Your artwork stays yours. Here is how data moves.

Embroidery File Converter is operated by MTTenterprise Inc., 201-1525 Alta Vista Drive, Ottawa, Ontario K1G 0G1, Canada. This Privacy Policy explains how we collect, use, disclose and retain information when you use our website, iOS and Android apps, file viewers, image digitising, stitch-file conversion, billing and account features.

This policy should be read with our Terms of Service. Depending on where you live, local privacy law may provide additional rights.

Account and contact information

• name, email address, password hash, verification status and account-security settings;
• support messages and preferences you choose to give us; and
• billing customer identifiers, purchases, subscriptions, credit balances, refunds and disputes.

Files and processing information

• uploaded artwork, logos and embroidery machine files;
• filenames, file type, size, checksum, image dimensions and detected format; and
• generated stitch files, previews, palettes, thread charts, worksheets, metrics, warnings and job history.

Technical and usage information

• IP address, approximate network prefix, user agent, language, browser and platform signals;
• session and usage-cookie identifiers, hashed device fingerprints and hashed stable-device signals; and
• page activity, workflow usage, errors, security events and conversion-status records.

Files are stored in private application storage and are made available through authorized or short-lived signed download routes. The processing engine reads source files, creates requested outputs and validates generated machine files before release.

Temporary working directories and engine archives are removed after processing. Account owners can delete jobs and associated private files from their history. Free viewers process files to generate the requested preview and production metrics.

When enabled, copies of suitable artwork may be transmitted to a third-party AI provider for dominant-colour analysis and digitising recommendations. Machine stitch files and stitch previews are produced and validated through the embroidery processing pipeline, not generated by the AI provider.

We use AI responses to provide the requested feature and may cache derived palettes or recommendations for a limited period. We do not sell uploaded artwork or use it to build advertising profiles. Third-party providers process submitted data under their own contractual and privacy terms.

We use information to:

• provide viewers, digitising, conversion, validation, downloads and account history;
• authenticate users, create guest-purchaser accounts and send transactional messages;
• process payments, subscriptions, credits, refunds and disputes;
• enforce separate workflow quotas and prevent fraud, repeated-account abuse and service attacks;
• diagnose errors, maintain reliability and improve the Service; and
• comply with law, enforce agreements and protect users and MTTenterprise.

Depending on the context and applicable law, our legal bases include performing a contract, consent, legitimate interests in operating and securing the Service, and compliance with legal obligations.

We use essential cookies for sessions, authentication, security, preferences and guest access. A usage-identity cookie may remain for up to 90 days so free allowances can be enforced consistently.

To prevent users from evading free limits by clearing one cookie or creating repeated accounts, the Service may combine pseudonymous signals such as a hashed browser fingerprint, hashed stable-device identifier, hashed network prefix, user agent and account identifier. We store hashes rather than the raw client fingerprint used for matching.

Blocking essential cookies or device signals may prevent free processing, sign-in or other core features from working correctly.

We may share information with:

• Stripe for payment processing, billing portals, refunds and dispute handling;
• Apple and Google for in-app payment processing, and RevenueCat for purchase validation, subscriptions and entitlements;
• mobile analytics providers, and Meta for optional advertising measurement as described below;
• hosting, storage, queue, email, security, logging and monitoring providers that support the Service;
• AI providers when an AI-assisted artwork feature is enabled and requested as part of processing;
• professional advisers, insurers and auditors subject to confidentiality obligations;
• authorities or other parties where required by law or necessary to protect rights and safety; and
• a successor in connection with a merger, financing, reorganization or sale of all or part of the business.

We do not sell uploaded artwork. We use optional, consent-based advertising measurement for our iOS app as described below. We do not share uploaded artwork or contact details with Meta through this integration.

If you allow tracking through Apple's App Tracking Transparency prompt and keep advertising measurement enabled in the app, Meta and our purchase provider, RevenueCat, help us measure and improve our Facebook and Instagram ads.

Meta's SDK may send install and app activation information, a Meta-generated app identifier, an advertising identifier when available, device and app information, and network information such as your IP address. RevenueCat may send purchase events, product identifiers, transaction times, purchase value and currency, and matching identifiers to Meta. This connects advertising to app activity and purchases. Uploaded artwork and contact details are not included in this integration.

This is optional. Declining does not affect features, prices or purchases. Before you opt in, this integration does not initialize Meta's SDK or provide advertising matching identifiers to RevenueCat. We continue processing purchases and using necessary service providers under the other sections of this policy.

Turn advertising measurement off at any time in Profile → Advertising privacy, or withdraw Apple's tracking permission in iOS Settings → Privacy & Security → Tracking. The app rechecks Apple's permission when it returns to the foreground and updates the purchase provider's consent and matching attributes. Changes that require a network connection take effect at the provider after they successfully sync. Information already sent is not automatically recalled. Contact support for privacy or deletion requests.

RevenueCat and Meta may process information outside your country. Their applicable retention practices and privacy policies govern information they hold. Account deletion and other privacy rights are described below. Meta Privacy Policy · RevenueCat Privacy Policy

• Source uploads: scheduled to expire 30 days after upload unless deleted sooner.
• Generated outputs and artifacts: scheduled to expire 30 days after creation for signed-in users and 7 days for guests, unless deleted sooner.
• Temporary processing files: removed when the processing task finishes.
• Usage identity signals: kept as needed to enforce rolling and monthly limits, prevent abuse and resolve disputes.
• Account and job records: kept while the account is active and then deleted or anonymized subject to operational and legal requirements.
• Billing and security records: may be retained longer where required for tax, accounting, fraud prevention, chargebacks or legal claims.

Expiration is performed by scheduled deletion processes and may not be instantaneous at the exact expiry time. Backups, where used, may retain encrypted residual copies until the normal backup cycle completes.

We use reasonable administrative, technical and organizational safeguards, including private storage, access controls, rate limits, signed download URLs, password hashing and transport encryption where supported. No internet service can guarantee absolute security.

MTTenterprise is based in Canada. Our service providers may process data in Canada, the United States or other countries where they operate. Those jurisdictions may have different privacy laws. We use contractual and other safeguards where required for cross-border transfers.

If a breach creates a legally reportable risk, we will notify affected users and regulators as required by applicable law.

Depending on your location, you may have the right to access, correct, delete or obtain a copy of personal information; object to or restrict certain processing; withdraw consent; or complain to a privacy regulator.

You can update profile information and delete your account from account settings. You can also delete individual jobs and their associated private files. For a broader request, email us from the address connected to the account. We may verify identity before responding and may retain records where the law permits or requires it.

Canadian users may contact the Office of the Privacy Commissioner of Canada. EEA and UK users may contact their local supervisory authority. California and other US residents may exercise any rights available under applicable state law.

The Service is not directed to children under 13 and we do not knowingly collect their personal information. Users who are minors in their jurisdiction may use the Service only with authorization from a parent or legal guardian. Contact us if you believe a child submitted information without appropriate consent.

We may update this Privacy Policy to reflect changes in the Service, providers or law. The effective date will be updated, and we will provide additional notice for material changes when required.

Privacy questions and requests may be sent to [email protected] or MTTenterprise Inc., 201-1525 Alta Vista Drive, Ottawa, ON K1G 0G1, Canada. Please do not attach private artwork to an ordinary email unless our support team provides a secure method.