Privacy Policy
Last updated: February 2025
1. Introduction
RowSink ("we," "us," or "our") is a service operated by Formilis Studio that turns your Google Sheets into live API endpoints. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our website at rowsink.com and our related services (together, the "Service"). It also explains your rights and how to exercise them.
By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
2. Information we collect
We collect information in the following ways:
Information you provide
- Account data: When you sign up or log in (e.g. via Google), we receive your name, email address, and profile information from the provider you use.
- Contact and support: When you contact us or submit a form (e.g. on our contact page), we collect the information you provide, such as name, email, company, and message.
Information we collect automatically
- Usage and technical data: When you use our website or API, we may collect IP address, browser type, device information, referring URLs, and general usage data (e.g. pages visited, actions taken) to operate and improve the Service.
- Cookies and similar technologies: We use cookies and similar technologies as described in Section 8.
What we do not store
We do not store the contents of your spreadsheets. Data sent to your RowSink endpoints (e.g. form submissions, API payloads) is passed through to your linked Google Sheet according to your configuration; we do not retain that data on our systems.
3. How we use your information
We use the information we collect to:
- Provide, operate, maintain, and improve the Service
- Authenticate you and manage your account
- Link your Google account and spreadsheets to your RowSink project
- Respond to your requests, comments, and support inquiries
- Send you service-related notices (e.g. security or policy updates) where necessary
- Analyze usage and trends to improve performance and user experience
- Detect, prevent, and address fraud, abuse, or security issues
- Comply with applicable laws and enforce our terms
4. Legal basis (EEA/UK)
If you are in the European Economic Area or the United Kingdom, we process your personal data on the following bases:
- Contract: Processing necessary to perform our contract with you (e.g. providing the Service).
- Legitimate interests: Processing necessary for our legitimate interests (e.g. security, analytics, improving the Service) where not overridden by your rights.
- Consent: Where we rely on consent (e.g. optional cookies or marketing), you may withdraw it at any time.
- Legal obligation: Processing required to comply with applicable law.
6. Data retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. For example:
- Account data is retained while your account is active and for a reasonable period after closure for legal and operational purposes.
- Contact and support correspondence is retained as needed to handle your requests and for our records.
- Logs and technical data may be retained for a limited period for security and operations.
You may request deletion of your personal data at any time (see Section 7). We will honor such requests where we are not required to retain the data by law.
7. Your rights
Depending on where you live, you may have the following rights regarding your personal information:
If you are in the EEA or UK (GDPR)
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Request deletion of your personal data, subject to certain exceptions.
- Restriction: Ask us to restrict processing in certain circumstances.
- Portability: Receive your data in a structured, machine-readable format where applicable.
- Object: Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: Where we rely on consent, you may withdraw it at any time.
- Lodge a complaint: You have the right to lodge a complaint with a supervisory authority in your country.
If you are in California (CCPA/CPRA)
You may have the right to know what personal information we collect and how it is used and disclosed, to request deletion of your personal information, to opt out of the "sale" or "sharing" of your information (we do not sell or share personal information for cross-context behavioral advertising), and to non-discrimination for exercising your rights.
To exercise any of these rights, please contact us using the details in Section 11. We will respond within the time required by applicable law and may need to verify your identity.
9. Children's privacy
The Service is not directed at children under 16 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. For material changes, we may notify you by email or through a prominent notice on the Service. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
11. Contact us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us:
- Email: privacy@rowsink.com
- Contact form: rowsink.com/contact
RowSink is operated by Formilis Studio. For the purposes of the GDPR, the data controller is Formilis Studio (contact as above).