1. Who we are
Stitchable is a website builder operated by Transcend Code, a sole proprietorship registered in the Netherlands (KvK 98088424), at Sint Jacobsstraat 10, 1012 NC Amsterdam, the Netherlands. For the personal data of people who use Stitchable to build sites, we are the data controller.
You can reach us about anything in this policy at support@stitchable.app.
2. Customers and their visitors
This policy covers two groups of people:
- Customers: people who create an account and build sites with Stitchable. This policy describes how we handle your data.
- Visitors: people who visit a site built with Stitchable or fill in one of its forms, such as an RSVP. The customer who owns that site decides what the form asks and where replies go. They are the controller of that data and we process it on their behalf. Questions about a reply you sent should go to the site's owner first.
3. What we collect
Account details. Your name, email address, sign-in details and the organizations you belong to. Sign-in is handled by Clerk.
Billing details. Your plan, billing period and payment history. Payments are processed by Clerk Billing and Stripe; we never see or store your full card number.
Your sites. The text, images, settings and site address you add, and the published versions of your sites.
Google connection. If you connect Google to save form replies, an encrypted access token and the ID of the spreadsheet Stitchable created for your site. See "Google user data" below.
Form replies. What visitors submit through your forms is written straight to your site's Google Sheet. We do not keep a copy beyond the moment of delivering it.
Technical data. Our hosting provider processes IP addresses, browser details and request logs to deliver pages and protect the service against abuse.
Usage statistics, only if you agree. On our public pages (such as the home, pricing and legal pages), Google Analytics records which pages you visit, roughly where you are, your device and browser, and how you arrived. It runs only after you click "Accept" in our cookie notice.
4. How we use it, and our legal basis
- To provide Stitchable: your account, the editor, hosting your published sites and delivering form replies (performance of our contract with you).
- To bill you for your plan and keep financial records (contract and legal obligation).
- To send service messages, such as about your account, payments or important changes (contract).
- To keep Stitchable secure and prevent abuse, such as phishing sites or spam (legitimate interest).
- To comply with the law and respond to lawful requests (legal obligation).
- To understand how people find and use our public pages, so we can improve them (your consent, which you can withdraw at any time).
5. Google user data
When you choose "Create Google Sheet", you sign in with Google and allow Stitchable the drive.file permission. That lets Stitchable open only the files it creates or that you open with it. It cannot see any other file in your Google Drive.
We use this access only to:
- create one spreadsheet for your site in your Google Drive;
- add a tab with a header row for each of your forms;
- write and update rows when visitors submit those forms.
We do not read your other files, sell Google user data, use it for advertising, or use it to train artificial intelligence or machine learning models. No person at Stitchable reads it, unless you ask us to for support, it is needed for security, or the law requires it.
Stitchable's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The spreadsheet belongs to you and stays in your Google account. You can remove Stitchable's access at any time in your Google account permissions. Deleting a site in Stitchable also revokes its Google access.
8. How long we keep it
- Account and site data: for as long as your account exists.
- When you delete a site, we take it offline and delete its content, files and Google access straight away.
- When you delete your account, we delete your account data within 30 days.
- Invoices and payment records: seven years, as Dutch tax law requires.
- Hosting logs: kept briefly for security, then deleted.
- Google Analytics data: 14 months, then deleted by Google.
9. Security
All traffic is encrypted. Google access tokens are encrypted before we store them, and only our servers can use them. Access to production systems is limited to what is needed to run Stitchable. No system is perfectly secure, but we take reasonable measures to protect your data.
10. Your rights
Under the GDPR you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent you gave. Email support@stitchable.app and we will reply within one month.
You can also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or the authority where you live.
11. Children
Stitchable accounts are for people aged 16 or older. We do not knowingly collect personal data from children.
12. Changes to this policy
We will update this page when our practices change and change the date at the top. For significant changes, we will also let customers know by email before they take effect.
Stitchable is operated by Transcend Code, Sint Jacobsstraat 10, 1012 NC Amsterdam, the Netherlands. Chamber of Commerce (KvK) 98088424, VAT NL005308807B03. Questions: support@stitchable.app.