Privacy Policy

This Privacy Policy explains what personal information Rogelio Oseguera de la Cruz, an individual doing business as "Satinwise," located in Mercedes, Texas, United States ("Satinwise," "we," "us," or "our"), collects when you use satinwise.com and the Satinwise app (the "Service"), how we use it, who we share it with, and the choices and rights you have. Questions: [email protected]. 1. SUMMARY - We collect what we need to give you an account, run the embroidery tools, save your work, and bill the Pro plan. - The embroidery files and images you upload are stored on our servers in the United States until you delete them or delete your account. - We do not sell your personal information, we do not share it for targeted advertising, and we do not use advertising cookies or tracking pixels. - OpenAI receives text only (design figures and context) when you use "Explain with AI." We do not send it your files, your images, your email address, or your customers' information. - You can delete your designs at any time and delete your account from the app. 2. INFORMATION WE COLLECT 2.1. Account information (through Clerk) - Your email address, your name if you provide it, and your profile photo if you add one or your sign-in provider shares it. - Sign-in and session information: your user ID, credentials (handled by Clerk; we never see your password), sign-up and last-activity dates, and technical session data such as IP address, browser, and device, which Clerk uses for security and bot protection. - Your plan status (Free, trial, Pro, or complimentary Pro). 2.2. Files and content you upload or create - Embroidery files and images you upload (up to 10 MB each), including their file names. - Files and data created from them: converted, optimized, or improved files, preview images, shape data, and design details (name, format, stitch count, colors, size, estimated time, threads, fabric color). - Your settings: machines and hoops, thread brand, machine tuning, costs and margins, and language. - Quotes, activity history, and usage counts (how many times you use each feature each month, to apply plan limits). - Orders and customers: information you choose to enter about your own customers (such as name, phone, email, and notes), orders (garments, pieces, prices, due dates, notes), and payments you record (amount, date, method, note). 2.3. Payment information (through Stripe) - When you start a trial or subscribe, we create a Stripe customer record with your email address, your name if it is on your account, and your user ID. - Stripe collects and processes your card details. We never see or store your full card number. We store the Stripe customer and subscription IDs, the price, the subscription status, period and trial end dates, cancellation status, and payment grace period dates. 2.4. Free trial records - To allow only one free trial per person, we store a one-way cryptographic hash (SHA-256) of your normalized email address (lowercase, without "+" tags, and, for Gmail addresses, without dots), together with your user ID and the date. We do not store your email address in that record. 2.5. Free file check without an account - If you use the free file check on our home page, we analyze the file and then discard it without storing it. To prevent abuse, we use your IP address in memory for up to one hour to limit the number of checks; we do not save it to our database. 2.6. Technical information and logs - Our servers and our providers (including Cloudflare and Railway) process technical information about each request, such as IP address, date and time, pages or endpoints requested, browser type, and errors, for security, troubleshooting, and fraud prevention. 2.7. Messages you send us - If you email us, we keep your email address and your message so we can reply. We do not knowingly collect sensitive personal information, such as Social Security numbers, financial account numbers other than card data handled by Stripe, health information, or precise geolocation. 3. COOKIES, LOCAL STORAGE, AND ANALYTICS We do not use advertising cookies or tracking pixels. We use: - Clerk cookies (for example, __session and __client_uat): to sign you in, keep you signed in, and protect your account. Strictly necessary. - satinwise_lang cookie: remembers your language (Spanish or English). Lasts 1 year. - Your browser's local storage: remembers your light or dark theme and other interface preferences until you clear it. - Cloudflare cookies (for example, __cf_bm or cf_clearance): may be set to protect the site from bots and attacks. Strictly necessary. - Stripe cookies: set only on Stripe's own checkout and customer portal pages, to process payments and prevent fraud. Analytics. We may use Cloudflare Web Analytics to understand total visits and page performance. When it is turned on, a small script from Cloudflare collects page-load and visit data such as the page viewed, referring site, browser, device type, country, and load times. We do not set cookies for it, and Cloudflare states that it does not track individual users across websites. We use it only in aggregate and never for advertising. We do not use any other analytics service. If we add one, we will update this policy first. If you block cookies, some parts of the Service, such as signing in, may not work. 4. HOW WE USE YOUR INFORMATION - To provide the Service: create and run your account; analyze, convert, improve, and digitize your designs; save your work; and show it only to you. - To bill you: manage your trial, subscription, charges, failed payments, and cancellations, and enforce one free trial per person. - To keep the Service safe: apply plan limits, prevent abuse and fraud, and protect our systems. - To create AI explanations when you ask for them (see Section 5). - To support you and send service messages, such as replies to your emails and notices about your account, subscription, price changes, or changes to our policies. We do not send marketing emails. - To run the business: the owner can see, in a protected internal dashboard, each account's email address, sign-up date, last activity, and plan, plus overall usage figures. - To comply with the law, including tax and accounting obligations, and to protect our rights. We do not use your files, images, or other content to train AI models, and we do not use your information for advertising. 5. ARTIFICIAL INTELLIGENCE (OPENAI) Only when you click "Explain with AI," our server sends OpenAI the following text: - the design's file name; - the machine details you entered (machine name, number of needles, stitches per minute, hoop size); - figures Satinwise measured from the design (such as stitches, colors, thread changes, jumps, tiny stitches, size, estimated time, hoop fit, fill spacing, thread names, numbers and shares, and findings); and - if you ask from a quote, the quote figures (quantity, price per piece, total, cost, profit, margin, and cost lines). We do not send OpenAI your embroidery files, your images, your email address, your name, or your customers' information. Please do not put personal information in file names or machine names. OpenAI processes this text as our service provider under its API terms. If we ever start sending images or other kinds of content to OpenAI, we will update this policy before we do. Background removal in Image to embroidery uses an open-source model (rembg with U2-Net) that runs on our own servers. Those images are not sent to OpenAI or any other outside service. 