Privacy Policy
Effective date: October 19, 2026
The short version. We collect as little as we can: your email, a scrambled form of your password, and your credit history. Your designs stay on your computer. AI requests pass through us to Anthropic and aren't stored by us. Sew-out photos are kept only if you choose to share a check, and you can delete them any time. We don't sell your data, show ads or track you.
1. The app and the cloud service
This policy explains how Bruce Wattendorf, doing business as SiteSentrix ("SiteSentrix", "we") handles personal information in the StitchFoundry cloud service: accounts, credits and AI features paid for with credits.
The StitchFoundry app works without us. You can use it without an account. Your designs, artwork, embroidery files and settings are saved on your own computer (or in your browser, for the web version), and we never receive them. The app has no analytics or usage tracking.
Your own AI keys stay on your device. If you enter your own key from Anthropic, Google, OpenAI, fal or OpenRouter, the app stores it in your computer's secure password store (or your browser's storage, for the web version) and sends requests straight to that company. Those requests never pass through us, and that company's privacy policy applies.
2. What we collect and why
We collect only what the service needs to run your account and charge credits fairly.
| Information | Why we need it | How long we keep it |
|---|---|---|
| Email address | Your sign-in name; to contact you about your account or purchases | Until you close your account |
| Password, stored only as a scrambled hash (Argon2id) | To check your sign-in. We can't read your password | Until you close your account |
| Sign-in sessions (a scrambled form of the token, start date, last use) | To keep your devices signed in | Until you sign out, or 90 days unused |
| Recent failed sign-ins for an email | To block password guessing | 15 minutes |
| Credit history (each purchase, charge, hold and refund, with date and amount) | To show your balance and history, and for our accounting | 7 years, for tax records, even after the account closes |
| Purchase records from Stripe (checkout ID, pack, amount, whether it was paid) | To add the credits you paid for, once | As credit history |
| Sew-out check records (month, number of requests, whether free, whether shared) | To count your free monthly checks | 13 months |
| Shared sew-out checks (only if you tick "Share") | To improve StitchFoundry (see section 4) | Until you delete them or close your account |
| Error logs | To find and fix problems. They don't contain your requests or photos | Up to 30 days |
What we don't keep: the text, images and photos of your AI requests and the AI's answers (except shared checks). They pass through our service to Anthropic and back.
What we never get: your card number (Stripe handles payment on its own page), your designs, and your own AI keys.
3. Who we share it with
We don't sell or rent personal information, and we don't share it for advertising. Only the companies that run parts of the service for us receive it:
| Company | What it does for us | What it receives |
|---|---|---|
| Anthropic | Runs the Claude AI behind the AI features | Your requests: text, uploaded images, design summaries, sew-out photos. Not your email or name |
| Stripe | Takes card payments | What you give on Stripe's page (card, email, billing details), plus which pack and your account number |
| Railway | Hosts the service and its database in the United States | Everything stored in section 2, kept on its servers |
Each handles data under its own terms and privacy policy: anthropic.com/legal/privacy, stripe.com/privacy and railway.com/legal/privacy.
We may also disclose information if the law requires it, to protect our users or service from fraud or abuse, or to a buyer if the business is sold, who must keep this policy's promises.
4. Sew-out photos and shared checks
Check My Sew-out sends your photos of a finished sew-out, plus a summary and picture of the design, to Anthropic's AI so it can suggest fixes.
- Not shared (the default). Our service passes the photos on and does not keep them.
- Shared (only if you tick "Share this check to help improve StitchFoundry"). We keep that check's photos, the design summary, the AI's answers and the design changes it made. If you later check a sew-out "after the fix from my last check", we link the two to learn whether the fix worked.
- How we use shared checks. Only to improve StitchFoundry's embroidery: its stitch settings, its advice and the instructions it gives the AI. Only the people working on StitchFoundry see them. They are never published, sold or shown to other users. We don't use them to train AI models.
- Deleting them. Delete My Shared Sew-out Checks in StitchFoundry Account deletes all of yours straight away. Closing your account deletes them too.
- Please keep photos to the embroidery. Leave out faces, people and private items. Before a photo leaves your computer, the app shrinks it and saves a fresh copy, which removes hidden details such as location and camera model.
5. Cookies, tracking and advertising
The service uses no cookies, no analytics, no tracking pixels and no advertising. The app signs in with a token it keeps on your device, not a cookie. Stripe's checkout page may use its own cookies to process payment and prevent fraud; see Stripe's policy.
6. Security
- Everything between the app and the service travels over encrypted HTTPS connections.
- Passwords are stored only as Argon2id hashes, and sign-in tokens only as SHA-256 hashes, so a stolen database wouldn't reveal them.
- Repeated wrong passwords lock sign-in for 15 minutes.
- The database sits on Railway's private network, not reachable from the internet, and is backed up.
No system is perfectly secure. If a breach affects your information, we will tell you and the authorities as the law requires.
7. Your choices and rights
Wherever you live, you can:
- See your data. StitchFoundry Account shows your email, credits, history and shared checks. Ask at support@stitchfoundry.app for a full copy.
- Correct it. Ask us to change your email address.
- Delete shared checks any time, with the button in StitchFoundry Account.
- Close your account and delete your data. Ask at support@stitchfoundry.app. We delete everything except the credit and payment records we must keep for tax law.
- Not share. Sharing a sew-out check is always optional, and the AI features work fully without it.
We answer requests within 30 days and never charge for them. We may need to confirm the request comes from your account's email.
California residents have these rights under the CCPA, plus the right not to be treated differently for using them. We don't sell or "share" personal information for advertising as the CCPA defines it.
Europe and the UK. If you live there, the GDPR gives you these rights, plus the rights to object, to limit use, to move your data, and to complain to your data protection authority. Our legal bases: running the service you signed up for (account, credits, AI requests); your consent (shared checks, which you can withdraw by deleting them); legal duties (payment records); and our legitimate interest in keeping the service secure (sign-in lockouts, error logs). Your data is processed in the United States.
8. Children, changes and contact
- Children. Accounts are for adults 18 and over (or the age of majority where you live, if older), as in the Terms of Service. We don't knowingly collect information from anyone younger. If you believe a child has made an account, tell us and we will delete it.
- Changes. If we change this policy in an important way, we will tell you in the app or by email at least 14 days before it applies. We will never start using data you already gave us in a new way without asking you first.
- Contact. Bruce Wattendorf, doing business as SiteSentrix, 8 Maplewood Dr., Mapleville, RI 02839, support@stitchfoundry.app.