WINDROW — Every property. Every season.

Back to sign in

Privacy

Windrow is operated by Tinker and Scribe Workshop Inc., 1146 Route 895, Elgin, NB E4Z 2M3. The privacy officer is Christopher Mitton. Write to chris@tinkerandscribe.com.

We do not sell personal information. Do not put passwords, card numbers, or government ID numbers in free-text fields.

What we hold

We hold the account email, the organization and job records you enter, photos you upload as field proof, property addresses and coordinates, survey answers you choose to send, and the sign-in cookie that keeps a session.

Where it is processed

  • Supabase (Montreal, Canada, region ca-central-1) stores the database, handles sign-in, stores photos, and sends invite emails.
  • Vercel hosts the app and processes requests in the United States (Washington, DC, region iad1).
  • Mapbox (United States) receives property addresses and coordinates from your browser when you use maps or geocoding.
  • Stripe (United States) processes card payments for the Windrow annual fee only.
  • Resend (United States) sends survey notification emails only.

We do not use an analytics service. No error-monitoring service is currently used. Fonts are self-hosted. They are not loaded from a third-party font site while you use the app.

How long we keep it

If a trial or renewal is unpaid, the app shows a payment screen and we keep the shop's data. Nothing is deleted during that pause.

Windrow is seasonal, so we keep your shop's records between seasons. If a paid plan lapses, or ends at the end of a season, we keep the shop's account and data for at least 24 months from its last active season. That includes customers, properties, jobs, photos, quotes, invoices, settings and user logins. The shop can renew without re-entering anything.

The shop can ask us to delete its data at any time. We handle deletion requests within 30 days. The shop can also ask for an export first.

After 24 months with no active season, we delete the shop's data in full, including photos and user logins. We keep only the records Canadian tax law requires (billing and tax records, for 6 years).

Deletion requests are handled by hand within 30 days. Email the privacy officer.

Your requests

We answer privacy requests within 30 days. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada.

Breaches

If a breach poses a real risk of significant harm, we report it and notify the people affected. We keep breach records for 24 months.