Privacy Policy for rowmantic.com
Effective Date: 31 October 2025 Last Updated: 31 October 2025
1. Introduction
Welcome to rowmantic.com ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our conversational AI service for discovering knitting and crochet patterns.
This policy applies to our web application and all related services (collectively, the "Service").
Important Privacy Notice
You do not need to share personal information in conversations. Our AI assistant is designed to help you find patterns and answer craft-related questions without requiring any personal details. We recommend that you:
DO NOT share personal identifying information such as full names, addresses, phone numbers or other contact information, financial information, information about children or family members.
- DO share craft-relevant information such as:
- Your skill level (beginner, intermediate, advanced)
 - Types of projects you're interested in
 - Yarn preferences and weights
 - Techniques you want to learn
 - General size categories (small, medium, large) without specific measurements
 
 
Our service works best with general craft preferences rather than personal details.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: When you sign in with Google, we receive your Google account email address. Although Google will ask for you to share your name and profile picture, we do not record this.
 - Profile Information: Skill level (beginner/intermediate/advanced), craft preferences (knitting/crochet), and project preferences
 - Conversation Data: Messages you send to our AI assistant about pattern searches, project questions, and craft-related queries.
 - User Preferences: Saved patterns, favorite techniques, yarn preferences, and notification settings
 
2.2 Information Collected Automatically
- Usage Data: How you interact with our Service, including features used, patterns viewed, and search queries
 - Device Information: Device type, operating system, browser type, screen resolution, and language settings
 - Log Data: IP address, access times, pages viewed, and referring website addresses
 - Cookies and Similar Technologies: Session cookies for authentication, preference cookies for user settings, and analytics cookies (if you consent)
 
2.3 Information from Third-Party Services
- Google Authentication: When you sign in with Google, we receive your basic profile information (email, name, profile picture) from your Google account
 - Ravelry API Data: Pattern information, designer details, and publicly available craft data when you search for patterns
 
3. How We Use Your Information
We use the collected information for the following purposes:
3.1 Providing and Improving Our Service
- Process your pattern searches and provide personalized recommendations based on craft preferences (not personal details)
 - Maintain conversation context for better assistance during your session
 - Calculate yarn requirements and suggest appropriate patterns for your skill level
 - Improve our AI models and pattern matching algorithms using anonymized data
 
Data Minimization: We are designed to operate without collecting personal information in conversations. The AI assistant can provide full functionality using only general craft preferences and project requirements.
3.2 Communication
- Send important updates about our Service
 - Provide customer support and respond to inquiries
 - Send optional newsletters about new features or craft tips (with your consent)
 
3.3 Security and Legal
- Detect and prevent fraud, abuse, or security incidents
 - Comply with legal obligations and enforce our Terms of Service
 - Protect the rights, property, and safety of our users and the public
 
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:
4.1 Service Providers
We store data with trusted third-party services that help us operate our Service:
- OpenAI/Anthropic: For AI language processing (conversations are processed but not stored by these providers)
 - Vercel: Hosting our servers in the United States
 - Neon: Database storage for user data and conversation history
 - Redis: Temporary session storage during active use
 - Axiom: Analytics and logging services for system monitoring and performance
 - Google: Authentication services when you sign in with Google
 
4.2 Legal Requirements
We may disclose information if required by law or in response to:
- Court orders or legal processes
 - Requests from law enforcement or government agencies
 - Protection of our rights, privacy, safety, or property
 
4.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Retention
We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this policy:
- Account Data: Retained while your account is active
 - Conversation History: Stored indefinitely in your account history for your reference and continued use. You can view all past conversations in your history
 - Deleted Conversations: When you delete a conversation, it is permanently removed from our storage immediately
 - Session Data: Temporary storage cleared when your session ends
 - Deleted Account Data: All associated data removed within 30 days of account deletion request
 
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL
 - Access Controls: Limited access to personal data on a need-to-know basis
 - Secure Storage: Encrypted database storage for sensitive information
 - Regular Security Audits: Periodic reviews of our security practices
 - Session Management: Secure session tokens with automatic expiration
 - Privacy by Design: Our service is intentionally designed to function without requiring personal information in conversations
 
