Privacy Policy

1. Who operates TidyRow

TidyRow is personally operated by Harith, based in India. In this policy, “TidyRow,” “we,” and “our” refer to Harith’s operation of this service. For privacy questions, requests, or complaints, email harithgoud2@gmail.com.

2. Account and Google sign-in information

When you create an account, our authentication provider, Supabase, processes your email address, account identifier, authentication details, and sign-in information. If you choose a password, it is handled by Supabase’s authentication service. TidyRow does not store your password in its spreadsheet data or browser preferences.

When you choose Google sign-in, Google shares your Google account identifier, email address, name, and profile picture information with Supabase for TidyRow. We use this information to identify your account, maintain your sign-in session, display account details, and provide support. TidyRow does not request permission to read your Gmail messages, Google Drive files, contacts, or calendar.

We do not sell Google sign-in information, use it for advertising, or send it to Gemini as model-training data. Google sign-in information is used for account access and related service operations.

3. Spreadsheets and browser storage

Opening and cleaning a CSV, TSV, or Excel file with the basic tools processes its contents in your browser. Session recovery can save the file name, column names, rows, versions, and changes in this browser’s site storage. Saved workflows and preferences may also be stored there. This is device storage, not a cloud backup.

Account activity records stored with Supabase may include your account ID, actions such as opening or exporting a file, the selected cleanup destination, row counts, and timestamps. Those activity records do not include spreadsheet cell values or file names.

Signing out does not necessarily erase saved spreadsheet recovery data. On a shared device, download what you need and clear TidyRow’s site data in the browser settings. Clearing browser data does not delete your server-side account or information previously sent to a provider.

4. Optional AI tools

When you request an AI cleaning plan, your instruction and column names are sent through our server to Google Gemini. AI cleanup and sentiment tools can also send the selected column values or text. The response returns through our server to your browser.

Do not include personal, sensitive, or confidential information in AI requests. Google’s handling of AI inputs and responses depends on the service configuration and its applicable terms. Unpaid Gemini services can use inputs and outputs to improve Google products and may involve human review. TidyRow does not promise that every AI request has paid-service data protections. Review Google’s Gemini API terms. You can use the basic cleanup tools without requesting AI processing.

TidyRow does not separately train its own AI model on your spreadsheet contents.

5. Why information is used

We use account and activity information to provide sign-in, show your cleanup history, operate and protect the service, investigate errors and abuse, and respond to support and privacy requests. If you email us, we process the contact details, message, and attachments you choose to send. Avoid sending spreadsheet contents unless necessary for support and you are authorized to share them.

Signing in does not subscribe you to marketing emails. Optional Microsoft Clarity and PostHog analytics load only after you choose “Allow analytics.” Functional browser storage supports sign-in, recovery, and your preferences.

6. Service providers and disclosures

TidyRow uses Supabase for authentication and account/activity storage, Vercel for hosting and server requests, and Google for Google sign-in and Gemini AI requests. Support email is handled through the support mailbox provider. These providers process information needed to deliver their services and may generate security and operational logs, such as IP addresses, browser information, request times, and errors.

Information may be processed outside India, depending on where these providers operate. Their terms and privacy practices also apply to their services. See Supabase’s privacy information, Vercel’s privacy information, and Google’s privacy information.

We may disclose information when required by law or when reasonably necessary to protect people, accounts, or the service from abuse. We do not sell personal information or provide it to advertisers.

Optional usage analytics

With your permission, we use Microsoft Clarity to understand visits, clicks, scrolling and how people use TidyRow through session recordings and heatmaps. Clarity processes usage, device, browser and network information, including IP addresses, and may use cookies to connect visits. Page text is masked using Clarity’s masking controls. We do not pass your account identity, file names or spreadsheet values as custom analytics data.

PostHog counts pageviews and anonymous visitors in its US Cloud region. Its automatic click capture, session replay, surveys and error capture are disabled. We remove query strings, URL fragments, referrers and account or spreadsheet values from PostHog events. PostHog may receive browser, device and network information and stores an anonymous analytics identifier in your browser. Shipped receives read-only access to daily aggregate pageview and visitor counts. See PostHog’s privacy policy.

No Clarity or PostHog script loads until you allow analytics. You can decline without losing access to TidyRow, or change your choice through “Analytics preferences” in the app. Declining after allowing stops tracking and reloads the page; download any work you need first. Microsoft processes analytics under its Privacy Statement. See Clarity’s data collection information. Withdrawing permission stops future collection; contact us about previously collected data.

7. Retention and security

Browser data remains until it is overwritten, removed through available app controls, or cleared in your browser. Account and activity records currently have no automatic expiry and remain until deleted by the operator. Contact us to request deletion.

Some information may need to be retained for security, resolving a dispute, or meeting legal obligations. Provider backup and log retention may differ from live account records; we cannot promise immediate removal from every provider backup.

We use authentication and account-scoped access controls to restrict access to account records. No online service or browser storage can be guaranteed completely secure. Keep your sign-in details private and do not share a signed-in browser with others.

8. Your choices and privacy requests

You can stop using AI tools, clear TidyRow’s browser storage, sign out, and revoke Google access through your Google Account connections. Revoking Google access does not itself delete your TidyRow account or existing records.

For account access, correction, deletion, withdrawal of permission, or a privacy complaint, contact harithgoud2@gmail.com with the email address associated with your account. Do not send passwords or sign-in codes. We may ask you to demonstrate control of the account before acting, and will explain any information that must be retained. Additional rights may apply under the laws relevant to you.

9. Payments and subscriptions

Dodo Payments handles paid checkout and subscription management as Merchant of Record. When you open checkout, TidyRow sends your account name, email, chosen product, and an account identifier used to link billing to your account. You provide payment and billing details directly to Dodo’s hosted checkout. TidyRow does not receive or store full card numbers or card security codes.

TidyRow stores linked customer, subscription and payment identifiers, status, dates, currency, amounts, and refund information with Supabase to show your billing history and decide whether Pro access is active. Signed payment notifications update these records. Invoice downloads are requested through our server and returned to you. Monthly usage records include your account identifier, period, file and operation counts, row counts, and request identifiers; they do not include spreadsheet contents.

Dodo processes payment, billing, fraud-prevention, tax and related transaction information under its own Privacy Policy. Payment and tax records may need to be retained under applicable requirements, including after account closure. Contact us about TidyRow’s account records and contact Dodo about information it collects directly.

10. Age and policy updates

TidyRow is intended for adults aged 18 or older using spreadsheet tools for professional or business purposes. It is not intended for children.

We will update this page when our practices change and identify the updated date. Material changes to Google data access or use will be disclosed before the new use, with fresh permission where required.