Privacy Policy

Summary

We collect the minimum data needed to provide the service. We don't sell your data. We don't show ads. We use privacy-friendly analytics, including session recordings (with form inputs masked) so we can understand how the app is used and improve it.

What We Collect

• Account info: Email address and name (from Google sign-in or email signup). Used to identify your account and projects.
• Designs: Your project data (shapes, text, settings) stored so you can save and reopen projects. Stored in our database (Supabase).
• Images you convert: Images you upload for auto-digitize (image-to-embroidery) are sent to our stitch engine, converted, and not permanently stored afterward — we keep the resulting embroidery design, not the original photo.
• Images you add to a design: If you place an image as a background or reference to trace, we store that image with your project (in Supabase) so it's there when you reopen the project. You can remove it at any time, and it's deleted when you delete the image, the project, or your account.
• AI-assisted processing: Converting images into embroidery uses automated, AI-assisted processing. The output is a craft design derived from your own input — not photorealistic synthetic media — and we do not use your uploaded images to train AI models.
• Usage analytics: Page views and feature usage collected via PostHog. This uses a first-party cookie (and local storage) to recognize your browser between visits. We don't include personal information in these analytics events.
• Session recordings: We record how the app is used — clicks, navigation, and on-screen actions — via PostHog session replay, so we can see where the product is confusing and fix it. All form inputs (including your email, passwords, and anything else you type into a field) are masked and never captured. Text you place on the design canvas may be visible in a recording. We don't record recordings for the purpose of identifying you.

What We Don't Collect

• We don't use third-party or cross-site tracking cookies (our only cookie is a first-party one for analytics)
• We don't sell or share your data with third parties for advertising
• We don't track you across other websites

Third-Party Services

• Supabase: Authentication and database. Your account and project data is stored here. Their privacy policy
• PostHog: Privacy-friendly analytics and session replay. Collects usage data and masked session recordings. Their privacy policy
• Google: OAuth sign-in. We receive your name and email when you sign in with Google. Their privacy policy
• Stripe: Payment processing for paid plans. Card details go directly to Stripe; we never see or store them. Their privacy policy

Data Retention

Your account and projects are stored as long as your account exists. If you delete your account, your data is deleted within 30 days. Analytics data is anonymized and retained for up to 12 months. Session recordings are retained for a shorter period (up to 90 days) and then automatically deleted.

Your Rights

You can:

• Export your designs to a stitch file (PES/DST) at any time (they're your designs)
• Delete your account and all associated data
• Request a copy of your stored data
• Opt out of analytics (contact us)

Children

bisect is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes

We may update this policy. Significant changes will be communicated via email or in-app notice.

Contact

Questions about your data? Email hello@bisect.studio