6. WHO WE SHARE INFORMATION WITH We do not sell your personal information. We share it only with service providers that help us run the Service and that process it on our behalf: - Clerk: accounts, sign-in, and sessions. Data: email, name, photo, session and device data, plan status. United States. - Stripe: payments, subscriptions, and the customer portal. Data: email, name, user ID, payment details. United States. - Supabase: our application database (settings, design details, quotes, history, usage, subscription status, trial records, customers, and orders). United States. - Railway: hosting for our website and our embroidery engine, including storage of the files and images you upload and the files we create from them, and server logs. United States. - Cloudflare: content delivery, DNS, security, and bot protection for all traffic to satinwise.com; routing of email sent to [email protected]; and, if enabled, Cloudflare Web Analytics. Data: IP address and technical request data, and the content of emails you send us. Global network. - OpenAI: AI explanations. Data: the text described in Section 5. United States. Emails you send to [email protected] are forwarded to an inbox we control at an email provider, which also processes them. We may also disclose information if the law requires it, to protect the rights, property, or safety of you, us, or others, or in connection with a reorganization of our business (for example, if we form a company) or a sale of the business, in which case this policy will continue to protect your information. 7. HOW LONG WE KEEP INFORMATION - Your files, designs, quotes, history, settings, customers, and orders: while your account exists, or until you delete them. - Usage counts: while your account exists. - When you delete your account: we cancel your subscription, delete your files from our embroidery engine, and delete your account's records from our database (including your profile, settings, machines, designs, quotes, history, usage, subscription record, customers, orders, and recorded payments). Clerk deletes your sign-in account. - What we keep after deletion: - Your Stripe customer record and payment history, which we keep for as long as tax and accounting laws require. - The free trial record (the hash described in Section 2.4), which we keep to prevent repeated trials. - If you had complimentary Pro, the email address on the complimentary list, until we remove it. - Residual copies in backups and server logs, which are removed over time in the normal course of operations. - Anything else we must keep by law. 8. SECURITY We use reasonable safeguards, including encrypted connections (HTTPS), separation of each account's data in our database and file storage, an embroidery engine that is not publicly reachable, secret keys kept only on our servers, security headers, and rate limits. No system is completely secure. If a security breach affects your personal information, we will notify you as required by law. 9. YOUR CHOICES AND RIGHTS In the app you can view and edit your information, delete designs, quotes, customers, and orders, and delete your account. You can also email [email protected] from your account's email address to ask for access to, a copy of, correction of, or deletion of your personal information. We may need to verify your identity before acting on a request. We will respond within 45 days; if we need more time, as the law allows, we will tell you. We will not treat you differently for exercising your rights. If we deny your request, you can appeal by replying to our decision and asking us to reconsider. We will respond to your appeal within 60 days. If you are a Texas resident and are not satisfied with the outcome, you can contact the Office of the Texas Attorney General at texasattorneygeneral.gov. 10. STATE PRIVACY RIGHTS (INCLUDING TEXAS AND CALIFORNIA) Some state privacy laws, such as the Texas Data Privacy and Security Act and the California Consumer Privacy Act (as amended by the CPRA), apply only to businesses that meet certain thresholds. To the extent any of them applies to us, residents of those states have the rights described in Section 9, plus the following: - Categories collected in the last 12 months: identifiers (name, email, user ID, IP address); commercial information (plan, subscription status, billing history); internet activity (feature usage and technical logs); professional or business information (your costs, quotes, orders, and customers); and content you upload (embroidery files and images). Sources: you, your device, Clerk, and Stripe. - Purposes: those listed in Section 4. We disclose information for business purposes only to the providers listed in Section 6. - Sale, sharing, and targeted advertising: we do not sell personal information, share it for cross-context behavioral or targeted advertising, or use it for profiling that produces legal or similarly significant effects, and we have not done so in the last 12 months. Because of this, there is nothing to opt out of. We also honor Global Privacy Control signals as an opt-out request. - Sensitive information: we do not knowingly collect or process sensitive personal information, and we never sell it. - Authorized agents: you can use an authorized agent to make a request, with proof that you authorized them. 11. CHILDREN The Service is not directed to children under 13, and children under 13 may not use it. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it. If you believe a child under 13 has given us personal information, please contact [email protected]. 12. YOUR CUSTOMERS' INFORMATION If you store information about your own customers in the Service, you decide what to store and why, and we process it only to provide the Service to you. You are responsible for telling your customers how you use their information and for having the right to store it. 13. WHERE INFORMATION IS PROCESSED The Service is operated from the United States, and our providers process information mainly in the United States. Cloudflare's network may also handle traffic in data centers close to where you are. If you use the Service from another country, your information will be transferred to and processed in the United States. 14. CHANGES TO THIS POLICY If we make material changes to this policy, we will tell you by email or in the app before they take effect. The date at the top of this page shows when it was last updated. This policy is available in English and Spanish, and both versions say the same thing; if there is any conflict between them, the English version controls. 15. CONTACT Satinwise (Rogelio Oseguera de la Cruz, doing business as Satinwise) Mercedes, Texas, United States [email protected]