Privacy Policy

Last updated: 2026-05-28

This Privacy Policy describes how Rowi collects, uses, shares and protects your personal data. Rowi operates the Emotional Budgeting and Vital Signs platform built on the Six Seconds methodology. Your privacy is a core principle of our product, not a formality.

1. Who is responsible for your data

Rowi, with operations managed from Peru, is the controller of the personal data it collects through this platform for individual users.

When you use Rowi as part of your company, educational institution or organization (B2B account), that organization is the controller of your data, and Rowi acts as a processor following its instructions. In that case, your organization's privacy policies also apply.

Six Seconds is an independent entity that provides the scientific methodology (SEI, Brain Talents, Vital Signs) and reference data (benchmark). Six Seconds is not responsible for the operation of this platform. See the 'Notice about Six Seconds' for more detail.

2. What data we collect

  • Account data: name, email address, preferred language, country, profile photo.
  • Emotional measurement data: responses to assessments (Vital Signs, pulse points), SEI competencies, Brain Talents, debriefs.
  • Relationship data: family ties, work relationships (manager/reports), service engagements you declare.
  • Technical data: IP address, device type, browser, access logs.
  • Payment data: handled by Stripe; Rowi does not store card numbers.

3. Why we use your data (legal bases)

  • Providing the service (performance of the contract): showing you your measurements, generating reports, enabling the features you activate.
  • Improving the product and research (legitimate interest and/or explicit consent): refining the BE2GROW model and the frameworks. Use for research is governed by the 'Research Notice' and requires your explicit, revocable consent.
  • Transactional communications (performance of the contract): confirmations, invitations, reminders.
  • Legal compliance and security (legal obligation and legitimate interest).

4. Use of data for research

Rowi is also a research platform on emotional intelligence. Your data may contribute to refining our models, ALWAYS under safeguards:

  • Explicit consent, separate from the basic use of the product. You can revoke it at any time.
  • Anonymization or pseudonymization before any aggregate analysis.
  • N≥5 rule: no aggregate team or organization data is shown if there are fewer than 5 people, to prevent re-identification.
  • Five visibility levels: personal, team aggregate, organization aggregate, public community, and research lens.
  • Every research query is recorded in an access audit (ResearchAccessAudit).

See the 'Research Notice' for the full detail and the consent flow.

5. Who we share data with

  • Service providers (processors): Stripe (payments), Resend (email), infrastructure providers (Vercel, Neon), under data processing agreements.
  • Six Seconds: in its role as methodological and scientific partner, it may access anonymized/aggregated data for research purposes, in accordance with the 'six_seconds_team' visibility level and always under audit.
  • Your organization: if you use a B2B account, aggregate data (N≥5) may be visible to administrators of your organization according to their role.
  • We never sell your personal data.

6. International transfers

Rowi operates with infrastructure that may process data outside your country of residence. As a protection floor we apply the EU General Data Protection Regulation (GDPR), adapted by jurisdiction (Peru: Law No. 29733; Ecuador: LOPDP). When we enter markets with data residency requirements (for example, China under PIPL), we will implement the corresponding measures.

7. Your rights

You have the right to: access your data, rectify it, erase it, object to its processing, request portability and revoke consents.

You can exercise most of these rights directly from the Privacy section of your account, including exporting your data.

For additional requests, write to privacidad@rowiia.com.

8. Retention

We keep your data while your account is active and for the period necessary to comply with legal obligations. When you delete your account, your personal data is deleted or anonymized, except for what we must retain by law.

9. Security

We apply encryption in transit and at rest for sensitive data, role-based access control, and audit logging. No system is 100% infallible, but we treat security as a priority.

10. Contact

Controller: Rowi, with operations managed from Peru. Privacy contact: privacidad@rowiia.com. For legal inquiries: legal@rowiia.com.