# Privacy Policy

Canonical page: https://embroideryfileconverter.com/privacy

Effective date: July 19, 2026

Learn how MTTenterprise Inc. handles embroidery artwork, machine files, account data, billing information, device signals and generated results.

## Scope

Embroidery File Converter is operated by MTTenterprise Inc., 201-1525 Alta Vista Drive, Ottawa, Ontario K1G 0G1, Canada. This policy covers the website, file viewers, automated image digitising, stitch-file conversion, billing and account features.

## Information collected

The Service may collect:

- Account information such as name, email, password hash, verification and security settings.
- Billing identifiers, purchases, subscriptions, credits, refunds and disputes. Stripe handles full payment-card details.
- Uploaded artwork, embroidery files, filenames, format, size, checksum and image dimensions.
- Generated stitch files, previews, palettes, thread charts, worksheets, metrics, warnings and processing history.
- IP address, network prefix, user agent, language, browser and platform signals.
- Session and usage cookies, hashed device fingerprints, hashed stable-device signals and usage history.
- Support communications, errors and security records.

## File processing

Uploads and generated results are stored in private application storage and accessed through authorized or short-lived signed routes. Temporary working directories and processing archives are removed when a task finishes. Users can delete jobs and associated private files from account history.

## AI-assisted features

When enabled, suitable artwork or rendered previews may be transmitted to a third-party AI provider for dominant-colour analysis, digitising recommendations or a photorealistic thread simulation. A simulation is a visual aid, not a machine stitch file or production guarantee. MTTenterprise does not sell uploaded artwork or use it for advertising profiles.

## Purposes and legal bases

Information is used to provide processing and downloads; authenticate users; create accounts for guest credit buyers; handle billing; enforce separate workflow quotas; prevent repeated-account, payment and service abuse; diagnose errors; maintain security; improve reliability; comply with law; and enforce agreements.

Legal bases may include performing a contract, consent, legitimate interests in operating and protecting the Service, and legal obligations.

## Cookies and quota-abuse safeguards

Essential cookies support sessions, authentication, security, preferences and guest access. A usage-identity cookie may remain for up to 90 days. Pseudonymous hashed device signals, a hashed network prefix, user agent and account identifiers may be combined to prevent users from evading free limits by clearing cookies or creating repeated accounts.

## Service providers and disclosure

Information may be shared with Stripe; hosting, storage, email, queue, monitoring and security providers; AI providers for enabled artwork features; professional advisers; authorities where legally required; and a business successor. MTTenterprise does not sell personal information or uploaded artwork and does not use it for cross-context behavioural advertising.

## File retention

- Source uploads are scheduled to expire 30 days after upload unless deleted sooner.
- Generated outputs and artifacts are scheduled to expire 7 days after creation unless deleted sooner.
- Temporary processing files are removed when processing finishes.
- Usage signals are kept as needed to enforce limits and prevent abuse.
- Account and job records remain while needed to operate the account and meet legal requirements.
- Billing and security records may be retained longer for tax, accounting, fraud, dispute and legal purposes.

Scheduled deletion may not occur at the exact expiry time. Residual encrypted backups may remain until the normal backup cycle completes.

## Security and international processing

The Service uses reasonable safeguards including private storage, access controls, rate limits, signed download URLs, password hashing and transport encryption where supported. No internet service can guarantee absolute security.

Service providers may process information in Canada, the United States or other countries where they operate. Contractual and other transfer safeguards are used where required.

## Privacy rights

Depending on location, users may request access, correction, deletion or a copy of personal information; object to or restrict processing; withdraw consent; or complain to a privacy regulator. Profile information and account deletion are available in account settings, and individual jobs can be deleted from history. Identity verification may be required before a request is completed.

## Children, updates and contact

The Service is not directed to children under 13. MTTenterprise may update this policy and will post a revised effective date and additional notice where required.

Questions or requests: hello@embroideryfileconverter.com or MTTenterprise Inc., 201-1525 Alta Vista Drive, Ottawa, ON K1G 0G1, Canada.