Privacy Policy

1. What we collect

• Account data: email address and authentication data, handled by Supabase Auth.
• Uploaded content: images you upload and designs you create in Studio, stored to let you re-open, edit, and re-download your own work.
• Billing data: your subscription plan and credit balance. Card numbers and full payment details are collected and stored by Paddle, our payment processor — Stitchify never sees or stores full card numbers.
• Usage data: which features you use (for rate limiting and abuse prevention) and basic error logs (to debug failed digitize jobs).

2. How we use it

Solely to operate the service: authenticating you, running your AI-generation and digitizing jobs, tracking your credit balance, and sending you transactional emails (billing receipts, password resets). We don't sell your data, and we don't use your uploaded images or designs to train AI models.

3. Third-party processors

We rely on the following infrastructure providers, each processing only the data needed for their function:

• Supabase — authentication and database (Postgres)
• Paddle — payment processing and billing (Merchant of Record)
• Upstash — rate limiting (Redis), keyed by your user id or IP address, not linked to any other profile data
• Cloudflare R2 / object storage — stores uploaded images and generated embroidery files
• AI image-generation provider — processes prompts and reference images you submit to the AI generator, solely to return a generated image to you

None of these providers are permitted to use your data for their own purposes beyond providing the service to us.

4. Cookies

We use only functional cookies required for authentication (session tokens set by Supabase Auth). We don't use advertising or cross-site tracking cookies.

5. Data retention

Your designs and uploaded images are retained until you delete them or close your account. Billing records are retained as long as required for tax/accounting purposes, independent of account deletion.

6. Your rights

You can access, export, or delete your designs at any time from the dashboard. To delete your account and associated data entirely, contact support — we'll remove your account data, uploaded content, and generated designs, retaining only what billing/tax law requires us to keep.

7. Security

Data is encrypted in transit (HTTPS) and at rest by our infrastructure providers. Access to production systems is restricted to the operators running the service.

8. Children's privacy

Stitchify is not directed at children and is not knowingly used to collect data from anyone below the age required to form a binding contract in their jurisdiction.

9. Changes to this policy

We may update this policy as the product changes. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this policy or a data request: reach out via the support contact listed on your account/billing page.