Your Role in Security: The best protection for your personal information is not to share it in conversations. Our AI assistant doesn't need personal details to help you find perfect patterns.
However, no method of transmission over the Internet or electronic storage is 100% secure.
7. Your Rights and Choices
7.1 Access and Control
You have the right to:
- Access: Request a copy of your personal data
 - Correction: Update or correct inaccurate information
 - Deletion: Request deletion of your account and associated data
 - Portability: Receive your data in a machine-readable format
 - Restriction: Limit how we process your information
 - Object: Opt out of certain uses of your information
 
7.2 Conversation Management
You have full control over your conversation history:
- View History: Access all your past conversations through your account dashboard
 - Delete Conversations: Permanently remove individual conversations at any time
 - Clear All: Option to delete all conversation history while maintaining your account
 
Privacy Best Practices:
- Our AI assistant is designed to help without needing personal information
 - If you accidentally share personal details, you can delete that conversation immediately
 - The service works optimally with general craft preferences rather than personal data
 
7.3 Communication Preferences
- Unsubscribe from marketing emails via the link in each email
 - Adjust notification settings in your account preferences
 - Opt out of analytics cookies through your browser settings
 
7.4 Do Not Track
We respect Do Not Track signals and do not track users across third-party websites.
8. Children's Privacy
Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
9. International Data Transfers
Our servers are located in the United States through our hosting provider Vercel. If you are accessing our Service from outside the United States, please be aware that your information is transferred to, stored, and processed in the United States where our servers are located and our central database (Neon) is operated.
By using our Service, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your country. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
 - Right to know if personal information is sold or disclosed
 - Right to say no to the sale of personal information
 - Right to equal service and price
 
11. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have additional rights under GDPR:
- Legal basis for processing (legitimate interest, consent, or contract performance)
 - Right to lodge a complaint with your local supervisory authority
 - Right to withdraw consent at any time
 
12. Cookies Policy
Types of Cookies We Use:
- Essential Cookies: Required for authentication and core functionality
 - Preference Cookies: Remember your settings and choices
 
13. Third-Party Links
Our Service may contain links to third-party websites (such as Ravelry or pattern designers). We are not responsible for the privacy practices of these external sites.
14. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page with an updated "Last Updated" date
 - Sending an email notification for material changes
 
15. Contact Information
If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
Email: privacy@rowmantic.com
Website: https://rowmantic.com  
Appendix: Data Processing Details
A. Types of Personal Data Processed
| Category | Examples | Purpose | Retention | 
|---|---|---|---|
| Identifiers | Email, name, Google profile ID, IP address | Account creation, security | While account active | 
| Preferences | Skill level, craft type, yarn weight | Personalization | While account active | 
| Usage Data | Patterns viewed, searches performed | Service improvement | 90 days (then anonymized) | 
| Conversations | Craft-related questions, pattern searches (no personal info needed) | Service provision, user history | Until deleted by user | 
| Session Data | Temporary cache, active queries | Active session management | Duration of session | 
B. Sub-processors
| Service | Purpose | Data Shared | Location | 
|---|---|---|---|
| OpenAI/Anthropic | AI processing | Conversation content (not stored) | United States | 
| Vercel | Server hosting | IP addresses, usage logs | United States | 
| Neon | Database storage | All user data and conversations | United States | 
| Redis | Session management | Temporary session data | United States | 
| Axiom | Analytics and logging | System logs, performance metrics | United States | 
| Authentication | OAuth profile data | United States | |
| Ravelry API | Pattern data | Search queries | United States | 
C. Cookie Details
| Cookie Name | Type | Purpose | Duration | 
|---|---|---|---|
| session_id | Essential | Authentication | Session | 
| user_prefs | Functional | User preferences | 1 year | 
| analytics_consent | Functional | Cookie consent | 1 year | 
By using rowmantic.com, you acknowledge that you have read and understood this Privacy Policy.