Privacy

Updated August 16, 2026

Camellia Row is an event planning & concierge firm. Clients engage us to run their events and their day-to-day affairs, which means they trust us with real information. Here is what we hold, why we hold it, and what we never do with it.

What we hold

• What you tell us. Messages you exchange with the firm, the people and plans you ask us to manage, and the details that come up in that work (names, contact information, dates, preferences).
• What you connect. A client may connect a Google mailbox, calendar, or contacts from their own dashboard. Each connection is made by the client themselves, shows on their dashboard, and can be disconnected there at any time.
• Account records. The ledger of your engagement with the firm: what work ran and what it cost.

Google user data

When a client connects a Google account, Camellia Row's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Calendar access is used only to read the client's schedule and to create or adjust entries on their instruction, in the course of the concierge work they have engaged us for.
• Contacts access is read-only, used only to look up people the client asks us to reach, so we never ask for a number they already have saved.
• Mail, where a client connects a mailbox, is read to surface what needs their attention and to correspond on their behalf, on their instruction.
• Google user data is never sold, never used for advertising, and never transferred to third parties except as needed to provide the service the client asked for, to comply with law, or as part of a merger or acquisition with prior notice.
• Your connected data is read by your assistant to do the work you asked for — it is not browsed by unauthorized parties. A person at the firm looks at it only with your explicit agreement, when security genuinely requires it, or when the law does.
• Stored credentials are encrypted at rest. Disconnecting removes our copy immediately, and revoking access in the client's Google account settings is always the hard stop.

What we never do

• No selling of any client information, to anyone, ever.
• No advertising, and no use of client information for it.
• No sharing of one client's affairs with another. Discretion is the service.

Retention and deletion

We keep records for as long as an engagement is live, because the work depends on them. When an engagement ends, a client may ask us to delete their records and connected-account credentials, and we will, keeping only what bookkeeping and law require.

Text messages

How the firm's text messaging works — opt-in, what we send, rates, and stopping — has its own page.

Questions

Write to hello@camelliarow.com.