Privacy policy: Rowkiln Document Merge
For the Rowkiln Document Merge add-in for Microsoft Word and Excel. Last updated October 7, 2026.
Rowkiln Document Merge ("Rowkiln") is made by Great Work LLC ("we"). This page explains what Rowkiln handles, where, and for how long. In short: your templates, spreadsheet rows and the documents you make stay on your computer and in Word or Excel, and never reach our servers; our server only knows who you are (from Microsoft sign-in or a license key) and how many documents you've made, so it can run your trial, your plan's monthly allowance and your subscription.
What stays on your computer
- Your template: the open Word document, or the .docx file you pick. Rowkiln reads it inside the add-in to fill in each row.
- Your rows: the open Excel sheet, the CSV or .xlsx file you open, or cells you paste (names, email addresses, amounts and whatever other columns it has). They're read inside the Rowkiln pane on your computer and are never uploaded to us or anyone else.
- The documents you make: the Word files and the combined document are put together inside the pane. PDFs are saved by Word itself: for each row, Rowkiln puts the filled-in copy into the open document, asks Word for its PDF, and puts your template back at the end. Everything is handed to you as a download (or opened in Word); nothing is stored by us.
- In Excel, if you leave the option on, Rowkiln writes a "Rowkiln Status" column next to your data (Done, with the date and what was made).
- In your browser's local storage: your pane settings (file name pattern, which outputs you picked) and the licensing client's cached license, for up to 3 days offline. Clearing your browser data removes them.
Rowkiln uses no Microsoft Graph permissions. It can't read your files, mail, calendar or contacts beyond the document or sheet you open it in, and it never sends your data to Microsoft Graph or anywhere else.
What our server receives
Licensing runs on our server at addons.greatwork.company, operated by Great Work LLC in the United States (DigitalOcean data center in New York).
| Data | Why | Kept |
|---|---|---|
| From Microsoft sign-in (an ID token for the scopes openid, profile, email): your Microsoft account's object id and tenant (organization) id, your name and email address | To keep your trial and subscription with your account across computers. The object id and tenant id are the key; the email address is shown to you and used to contact you about billing. | Until you ask us to delete it |
| How many documents you've made: during the trial, and on a paid plan per calendar month (a count, never the documents, rows or file names) | To run the trial (50 documents or 14 days) and your plan's monthly allowance | Until you ask us to delete it |
| Subscription and payment status from Stripe (plan, tier, status, renewal date, Stripe customer id, number of seats), and for team plans the email addresses of members the buyer assigns to seats | To turn on Rowkiln for paid users and their team | As long as accounting and tax law require (up to 7 years for billing records) |
| For license keys: a one-way fingerprint of the key (we never store the key itself), the buyer's email, and each activation's random device id and label such as "Windows PC" | To check the key and limit how many computers use it | While the key exists; ask us to delete it |
| Your IP address, briefly | To limit abuse (rate limits on sign-in, key activation and billing pages) | Rate-limit counters: minutes, in memory. Web server access logs: rotated away after 14 days |
We never receive your templates, your rows, the documents you make or their file names. We don't use advertising or analytics trackers, and we don't sell or share personal data.
Other companies involved
- Microsoft signs you in (Microsoft Entra ID / Microsoft account) and runs Word and Excel, including the PDFs Word saves. Microsoft's privacy statement applies to that.
- Stripe processes payments. Card details go to Stripe directly; we never see them. Stripe's privacy policy applies.
- Resend sends the emails you ask us for (your license key, a billing link).
- DigitalOcean hosts our server.
Your choices and rights
- Sign out in the Rowkiln pane any time; that clears the sign-in on that computer.
- Ask us to see, correct, export or delete the data we hold about you: email hello@greatwork.company. We reply within one business day and act within 30 days. Trial and account records are deleted within 30 days of a deletion request, or of the end of a canceled subscription if you ask; billing records are kept only as long as the law requires.
- Cancel your subscription in Manage billing; we stop billing at the end of the paid period.
The people in your data
You decide what goes into your template and rows, so you're the one responsible to the people in them for having their details and the right to use them. We never see that data.
Changes
If this policy changes in a way that affects what we collect, we'll update the date above and say so in the add-in.
Contact
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company.