Legal
Privacy Policy
This page is a working draft describing our current practices in plain language. It's being reviewed by counsel before StitchPilot is used with real customer data at scale — if anything here looks unclear, please ask us.
What we collect
Account details for the person who signs up (name, email). Workspace data entered by its own team — customer profiles, measurements, orders, calendar events, walk-ins, inventory, and payment records. Basic usage data needed to run the service.
How it's used
Workspace data is used to provide the features you use it for — tracking orders, scheduling, inventory, and payments — and is scoped to your own workspace. It is not shared across workspaces or sold to third parties.
Third parties who process data on our behalf
Google (Gemini API) — when you use the Lumo assistant and it looks up or acts on real workspace data (for example, order details, a customer's name, or a payment amount) to answer your question, that data is sent to Google's Gemini API so Lumo can generate a response. Lumo only accesses data within your own workspace.
Razorpay — used to process subscription billing and marketplace payments. Payment card details are handled directly by Razorpay, not stored by us.
Website cookies and campaign measurement
On this public website only, and only if you choose “Accept”, we use analytics and advertising cookies (Google Analytics, Google Tag Manager and the Meta Pixel, where switched on) to understand which pages and campaigns help businesses find us. If you choose “Only necessary”, none of these load. You can change your choice at any time from “Cookie choices” at the foot of the website.
We also remember, in your browser, how you first arrived (for example the campaign link or the site you came from). It holds nothing that identifies you, and it is sent to us only if you join the waitlist. None of this runs inside the StitchPilot app.
Data retention
Workspace data is retained for as long as your workspace is active. You can request deletion of your account and associated data by contacting us.
Your rights
You can request access to, correction of, or erasure of your personal data. To make a request, contact us using the details below.
Security
Data is transmitted over encrypted connections and access is scoped per workspace. No system is perfectly secure, and we work to keep safeguards current.
Contact
Questions about this policy or data requests: [contact email to be added].