Draft. This page describes how Sewpress really works today, but it hasn't had a lawyer's review yet. Questions: write to us at the address at the bottom.
Privacy
Sewpress (company details to follow), based in Norway, runs Sewpress and is the controller of the personal data described here. We collect as little as we can, keep it only as long as we need it, and never sell it.
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Email address, and your name and picture if you sign in with Google | Your account: signing in and emailing you when files are ready | Contract |
| Sign-in sessions, with IP address and browser | Keeping you signed in, spotting sign-ins that aren't you | Legitimate interest (security) |
| Your patterns: master files, settings, built PDFs, previews, reports | Building your files | Contract |
| Credits, plan and Stripe customer id | Billing | Contract, and the law (bookkeeping) |
| Activity log (uploads, builds, deletions, sign-ins) | Showing you what happened to your files | Legitimate interest (security and transparency) |
Payment details go straight to Stripe; we never see card numbers. Your master file may contain your name or brand; we treat it as yours and don't use it for anything but your builds.
Cookies and analytics
We set one cookie: the one that keeps you signed in. There are no advertising or tracking cookies, and no analytics today. If we add privacy-friendly analytics, this page will say so first.
How long we keep it
- Master files: 24 hours after upload by default, or up to 30 days if you choose.
- Built PDFs, previews and pattern records: until you delete them or your account.
- Your account and activity log: until you delete your account.
- Invoices and payment records: kept by Stripe and us for as long as bookkeeping law requires (in Norway, five years), even after you delete your account.
- Database restore history: up to 7 days after deletion.
Who else handles it
A short list of providers runs parts of Sewpress for us, under contracts that limit them to doing that. See the sub-processor list for who, what and where. Some are in the United States; transfers there rely on the EU–US Data Privacy Framework or the EU's standard contractual clauses.
Your rights
- See and take your data: download it any time from Settings → Your data.
- Delete it: delete patterns, releases or your whole account in the app.
- Correct, restrict or object: email us and we'll answer within a month.
- Complain: to us first, please, or to your data protection authority (in Norway, Datatilsynet).
Security
Files are stored privately and reached only through short-lived links made after we check who you are. Connections are encrypted. If a breach puts your data at risk, we'll tell you, and the authority, within 72 hours of finding out.
Contact
Last updated 31 October 2026.