Who we are
Duckrow is run by Duckrow Inc., a company incorporated in Alberta, Canada. In this policy, "Duckrow", "we" and "us" mean that company.
Our privacy officer is Shahrukh, who is responsible for how Duckrow handles personal information. You can reach him at hello@duckrow.ai.
Two kinds of data
Duckrow handles two kinds of personal information, and this policy treats them differently.
- Information about you, our customer: your account, your workspace, your billing and how you use Duckrow. We decide how this is used, as described here.
- Information you bring into Duckrow about your leads: the names, emails, phone numbers and other details in your tables and campaigns. You decide what goes in and why. We handle it on your behalf, only to run the service for you.
What we collect
- Account details: your name, email address, password (stored scrambled, never readable) and two-step login settings.
- Workspace content: your tables, columns, enrichment results, campaigns, sequences and notes.
- Connected accounts: the mailboxes, LinkedIn accounts and phone numbers you connect, and the access needed to send from them.
- Messages: the emails, LinkedIn messages and texts your campaigns send, and the replies they receive.
- Billing: your plan, credit balance and invoices. Card payments are handled by Stripe, so we never see your full card number.
- Technical information: log records such as your IP address, browser and the pages you open, kept for security and for fixing problems.
How we use it
- To run Duckrow: fill your tables, send your sequences, show replies in your inbox and keep each lead on the same texting number.
- To run the AI features you choose, such as AI columns, writing help, reply drafts, summaries and reply sorting.
- To bill you, track credits and send account and service emails.
- To keep Duckrow secure, prevent abuse and enforce our Terms.
- To answer support requests and improve Duckrow, using information about how the product is used.
We don't sell personal information, and we don't use your workspace data for advertising.
Signing in with Google
If you sign in with Google, Google shares your name, email address, profile picture and Google account ID with Duckrow. We use them only to create your account, sign you in and show your name and picture in Duckrow.
We don't use this information for anything else. The Limited Use commitments in the next section apply to it too, and you can remove Duckrow's access at any time from your Google account's security settings.
Gmail, Outlook and Google data
For now, Duckrow connects Gmail and Outlook mailboxes through Composio. When you connect one, Google's or Microsoft's screen asks you to allow Composio. Composio is a separate company: it holds the mailbox sign-in, and Duckrow sends email and reads replies through your connection with it.
Gmail can also be connected through Clayr's Google-approved connection. Duckrow then shows "Secured by Clayr", and Google's screen asks you to allow Clayr. Clayr is a separate company, and its only role for Duckrow is this Gmail connection.
Through these connections, Duckrow sends the emails your campaigns and replies ask for, and looks at new mail in your inbox only to find replies to threads Duckrow started. Composio passes Duckrow each new inbox message for this. Duckrow keeps what it needs to show those replies in your inbox, a short preview of each, and drops the rest.
Duckrow's use and transfer of information received from Google APIs, directly or through Composio or Clayr, follows the Google API Services User Data Policy, including the Limited Use requirements. We hold Outlook and Microsoft data to the same rules. In particular:
- Google data is used only to provide and improve the features you use in Duckrow.
- We don't use Google data for advertising, and we don't sell it.
- We don't use Google data to develop, improve or train general AI or machine-learning models.
- People at Duckrow read it only with your permission, for security, or when the law requires it.
When you disconnect a mailbox, Duckrow asks for its Google or Microsoft access to be cancelled, through Composio or Clayr, before removing the connection.
LinkedIn and texting
LinkedIn actions go out from your own LinkedIn account, connected through Unipile.
Texts go out from numbers registered for your business with the carriers. Texts carry opt-out instructions until the person replies, and a STOP reply opts that person out before the next send.
Mobile numbers and texting consent are never shared with third parties or affiliates for their marketing or promotional purposes.
AI features
When you run an AI feature, the text it needs (for example a row's columns or a reply) is sent to the AI provider behind that feature to produce the result. If you add your own AI key, that request goes to your provider under your agreement with them.
We don't use your workspace data to train AI models.
Where your data is kept
Duckrow's data is stored by our providers in Canada (Montreal). Some providers work from the United States and other countries, so your information may be processed outside Canada, under the laws of those places. To learn how these providers protect it, contact our privacy officer at hello@duckrow.ai.
Keeping and deleting
We keep your information while your account is open. You can delete rows, tables and campaigns yourself at any time.
To close your account and delete its data, email hello@duckrow.ai. We delete it within 30 days, apart from records the law requires us to keep, such as invoices.
Security
Every workspace is kept apart by the database itself, connections are encrypted, and two-step login is available on every account. The details are on our Security page.
Your choices and rights
You can ask to see, correct or delete your personal information, or withdraw your consent, by emailing hello@duckrow.ai. We answer within 30 days.
We handle personal information under Alberta's Personal Information Protection Act and, where it applies, Canada's Personal Information Protection and Electronic Documents Act. You can complain to the Office of the Information and Privacy Commissioner of Alberta.
If a Duckrow customer contacted you, they decide how your information is used, so please contact them first. You can always unsubscribe from their emails or reply STOP to their texts. We'll help them respond to your request.
Children
Duckrow is a business tool for people 18 and over. We don't knowingly collect information from children.
Changes to this policy
When this policy changes, we update the date at the top. If a change matters to how your information is used, we tell you by email before it takes effect.
Contact
Duckrow Inc., email hello@duckrow.ai.
See also: Terms of service