Skip to content
StitchFile

Privacy policy

Last updated 14 October 2026 · Draft pending legal review

StitchFile is operated by Holland Park US, LLC, the controller of your personal data. We collect as little as we need to make your embroidery files, and we never sell your data. This policy follows UK GDPR and EU GDPR.

What we collect

  • Artwork you upload and the files we make from it. Stored privately in the UK/EU.
  • Your email, if you sign in, to give you access to your designs and receipts.
  • Payment details are handled by Stripe; we never see your card number.
  • Usage data: an anonymous cookie that remembers your previews, and a salted hash of your IP address to limit abuse. Analytics and advertising cookies only if you accept them.

How long we keep it

  • Uploads: deleted after 30 days.
  • Unpaid previews: deleted after 30 days. Purchased files: kept for 12 months so you can download them again.
  • Account and purchase records: as long as your account exists, and as required for tax.

Who processes data for us

  • Supabase (database and file storage, London region), Vercel (website hosting), Stripe (payments), Resend (email delivery).
  • An image vectorization provider, only when you upload a PNG or JPG.
  • Google (Analytics, Ads, Tag Manager), Amplitude and Meta — only after you accept analytics/marketing cookies.

Your rights

You can ask for a copy of your data, correct it, or delete your account and designs at any time: email support@stitchfile.app, or write to Holland Park US, LLC, 311 Curie Drive, Alpharetta, GA 30005, United States. You can also complain to the ICO (UK) or your local data protection authority.

Cookies

Essential cookies keep you signed in and remember your previews. Optional cookies are set only after you click Accept; you can change your mind by clearing this site's data in your browser.