Data and safety
OAuth tokens are encrypted at rest. Client, encryption, and install-signing secrets are isolated in Google Secret Manager. Rover does not inspect or act on login, password, or payment fields.
Privacy noticeRover AI for Webflow
Rover demos, guides, onboards, and helps on your published Webflow site. The Designer Extension owns site-scoped installation, status, reconnect, removal, and secure entry into Rover Workspace. Workspace owns setup, preview, publishing, approved updates, billing, advanced controls, and analytics.
The final Marketplace install URL will replace the Webflow Apps directory link after approval.
Install to live
Rover requests only Authorized user read, Sites read/write, and Custom Code read/write. It does not request CMS, Forms, Ecommerce, AI, Agent Instructions, Cloud Apps, or App Subscriptions.
Webflow shows the exact permissions and selected site. Denying approval leaves the site unchanged.
A one-use owner-bound handoff opens the managed Install panel without putting account IDs or tokens in the URL. Brand, journeys, knowledge, appearance, safety, and analytics stay in their normal Workspace sections.
Workspace registers one immutable hosted script with SHA-384 integrity, preserves unrelated custom code, and respects Webflow publish throttling.
The Designer opens exact site-bound setup, Workspace, and Plan views. Workspace returns through Webflow's documented Designer deep link. Either verified surface can reconnect or remove Rover.
Free requires no card. Paid plans use first-party Rover Stripe Checkout from the site-bound Plan view. Existing subscribers use a Webflow-only Stripe Billing Portal for plan changes, payment methods, invoices, and cancellation.
| Plan | Monthly | Annual | Credits / month | Sites |
|---|---|---|---|---|
| Free | $0 | $0 | 300 | 1 |
| Starter | $39 | $390 | 2,500 | 1 |
| Growth | $129 | $1,290 | 10,000 | 3 |
| Pro | $349 | $3,490 | 30,000 | 10 |
| Scale | $899 | $8,990 | 100,000 | 25 |
| Business | $2,500 | $30,000 required | 250,000 | 50 |
| Enterprise | Custom | Custom | Custom | Custom |
OAuth tokens are encrypted at rest. Client, encryption, and install-signing secrets are isolated in Google Secret Manager. Rover does not inspect or act on login, password, or payment fields.
Privacy noticeIf authorization expires, choose Reconnect in the Designer or managed Install panel. Failed publishes are retry-safe and do not duplicate scripts. Status refreshes only when requested; Rover does not poll in the background.
Recovery helpChoose Remove Rover in the Designer or managed Install panel and confirm. Rover removes only its managed script, publishes the cleanup, schedules paid-plan cancellation for period end, revokes OAuth, erases the encrypted token, and retains a credential-free audit and billing tombstone. Other custom code is preserved.
Include the Webflow site name, the step that failed, and the visible error message. Never send OAuth tokens, client secrets, passwords, or payment details.