain customer information are also excluded. Diagnostics must not be used to bypass this boundary.
Website delivery and technical information
Loading the website involves technical requests to the infrastructure serving it. Those requests may expose connection and browser information, such as an IP address and request headers. Deployment-level logging, the exact fields retained and their retention settings still require verification; the absence of an analytics SDK is not a promise that no infrastructure logs exist.
3. Files and dataset processing
In local-processing mode, raw CSV and XLSX files are processed in your browser on your device. Raw dataset contents are not uploaded to RowDesk servers as part of that workflow.
Cleaning, duplicate removal and comparison filtering operate on a working dataset. Exports are generated from that working dataset as separate downloads. Your original source file is not modified or overwritten.
Undo and transformation history are limited to the active session. Keep your source file and save the outputs you need before resetting or closing the workspace. This policy does not promise permanent browser storage, automatic recovery or cloud backup.
4. Website and marketing data
The free tools use a first-party event client and RowDesk API, rather than a third-party analytics SDK. Successful email-gate completion is remembered across the four tools using browser localStorage for 30 days. This marker contains only completion time, expiry time and a version, not your email or dataset. A random session identifier is kept in sessionStorage for usage events. This browser state is not an account, authentication or a paid entitlement. Hosting and delivery settings must be verified separately before making broader claims about cookies or logging.
The newsletter form is not connected to a mailing-list service. Submitting it currently displays a notice that signup is not connected; it does not save or send the entered email address through the form. There is no connected contact-form backend in the current website.
If you separately send a message through an established communication channel, the message may contain your contact details and any information you choose to include. Do not send raw client datasets or sensitive cell values in support messages unless a specific, appropriate handling process has been agreed.
5. Payments
The current pricing page displays plans, but checkout is not connected. The page does not start a subscription or take a payment, and no payment-card collection flow is implemented in this website.
A payment provider and the information exchanged with it must be confirmed and reflected here before billing is activated. No payment provider, card-storage practice or subscription-data retention period is asserted in this draft.
6. How information is used
Where limited metadata or correspondence is collected, its intended purposes are to:
- Operate RowDesk and understand which preparation workflows are useful.
- Process free-tool download email requests and record marketing preferences separately.
- Investigate errors, measure performance and improve reliability.
- Maintain the service and investigate technical or security problems.
- Respond to enquiries and provide support through available communication channels.
8. Data retention
The current local-processing workflow does not upload raw dataset contents for server-side storage. Original files and downloaded exports remain under your control on your device, subject to the settings of your browser, operating system and any storage tools you use.
The 30-day browser marker is not a server-side deletion deadline. Retention schedules for captured emails, consent events, usage events, infrastructure logs and correspondence are not finalized. No fixed retention period, automatic deletion deadline or permanent history availability is promised in this draft. The operator must confirm what is retained, why, for how long and how it is deleted before final publication.
9. Security
RowDesk uses browser-local raw-data processing in local-processing mode and keeps the original source file separate from the working dataset. Important changes can be previewed before applying them, and the current session provides review and undo controls.
These controls do not remove every risk. Protect the device and browser you use, and handle downloaded files according to your organization's requirements. No absolute security guarantee or unverified compliance certification is made.
10. Your choices and enquiries
You choose which local files to open and which prepared outputs to download. Review important changes before applying them and retain your original source file. Deleting an export from your device does not itself delete any separate correspondence or service metadata.
You may leave the marketing checkbox unchecked and still export after providing an email. Clearing the completion marker in browser storage will cause the email gate to appear again; it does not delete emails, consent records or usage events already stored by RowDesk. Account signup, account deletion and a service-level cookie preference control are not connected in the current website. A process for marketing withdrawal and personal-information enquiries still requires operator confirmation.
The approved privacy contact will be provided in the Contact section below. This draft does not promise an unimplemented self-service deletion tool, jurisdiction-specific request procedure or response deadline.
11. Children
RowDesk is designed for business data-preparation workflows, not as a service directed to children. No age-verification or parental-consent process is implemented in the current website. An age policy and handling procedure require operator confirmation before final publication.
12. Changes to this policy
This policy may be updated to reflect changes in RowDesk and its data-handling practices. The Last updated date identifies the revision displayed on this page. New collection or processing practices should be described before the corresponding features are enabled.
13. Contact
The legal operator and approved privacy contact are still awaiting confirmation. This draft does not provide a placeholder email address or an unverified contact destination.