Privacy policy

Who we are

ROWsandbox ("we", "us") runs a 16-week Data & AI bootcamp, operated from Ohio, United States. This policy covers the rowsandbox.com website and our application and contact channels.

Questions about this policy: hello@rowsandbox.com.

What we collect

• Contact form: your name (optional), email address, topic, and message.
• Roadmap downloads: your email address and the track you chose.
• Enrollment: if you apply and join a cohort, the information needed to run the program and invoice you (name, email, billing details, employer if sponsored).
• Technical: standard server logs from our hosting provider. We run no advertising trackers and no cross-site analytics.

How form data travels

When you submit a form, your entry is relayed by FormSubmit (a form-to-email processor) and delivered to our inbox. Before submission, we verify that your email’s domain can receive mail by querying Cloudflare’s DNS-over-HTTPS service — only the domain part of your address (e.g. "gmail.com") is sent to Cloudflare, never the full address or your message.

Page fonts load from Google Fonts, which receives your IP address as part of serving the font files.

Why we process it

• To respond to your questions and applications (legitimate interest / steps prior to a contract).
• To deliver a roadmap you requested and follow up about the relevant track (consent — withdraw anytime by unsubscribing or emailing us).
• To run the program and meet bookkeeping and tax obligations once enrolled (contract / legal obligation).

Retention

• Inquiries and roadmap leads: up to 24 months from last contact, then deleted.
• Enrollment and billing records: 7 years, as required for tax purposes.
• Email updates: until you unsubscribe.

Sharing

We never sell or rent personal data, and we don’t share it for advertising. The only recipients are the processors named above (FormSubmit, Cloudflare, Google Fonts, our hosting provider) and our email inbox provider, each only to perform their function.

Your rights

Depending on where you live (including under GDPR), you can request access to, correction of, deletion of, or a portable copy of your data, object to or restrict processing, and withdraw consent at any time. Email hello@rowsandbox.com and we’ll respond within 30 days. You may also lodge a complaint with your local supervisory authority.

International transfers

We are US-based; data you send us is processed in the United States. By using the site you understand your information will be transferred to and stored in the US.

Children

The program and site are intended for adults. We do not knowingly collect data from anyone under 16; if you believe a minor has submitted data, contact us and we will delete it.

Changes

We’ll post any changes here and update the date at the top. Material changes affecting enrolled members are announced by email.