Privacy Policy

Last updated: July 31, 2026

Information We Collect

When you create an account, we collect your email address and the password you set (stored securely by our authentication provider — we never see or store your password in plain text). Your account is linked to a subscription tier and status, and if you subscribe or make a purchase, a customer ID from our payment processor.

When you submit a custom SVG commission or request a revision, we store the text description you write, the resulting design files, and (for revisions) your notes about what to change. If you place a Print & Ship order, we collect the shipping address and item details needed to fulfill it.

When you use Stitch & Diamond, we collect the photograph you upload and the resulting pattern files. Your uploaded photo is used only to generate and deliver your pattern. Conversion runs on our own systems; your photo is not sent to any third-party AI provider and is not used to train any model. We never sell your images.

If you use the chat bubble in the corner of the site, your messages (and any image you choose to attach to ask about it) are sent to our AI provider to generate a response. Chat conversations are not saved to our own database — they exist only in your browser for that session and are not tied to your account. Our AI provider may temporarily process and retain conversation data in accordance with its own privacy policy.

We automatically record, in your browser's local storage (not a cookie), which site or campaign referred you here the first time you visit, so we can understand which marketing channels bring in signups. This is not shared with advertisers and isn't used to track you across other websites.

Cookies & Tracking

We don't use third-party advertising or cross-site tracking cookies. Your signed-in session is kept in your browser's local storage, not a cookie, and exists only to keep you logged in — it's required for the site to function and isn't used for anything else. We use Vercel Analytics for basic, aggregated traffic statistics (pages viewed, rough visit counts); it's designed not to use cookies and doesn't identify you personally. When you check out through Stripe, you're briefly on Stripe's own site, which sets its own cookies under its own privacy policy — not something we control.

Who We Share Information With

We don't sell your information. It's shared only with the vendors that make the service work, each of whom only receives what they need to do their specific job:

• Supabase — hosts our database and handles account authentication.
• Stripe — processes all payments and subscription billing. We never see or store your full card number.
• Recraft — generates the SVG design from the text description you submit for a commission or revision.
• OpenAI — generates the print-ready image version of an approved commission or free design.
• Anthropic — powers the chat widget's responses, including judging any reference image you choose to attach.
• Resend — sends transactional emails on our behalf (order confirmations, commission-ready notices, account updates).
• Twilio — delivers account/operational text-message (SMS) alerts, such as notifying an account holder when a design needs review.
• Canvas Theory — an independent print shop that receives your shipping address and design file to fulfill a Print & Ship order.
• Vercel — hosts the site and provides the cookieless analytics described above.
• Telegram — sends operational alerts to the site owner only; it does not receive customer account content.

We may also disclose information if required by law, or to investigate fraud, abuse, or violations of our Terms of Service.

SMS & Text Notifications

KONGRA Creative may send account and operational text messages — for example, alerting an account holder when a custom design needs review or is ready. Message frequency varies, and message and data rates may apply. You can reply STOP to any message to unsubscribe at any time, or HELP for help. We do not sell, rent, or share mobile phone numbers or SMS/text-messaging opt-in consent with third parties or affiliates for their own marketing or promotional purposes. Mobile opt-in information is used solely to deliver the messages you have requested, and is shared only with the SMS provider (Twilio) needed to send them.

Data Retention

We keep your account and commission data as long as your account is active. If you cancel your subscription, your account and past commissions remain accessible unless you request deletion. To request that your account and personal data be deleted, contact us at the address below — some records (e.g. past transactions) may be retained where we're legally required to keep them.

Photographs uploaded for Stitch & Diamond are retained only as long as needed to generate and deliver your pattern and to provide related support, and in any event no longer than 90 days after your order is delivered. You may request earlier deletion at any time, and uploaded images are deleted when you delete the associated order or your account.

Your Choices

You can review and download your own commissions, bundles, and order history anytime from your account page. To access, correct, or delete your personal information, or ask any question about how it's used, contact us using the information below.

Children's Privacy

KONGRA Creative is not directed at children under 13, and we don't knowingly collect information from anyone under 13. If you believe a child has provided us information, contact us and we'll remove it.

Changes to This Policy

We may update this policy as the service evolves. If we make material changes, we will notify you by email or prominent notice on the site, along with an updated effective date. Your continued use of the service after the updated policy takes effect constitutes your acceptance of the changes.

Contact

Questions about this policy, or requests regarding your personal data, can be sent to creative@kongra.co.