Data and safety
OAuth tokens are encrypted at rest. Client, encryption, and install-signing secrets are isolated in Google Secret Manager. Rover does not inspect or act on login, password, or payment fields.
Privacy noticeRover AI for Webflow
Rover demos, guides, onboards, and helps on your published Webflow site. The Designer Extension owns install, preview, publish, health, update, reconnect, and uninstall. Advanced controls and analytics live in Rover Workspace.
The final Marketplace install URL will replace the Webflow Apps directory link after approval.
Install to live
Rover requests only Authorized user read, Sites read/write, and Custom Code read/write. It does not request CMS, Forms, Ecommerce, AI, Agent Instructions, Cloud Apps, or App Subscriptions.
Webflow shows the exact permissions and selected site. Denying approval leaves the site unchanged.
A one-use owner-bound handoff opens brand, journeys, guardrails, and analytics without putting account IDs or tokens in the URL.
Rover registers one immutable hosted script with SHA-384 integrity and preserves unrelated custom code.
Check live health, apply only approved releases, reconnect authorization, or remove Rover.
Free requires no card. Paid plans use external Stripe billing and are disclosed before checkout.
| Plan | Monthly | Annual | Credits / month | Sites |
|---|---|---|---|---|
| Free | $0 | $0 | 300 | 1 |
| Starter | $39 | $390 | 2,500 | 1 |
| Growth | $129 | $1,290 | 10,000 | 3 |
| Pro | $349 | $3,490 | 30,000 | 10 |
| Scale | $899 | $8,990 | 100,000 | 25 |
| Business | $2,500 | $30,000 required | 250,000 | 50 |
| Enterprise | Custom | Custom | Custom | Custom |
OAuth tokens are encrypted at rest. Client, encryption, and install-signing secrets are isolated in Google Secret Manager. Rover does not inspect or act on login, password, or payment fields.
Privacy noticeIf authorization expires, open Rover AI in the Designer and choose Reconnect. Failed publishes are retry-safe and do not duplicate scripts.
Recovery helpIn the Designer Extension, choose Remove Rover and confirm. Rover removes only its managed script, publishes the cleanup, stops paid-plan renewal at the end of the current billing period, revokes OAuth, erases the encrypted token, and retains a minimal audit and billing tombstone. Other custom code is preserved.
Include the Webflow site name, the step that failed, and the visible error message. Never send OAuth tokens, client secrets, passwords, or payment details.