Is it safe? What Karrow can and can’t do

Can Karrow change anything in my beehiiv or Ghost account?

No. Karrow uses your API key only to read your published issues. It never posts, edits, or deletes your content in beehiiv or Ghost (it just adds a webhook so new issues arrive as you publish).

Your key is stored on Karrow’s servers and never shown back to you in full: Settings → API keys only shows its last four characters. A Ghost Admin API key has full access to your site, so keep it private and don’t paste it anywhere else.

If you revoke the key in beehiiv or Ghost, Karrow simply stops reading and marks the connection Reconnect needed. Nothing else breaks.

Karrow keeps a cleaned-up copy of each issue it imports. That copy is what you read inside Karrow and what it drafts from.

Does Karrow see my social media passwords?

No. You sign in on each platform’s own page and approve access there, so Karrow never sees your social passwords. You can disconnect any account at any time from Settings → Channels.

Karrow doesn’t have a password of its own for you either. You sign in with Google or with a link sent to your email.

Each social account belongs to the publication you connected it under, and only that publication’s posts can go to it. A post drafted for one newsletter can’t be sent from another newsletter’s accounts.

If a platform ends the connection, for example because you changed your password or removed access on the platform’s side, Karrow marks that channel Reconnect needed in Settings → Channels, and you can reconnect it from there.

Can Karrow post without my approval?

No. A post only goes out when you schedule it or press Post now, and a scheduled post’s text is locked so what goes out is exactly what you approved.

You can pull a scheduled post back before it goes out with Cancel scheduled post. A post can’t be scheduled for a time that has already passed.

On Reddit, Karrow also checks a post before it goes out for patterns Reddit’s spam filter tends to flag: a link shortener like bit.ly, the same text sent to several subreddits within 24 hours, two posts to one subreddit within 48 hours, or a subreddit name it can’t find. It compares against this publication’s own Reddit posts. If one comes up, you choose Cancel, Post anyway, or Post another day. It never blocks you, because you know the community better than Karrow does.

What happens when I disconnect an account?

Disconnecting a social account in Settings → Channels stops it posting and removes Karrow’s access. You can reconnect it any time.

Disconnecting a newsletter key in Settings → API keys goes further: it removes that key’s publications, all their imported issues, and the channels connected to them. On a paid plan your subscription drops by one publication for each one removed, and the difference is prorated.

What does Karrow send to the AI model?

To write a batch, Karrow sends the AI model the issue you picked, short samples of your recent issues and published posts, your Voice tab rules, and your learned tone notes.

The edit buttons send less: just the text you selected, the change you asked for, and the platform’s character limit.

Learning your tone uses the model too. After every three drafts you schedule or discard on a channel, Karrow sends the before-and-after text of your recent ones, with links and @handles removed, so it can write its notes.

Who else can see my drafts?

Only the people in your workspace. Everyone you invite from Settings → Members has the same access as you: they can connect, draft, edit, schedule, and invite. Remove someone from the same page when they no longer need it.

If you work with clients and want each kept fully apart, create a separate workspace for each with New workspace in the workspace switcher.

Your content

Your newsletter content is used only to write your drafts. Karrow doesn’t sell it, and doesn’t use it to train third-party AI models for unrelated purposes. See our Privacy Policy for the details.

Payments are handled on the payment provider’s own checkout page, so your card number never passes through Karrow.

Emails work the same way. Sign-in and billing emails are always sent; everything else, like new-issue alerts and product tips, can be turned off in Settings → Notifications.

How do I delete my data?

Use Delete workspace in Settings → General to remove a workspace and everything in it: publications, posts, drafts, connected channels, and analytics. You type the workspace name to confirm, and it can’t be undone. On a paid plan, cancel your subscription in Billing first.

To delete your own account and personal data, use Delete account in Settings → Profile. Karrow emails you a link to confirm before anything is removed.

Once deleted, Karrow removes your account and personal data, except records it has to keep for legal or accounting reasons. You can also email us and we’ll handle it for you.