Privacy Policy

Stitch ("we", "our", "us") operates the justdigitizeit.com website and the Stitch embroidery digitizer application. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Stitch, you agree to the practices described here.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile information through our authentication provider, Clerk. If you sign in with a social provider (such as Google or GitHub), we receive the profile data you authorize through that provider.

Payment Information

When you subscribe to a paid plan, your payment details are collected and processed by Stripe. We do not store your full credit card number, CVV, or other sensitive payment credentials on our servers. We receive a tokenized reference, your billing address, and transaction history from Stripe to manage your subscription.

Project Data

SVG files you upload, embroidery settings you configure, and exported files you generate are stored in our database, hosted on Supabase. Saved projects are associated with your account so you can access them across sessions.

Usage and Analytics Data

We collect usage data to improve the product. This includes pages visited, features used, export counts, browser type, operating system, device type, and referring URLs. We may also collect anonymized performance metrics such as page load times and error rates.

Cookies and Local Storage

We use cookies and browser local storage for authentication sessions, user preferences, and analytics. See Section 6 below for more detail.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Stitch application
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Store and retrieve your saved projects
• Send transactional emails (account confirmations, billing receipts, password resets)
• Monitor application performance and fix bugs
• Understand how users interact with the product so we can improve it
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your uploaded SVG files or project data for any purpose other than providing the service to you.

3. Third-Party Services

Stitch relies on the following third-party services to operate. Each has its own privacy policy governing how it handles your data:

• Clerk (authentication): Manages sign-up, sign-in, and session management. Clerk processes your email, name, and social login tokens. Clerk Privacy Policy
• Stripe (payments): Handles payment processing, subscription billing, and invoicing. Stripe collects and stores your payment method details. Stripe Privacy Policy
• Supabase (database and storage): Hosts your project data, account metadata, and application state. Data is stored in secure, encrypted databases. Supabase Privacy Policy
• Vercel (hosting): Serves the Stitch web application. Vercel may process request metadata such as IP addresses, request headers, and access logs. Vercel Privacy Policy

4. Data Retention

We retain your account information and project data for as long as your account is active. If you delete your account, we will remove your personal data and project files within 30 days. Some data may be retained longer if required by law or necessary to resolve disputes, enforce agreements, or operate the service (for example, anonymized analytics data and billing records required for tax compliance).

Stripe retains payment records in accordance with its own data retention policies and applicable financial regulations.

5. Data Security

We take reasonable measures to protect your information. All data in transit is encrypted using TLS. Data at rest in Supabase is encrypted using AES-256. Authentication sessions are managed through Clerk with industry-standard security practices including token rotation and secure cookie handling.

No method of transmission or storage is perfectly secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at privacy@justdigitizeit.com.

6. Cookies

Stitch uses cookies for the following purposes:

• Authentication cookies: Managed by Clerk to maintain your login session. These are essential for the application to function and cannot be disabled.
• Preference cookies: Store your application preferences such as theme settings and default export options. These remain on your device until you clear them.
• Analytics cookies: Help us understand usage patterns and improve the product. You can opt out of analytics cookies through your browser settings.

We do not use advertising cookies or tracking pixels. We do not participate in cross-site tracking networks.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your account and associated data. You can initiate account deletion from your account settings, or by contacting us directly.
• Export: Request an export of your project data and personal information in a machine-readable format.
• Restriction: Request that we limit how we process your data in certain circumstances.
• Objection: Object to our processing of your data for specific purposes such as analytics.

To exercise any of these rights, email us at privacy@justdigitizeit.com. We will respond to your request within 30 days.

8. Children's Privacy

Stitch is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at privacy@justdigitizeit.com.

9. International Data Transfers

Stitch is hosted in the United States. If you access the service from outside the United States, your data may be transferred to and processed in the United States or other countries where our service providers operate. By using Stitch, you consent to the transfer of your data to these locations.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. If we make material changes, we will notify you by email or through a notice in the application. Your continued use of Stitch after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

privacy@justdigitizeit.com