Template: replace the parts in [brackets] with your details and have this checked for your country before launch.
Who is responsible
[Company name], [address] is the controller of your personal data. Contact: contact page or [privacy email].
What we collect
- Account data: your name, email address and password (stored only as a secure hash by our sign-in provider).
- Projects: the patterns, measurements and images you save to your account.
- Billing data: your plan, subscription status and Stripe customer number. Card details go straight to Stripe; we never see or store them.
- Messages: what you send through the contact form.
- Technical data: server logs with IP address, browser and time of request, kept for security and fault finding.
Photos you use in "Photo to pattern" are processed in your browser and are not uploaded unless you save them as part of a project.
Why we use it
- To provide the service and your account (contract).
- To take payments and keep tax records (contract and legal obligation).
- To keep the service secure and fix problems (legitimate interest).
- To send product news, only if you ticked the box (consent, which you can withdraw in your account at any time).
Who helps us
We use a small number of providers who process data on our behalf under data processing agreements:
- Supabase for sign-in and the database ([region, e.g. EU Frankfurt]).
- Stripe for payments and invoices.
- Vercel for hosting the website.
- Google Fonts, which receives your IP address when your browser loads fonts.
Some of these providers are based in the United States. Transfers are covered by the EU-US Data Privacy Framework or standard contractual clauses.
How long we keep it
Account data and projects: until you delete them or your account. Billing records: as long as tax law requires (usually up to 10 years). Server logs: up to 30 days. Contact messages: up to 2 years.
Your rights
You can see, correct, download and delete your data at any time from your account. You can also ask us to restrict or stop processing, object to it, or move your data elsewhere. If you think we have handled your data wrongly, you can complain to your data protection authority.
Cookies and storage
We do not use advertising or tracking cookies. The site stores a few things in your browser that it needs to work:
- Your sign-in session (Supabase), so you stay logged in.
- The studio's work in progress, settings and theme, so nothing is lost if you close the tab.
- That you have seen the cookie note.
Because these are strictly necessary, they do not need consent. Clearing your browser's site data removes them.
Changes
If we change this policy in a way that matters, we will tell you by email or in the app before it takes effect.