Celrow
Log in Start free

Trust / Data handling

Your paperwork.
Clear boundaries.

Know what is processed, what stays, and when it expires.

In memory

Zero file retention: original uploads are not persisted to disk, the application database or object storage.

24 hours

Extracted results are temporary. Export the spreadsheet before the result expires.

10 minutes

Attachment ZIP downloads expire after 10 minutes and can be used once.

From upload to expiry

  1. Upload and process. Original files are held in memory while queued and processed. Upload buffers are cleared when the job finishes; the ephemeral upload store has a 30-minute expiry safeguard.
  2. Extract and review. Text may be sent to AI providers to extract fields. Celrow does not train models on your files. Provider handling and retention follow the applicable provider terms; our upload policy does not imply zero retention at every provider.
  3. Export and keep your copy. Results include extracted values and source filenames. They expire after 24 hours. Attachment ZIPs have a separate single-use, 10-minute download window.
  4. Retain limited records. Account, usage and billing records have separate retention periods. Zero file retention does not mean zero metadata. See the retention table.

Your controls

Review extracted values against your original documents before using them. From Account, you can log out all devices, manage access credentials and request account deletion. For access, correction, export or deletion requests, email [email protected].

Infrastructure and access

Production hosting has not been activated; the hosting target remains pending. AI and other service providers may process data in other locations. US hosting does not mean all processing or administrative access occurs in the US. Read the processing and access disclosure.

Production transport is configured for TLS, with age-encrypted metadata backups. We do not claim database disk encryption or independent security certification on this page.

Report a concern

Contact [email protected] for security reports. Start with a description; do not email credentials or confidential source documents. Business processing terms are available through our DPA contact.