Privacy Policy

Last updated: [DATE]

Draft for legal review. This page has not been checked by a lawyer. Everything in [brackets] must be filled in before it is published.

Who we are

Stitch and Co is provided by [LEGAL ENTITY NAME] ([ABN / COMPANY NUMBER]), [REGISTERED ADDRESS] (“we”, “us”). Contact our privacy officer at [PRIVACY EMAIL].

This policy covers this website and the Stitch and Co apps (Office, Workshop, Estimates and Vault). We aim to meet the Australian Privacy Principles, the New Zealand Privacy Act 2020, the UK GDPR and Data Protection Act 2018, and applicable United States state privacy laws. [LAWYER TO CONFIRM WHICH LAWS APPLY]

Information we collect

When you use this website

Details you send through the Book a Demo form: name, business email, company, country and your message.
This website does not use analytics or advertising cookies. See our Cookies page.

When your shop signs up

Account details: business name, first site name, time zone, the owner’s name and email, and a password.
Business settings: labour rate, tax rate, currency, deposit, payment terms, company or tax number, phone and address.
Billing: subscriptions are handled by Stripe. Card details go to Stripe and are not stored by us. [CONFIRM ONCE BILLING IS LIVE]

Information your shop puts into the apps

Your shop decides what goes in: customer names and contact details, jobs, quotes, photos and attachments, staff details, hours, leave and wages. For this information your shop is responsible for it, and we handle it on your shop’s behalf. See our Data Processing terms.

How we use information

To provide the apps, keep accounts secure and give support.
To bill subscriptions.
To run AI-assisted features you choose to use, such as photo assessment in Estimates and reading documents.
To reply to demo requests and enquiries.
[ANY MARKETING EMAIL, WITH OPT-OUT, IF USED]

Service providers

We use these providers to run Stitch and Co:

Supabase: database, sign-in and file storage, hosted in the Sydney, Australia region (ap-southeast-2).
Netlify: website and app hosting.
Stripe: subscription payments.
Anthropic: AI processing for photo assessment and document reading.
[EMAIL SENDING PROVIDER]

Some of these providers may process information outside your country, including in the United States. [LAWYER TO CONFIRM LOCATIONS AND TRANSFER SAFEGUARDS]

How we protect information

Every record is stamped with the shop it belongs to, and the database refuses to hand one shop’s data to another.
Wages and the invoice archive are locked to that shop’s administrators at the database.
Changes such as overridden prices, edited timers and exported invoices keep a record of who did what and when.

How long we keep it

[RETENTION PERIODS, INCLUDING AFTER A SHOP CANCELS]

Your rights

You can ask to access or correct personal information we hold about you. Depending on where you live you may also have rights to deletion, restriction, objection and data portability. Email [PRIVACY EMAIL]. If your information was entered by a shop that uses Stitch and Co, contact that shop first.

If you’re not happy with our response you can complain to the Office of the Australian Information Commissioner, the New Zealand Privacy Commissioner or the UK Information Commissioner’s Office.

Data breaches

[BREACH NOTIFICATION PROCESS, INCLUDING THE NOTIFIABLE DATA BREACHES SCHEME]

Changes to this policy

We’ll post any changes on this page and update the date at the top.