privacy-2026-09-14-1　effective 2026-09-14

Privacy Policy

Kenichiro Tsuru (“we”; a later-formed company will succeed to this position) handles personal information on Stitchify as follows.

1. Information we collect

We do not collect or store credit-card numbers. Payments run through Stripe, which processes card data.

Account information: Name or trade name, email address, and encrypted password, entered by the user
Order information: Recipient name, address, telephone number, order contents, specification, and quantity, entered by the user
Guest order information: Email, shipping details, and order contents entered without creating an account
Payment information: Payment-method type, transaction IDs, and status, obtained through the payment processor
Uploaded materials: Design data, logos, and images entered by the user
Creator information: Social accounts, follower counts, portfolios, shipping details, and sizes entered by creators
Usage logs: IP address, browser data, browsing history, and cookie identifiers, collected automatically

2. Purposes of use

Providing the service, identity checks, and accepting, manufacturing, and delivering orders
Communicating about estimates, orders, and delivery
Payment and invoicing
Support and after-sales inquiries
Improving the service, building features, and analyzing usage
Preventing abuse and investigating terms violations
Legal compliance, including tax and accounting retention
Service notices and campaigns (you may opt out at any time)

3. Third-party provision

We do not provide personal data to third parties without prior consent except (1) where required by law, (2) where necessary to protect life, body, or property and consent is difficult to obtain, (3) where especially necessary for public health or the sound upbringing of children and consent is difficult to obtain, or (4) where necessary to cooperate with a government agency performing statutory duties.

4. Entrusted processing

We may entrust handling of personal data to the extent needed for the purposes above, and we supervise those processors appropriately.

Partner factories: Order contents, specifications, design data, and shipping details, for manufacture and delivery
Payment processors: Name, email, and transaction data, for payment
Carriers: Recipient name, address, and telephone number, for delivery
Cloud and email providers: Information needed to operate the service and send notices

On Showroom, contact and shipping details are disclosed between the user and the creator only after payment completes, and only as needed to perform the engagement (shipping or the shoot). Contact details are not disclosed before payment.

5. Provision to third parties in foreign countries

We may provide personal data to third parties located abroad, including cloud providers, payment processors, and overseas partner factories. In that case we provide information about the foreign country’s personal-information regime and the measures taken by that party, then obtain consent in advance.

6. Cookies and outbound transmission

We may use cookies and similar technologies for analytics, security, and convenience. You may refuse cookies in your browser; some features may then be unavailable.

Current outbound destinations are Cloudflare (content delivery, Turnstile bot protection, and infrastructure protection), Stripe (payments), Resend (email), Sentry (error monitoring), and Neon (database). Transmitted data is limited to what each provider needs for that role.

7. Security measures

Organizational: we appoint a person responsible for personal data and maintain a system to review handling.
Human: people who handle personal data receive necessary training and confidentiality obligations.
Technical: TLS, access control, and encrypted password storage.
Physical: device and media handling controls.
Foreign environment: when handling personal data abroad, we understand that country’s regime and apply security measures.

8. Retention and public notice

We retain personal data for as long as needed for the purposes of use, and for any longer period required by law for transaction records. We delete personal data without delay when it is no longer needed.

Under APPI article 32, this policy publishes the operator name and address (section 11), purposes of use of retained personal data (section 2), security measures (section 7), and the procedure for disclosure requests (section 9).

9. Disclosure requests

You may request notice of purpose, disclosure, correction, addition, deletion, suspension of use or erasure, and suspension of third-party provision. Contact the desk in section 11. We will verify identity and respond as required by law. A prescribed fee may apply to disclosure requests.

10. Guest use

If you order without an account, we still collect and store email and shipping details to fulfill the order and handle inquiries. This policy applies, and you may make the same disclosure requests as registered users.

11. Contact

Operator: Kenichiro Tsuru, sole proprietor, trading as Stitchify
Personal information manager: Kenichiro Tsuru
Email: info@stitchify.app
Hours: Weekdays 10:00–18:00 Japan time, excluding weekends and Japanese public holidays
Address: 神奈川県海老名市中新田 2-7-6-203

12. Changes

We may change this policy to reflect legal or business changes. Material changes will be announced on the service.