Privacy Policy

What We Collect

• Account information. When you sign in, our authentication provider (Auth0) shares your email address and a unique account identifier with us. We don't see or store your password.
• The files you upload. Datasets you upload for cleaning are stored so we can process them and let you continue working on them across sessions. Only you can access your own datasets and workflows.
• Billing information. If you subscribe to a paid plan, payment is handled entirely by Stripe. We never see or store your card details — we only keep a Stripe customer/subscription reference so we know which plan you're on.
• Basic usage data. Things like export counts and workflow counts, so we can enforce plan limits and keep the product working reliably.
• Cookies. We use a session cookie to keep you signed in and a CSRF token cookie to protect your account from cross-site request forgery. We don't use advertising or analytics cookies, and we don't run any third-party tracking scripts.

How We Use It

Strictly to run the product: authenticating you, processing and storing the files and workflows you create, billing your subscription, and enforcing the limits of your plan. We don't sell your data, and we don't use your uploaded data to train any models.

Who We Share It With

Only the vendors that help us run columnly.io, and only what each one needs to do its job:

• Auth0 — authentication and account sign-in.
• Stripe — payment processing and subscription billing.

We don't share your data with anyone else, and we don't sell it.

How Long We Keep It

Your account, datasets, and workflows are kept for as long as your account is active. Run history is retained according to your plan's settings. You can delete individual datasets and workflows yourself at any time; if you'd like your account and all associated data fully removed, contact us and we'll take care of it.

Data Retention

Retention policies vary by plan and are strictly enforced.

• Free and Basic Plans - File version history is not available on these plans, so no file retention policy applies.
• Professional and Unlimited Plans - We retain up to 2 previous versions of each file. File metadata is stored securely in our database (Supabase), while file contents are stored separately in a secure, encrypted S3 bucket, isolated from other application data. Once a new file version is created, the oldest of the 2 previous versions is deleted.
• Data Security - All data is encrypted in transit and at rest. We use industry-standard encryption methods and follow strict security protocols to protect your information.
• Data Deletion - You can delete your account and all associated data at any time. Simply contact us and we'll handle the deletion process.

Data Infrastructure and Sub-Processors

To provide the best service, we partner with reliable infrastructure providers and who act as data processors under GDPR regulations:

• Database & Authentication - Securely managed by Supabase Inc.
• Application Hosting - Run via Railway Corp.

Transient File Processing

The files you upload for data cleaning are processed transiently in the active runtime memory of our server containers. We do not write this file data to permanent storage, nor do we cache it. The moment your session closes or times out, the transient file content is completely wiped from memory and deleted. We ensure that our infrastructure deployment logs do not capture or record the contents of your data files.

Website Analytics and Cookies

We utilize Google Analytics 4 to understand how users find and navigate our website. This service uses tracking cookies to analyze web traffic. In compliance with regulations, these cookies will not fire until you grant explicit permission via our cookie consent banner. We enforce strict data minimization by limiting Google's data retention settings to a 2-month lfiecycle and keeping personal identifying data strictly isolated from tracking tokens.

Your choices

You can access, export, or delete your datasets and workflows directly from the app at any time. To update your account email, change your subscription, or request full account deletion, reach out to us and we'll help.

Contact

Questions about this policy or your data? Email us at support@columnly.io.