Privacy Policy
Last updated: June 25, 2026
StitchSpeak is operated by Innovai Studio S.L. ("StitchSpeak", "we", "us"). This policy explains how we handle personal data when you use StitchSpeak to translate, save, export, and discuss knitting or crochet patterns.
Contact for privacy requests: support@stitchspeak.com. Innovai Studio S.L. is based in Spain. If you need company registration, tax, or postal details for a formal request, contact us and we will provide the applicable details.
1. Data controller
Innovai Studio S.L. is the data controller for the personal data described in this policy, unless a third-party provider acts as an independent controller for its own service, such as Lemon Squeezy checkout or Google sign-in.
2. Information we process
- Account data: basic Google account information used to identify your account, such as your Google user ID, name, email address, and profile image if provided by Google.
- Pattern files: files you upload for translation, including PDFs, DOCX, TXT, or RTF files.
- Generated content: translated HTML, extracted text, thumbnails, export metadata, glossary lookups, and chat messages about a translated pattern.
- Credit and payment records: credit balance, checkout session references, Lemon Squeezy webhook event IDs, order references, and transaction metadata needed to grant credits and avoid duplicate grants.
- Technical data: browser storage, local history, logs, error messages, timestamps, and basic request metadata needed to operate and secure the service.
3. Why we use your data
- To provide the service: translate uploaded patterns, preserve layout, save your library, export files, and provide AI chat about a pattern.
- To manage your account: keep you signed in, associate saved patterns with your account, and sync history across sessions.
- To process payments and credits: create checkout sessions, receive verified payment webhooks, grant credits, and prevent duplicate credit grants.
- To improve reliability and security: debug errors, prevent abuse, maintain service availability, and protect API keys server-side.
- To respond to requests: handle support, deletion, access, or correction requests.
4. Legal bases
Where GDPR applies, we rely on performance of a contract to provide paid and account features, legitimate interests to secure and improve the service, legal obligations for payment and accounting records, and consent where a feature specifically asks for it.
5. AI processing
Translation, glossary lookup, and chat features are processed through the StitchSpeak server using Google Gemini. API keys are kept server-side and are not exposed in the browser. Uploaded files and extracted pattern content may be sent to the AI provider solely to provide the requested feature.
6. Payments
Credit purchases are handled by Lemon Squeezy checkout. Lemon Squeezy may process payment details as an independent provider under its own terms and privacy policy. StitchSpeak stores the information needed to reconcile orders, credit balances, and webhook events.
7. Storage and retention
If you are signed in, StitchSpeak may store your source files, translated patterns, thumbnails, chat history, and credit balance so they are available across sessions. Guest history may be stored locally in your browser. We keep data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and maintain reliable records. You can request deletion by contacting us.
8. Local storage and cookies
StitchSpeak uses browser storage for authentication state, local history, temporary workflow hints, and app preferences. Payment and sign-in providers may use their own cookies or storage when you interact with their services.
9. Sharing and subprocessors
We do not sell your personal data. We share data only with providers needed to operate StitchSpeak, including hosting/infrastructure providers, Google services for sign-in and Gemini AI processing, and Lemon Squeezy for checkout and payment reconciliation.
10. Your rights
Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection to processing of your personal data. Email support@stitchspeak.com to exercise these rights. If you are in Spain or the EU, you may also lodge a complaint with your local supervisory authority, including the Agencia Española de Protección de Datos (AEPD) at aepd.es.
11. Changes
We may update this policy as StitchSpeak evolves. The date above shows the latest version.