Privacy Policy for rowmantic.com

Effective Date: 31 October 2025 Last Updated: 31 October 2025

1. Introduction

Welcome to rowmantic.com ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our conversational AI service for discovering knitting and crochet patterns.

This policy applies to our web application and all related services (collectively, the "Service").

Important Privacy Notice

You do not need to share personal information in conversations. Our AI assistant is designed to help you find patterns and answer craft-related questions without requiring any personal details. We recommend that you:

DO NOT share personal identifying information such as full names, addresses, phone numbers or other contact information, financial information, information about children or family members.

  • DO share craft-relevant information such as:
    • Your skill level (beginner, intermediate, advanced)
    • Types of projects you're interested in
    • Yarn preferences and weights
    • Techniques you want to learn
    • General size categories (small, medium, large) without specific measurements

Our service works best with general craft preferences rather than personal details.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: When you sign in with Google, we receive your Google account email address. Although Google will ask for you to share your name and profile picture, we do not record this.
  • Profile Information: Skill level (beginner/intermediate/advanced), craft preferences (knitting/crochet), and project preferences
  • Conversation Data: Messages you send to our AI assistant about pattern searches, project questions, and craft-related queries.
  • User Preferences: Saved patterns, favorite techniques, yarn preferences, and notification settings

2.2 Information Collected Automatically

  • Usage Data: How you interact with our Service, including features used, patterns viewed, and search queries
  • Device Information: Device type, operating system, browser type, screen resolution, and language settings
  • Log Data: IP address, access times, pages viewed, and referring website addresses
  • Cookies and Similar Technologies: Session cookies for authentication, preference cookies for user settings, and analytics cookies (if you consent)

2.3 Information from Third-Party Services

  • Google Authentication: When you sign in with Google, we receive your basic profile information (email, name, profile picture) from your Google account
  • Ravelry API Data: Pattern information, designer details, and publicly available craft data when you search for patterns

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Providing and Improving Our Service

  • Process your pattern searches and provide personalized recommendations based on craft preferences (not personal details)
  • Maintain conversation context for better assistance during your session
  • Calculate yarn requirements and suggest appropriate patterns for your skill level
  • Improve our AI models and pattern matching algorithms using anonymized data

Data Minimization: We are designed to operate without collecting personal information in conversations. The AI assistant can provide full functionality using only general craft preferences and project requirements.

3.2 Communication

  • Send important updates about our Service
  • Provide customer support and respond to inquiries
  • Send optional newsletters about new features or craft tips (with your consent)

3.3 Security and Legal

  • Detect and prevent fraud, abuse, or security incidents
  • Comply with legal obligations and enforce our Terms of Service
  • Protect the rights, property, and safety of our users and the public

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We store data with trusted third-party services that help us operate our Service:

  • OpenAI/Anthropic: For AI language processing (conversations are processed but not stored by these providers)
  • Vercel: Hosting our servers in the United States
  • Neon: Database storage for user data and conversation history
  • Redis: Temporary session storage during active use
  • Axiom: Analytics and logging services for system monitoring and performance
  • Google: Authentication services when you sign in with Google

4.2 Legal Requirements

We may disclose information if required by law or in response to:

  • Court orders or legal processes
  • Requests from law enforcement or government agencies
  • Protection of our rights, privacy, safety, or property

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this policy:

  • Account Data: Retained while your account is active
  • Conversation History: Stored indefinitely in your account history for your reference and continued use. You can view all past conversations in your history
  • Deleted Conversations: When you delete a conversation, it is permanently removed from our storage immediately
  • Session Data: Temporary storage cleared when your session ends
  • Deleted Account Data: All associated data removed within 30 days of account deletion request

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL
  • Access Controls: Limited access to personal data on a need-to-know basis
  • Secure Storage: Encrypted database storage for sensitive information
  • Regular Security Audits: Periodic reviews of our security practices
  • Session Management: Secure session tokens with automatic expiration
  • Privacy by Design: Our service is intentionally designed to function without requiring personal information in conversations

Your Role in Security: The best protection for your personal information is not to share it in conversations. Our AI assistant doesn't need personal details to help you find perfect patterns.

However, no method of transmission over the Internet or electronic storage is 100% secure.

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Portability: Receive your data in a machine-readable format
  • Restriction: Limit how we process your information
  • Object: Opt out of certain uses of your information

7.2 Conversation Management

You have full control over your conversation history:

  • View History: Access all your past conversations through your account dashboard
  • Delete Conversations: Permanently remove individual conversations at any time
  • Clear All: Option to delete all conversation history while maintaining your account

Privacy Best Practices:

  • Our AI assistant is designed to help without needing personal information
  • If you accidentally share personal details, you can delete that conversation immediately
  • The service works optimally with general craft preferences rather than personal data

7.3 Communication Preferences

  • Unsubscribe from marketing emails via the link in each email
  • Adjust notification settings in your account preferences
  • Opt out of analytics cookies through your browser settings

7.4 Do Not Track

We respect Do Not Track signals and do not track users across third-party websites.

8. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Our servers are located in the United States through our hosting provider Vercel. If you are accessing our Service from outside the United States, please be aware that your information is transferred to, stored, and processed in the United States where our servers are located and our central database (Neon) is operated.

By using our Service, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your country. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to say no to the sale of personal information
  • Right to equal service and price

11. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR:

  • Legal basis for processing (legitimate interest, consent, or contract performance)
  • Right to lodge a complaint with your local supervisory authority
  • Right to withdraw consent at any time

12. Cookies Policy

Types of Cookies We Use:

  • Essential Cookies: Required for authentication and core functionality
  • Preference Cookies: Remember your settings and choices

13. Third-Party Links

Our Service may contain links to third-party websites (such as Ravelry or pattern designers). We are not responsible for the privacy practices of these external sites.

14. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

  • Posting the new policy on this page with an updated "Last Updated" date
  • Sending an email notification for material changes

15. Contact Information

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Email: privacy@rowmantic.com
Website: https://rowmantic.com


Appendix: Data Processing Details

A. Types of Personal Data Processed

Category Examples Purpose Retention
Identifiers Email, name, Google profile ID, IP address Account creation, security While account active
Preferences Skill level, craft type, yarn weight Personalization While account active
Usage Data Patterns viewed, searches performed Service improvement 90 days (then anonymized)
Conversations Craft-related questions, pattern searches (no personal info needed) Service provision, user history Until deleted by user
Session Data Temporary cache, active queries Active session management Duration of session

B. Sub-processors

Service Purpose Data Shared Location
OpenAI/Anthropic AI processing Conversation content (not stored) United States
Vercel Server hosting IP addresses, usage logs United States
Neon Database storage All user data and conversations United States
Redis Session management Temporary session data United States
Axiom Analytics and logging System logs, performance metrics United States
Google Authentication OAuth profile data United States
Ravelry API Pattern data Search queries United States

C. Cookie Details

Cookie Name Type Purpose Duration
session_id Essential Authentication Session
user_prefs Functional User preferences 1 year
analytics_consent Functional Cookie consent 1 year

By using rowmantic.com, you acknowledge that you have read and understood this Privacy Policy.