Privacy Policy

1. Introduction

Welcome to StitchFlow ("we," "our," or "the Platform"), a tailor shop management system developed and operated in Pakistan. We are committed to protecting the privacy and personal information of our users in accordance with the applicable laws and regulations of the Islamic Republic of Pakistan, including but not limited to the Prevention of Electronic Crimes Act, 2016 (PECA), the Electronic Transactions Ordinance, 2002 (ETO), and any directives issued by the Pakistan Telecommunication Authority (PTA).

By accessing or using StitchFlow, you agree to the collection and use of information as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Full name, email address, phone number, and password when you register.
• Shop Information: Shop name, shop address, and business details you enter during setup.
• Customer & Order Data: Customer names, phone numbers, measurements, order details, and payment records that you input while using the platform.
• Worker Information: Names, roles, and contact details of workers you add to your shop.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken, and timestamps.
• Device & Browser Information: IP address, browser type, operating system, and device identifiers.
• Cookies & Session Tokens: Authentication session cookies required to keep you logged in.

2.3 Information We Do Not Collect

• We do not collect CNIC numbers, biometric data, or any national identification information.
• We do not collect financial account or banking credentials.

3. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the StitchFlow platform.
• Create and manage your account and associated shop.
• Display your shop's orders, customers, measurements, and reports.
• Send important service notifications (e.g., account security alerts).
• Troubleshoot technical issues and improve platform performance.
• Comply with legal obligations under Pakistani law.
• Detect and prevent fraud, abuse, or violations of our Terms and Conditions.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Storage & Security

Your data is stored securely on Supabase infrastructure, hosted on cloud servers. We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit.
• Encrypted storage for sensitive data at rest.
• Row-Level Security (RLS) policies ensuring each shop can only access its own data.
• Secure, hashed password storage — we never store plain-text passwords.
• Regular security audits and access controls.

While we take all reasonable precautions, no system is completely immune to security breaches. In the event of a data breach affecting your personal information, we will notify you promptly as required under applicable Pakistani law.

5. Data Sharing & Disclosure

We may share your information only in the following circumstances:

• Service Providers: Trusted third-party services required to operate the platform (e.g., cloud hosting, authentication). These providers are bound by confidentiality obligations.
• Legal Compliance: When required by Pakistani courts, law enforcement agencies, or government authorities acting under lawful authority, including under PECA 2016.
• Business Transfer: In the event of a merger, acquisition, or asset sale, your data may be transferred. You will be notified in advance.
• With Your Consent: For any other purpose, only with your explicit consent.

6. Your Rights

As a user of StitchFlow, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your account and associated personal data, subject to any legal obligations to retain records.
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to certain types of data processing.

To exercise any of these rights, please contact us at the details provided in Section 10.

7. Cookies Policy

StitchFlow uses cookies solely for authentication and session management purposes. We do not use third-party advertising cookies or tracking cookies.

You may configure your browser to refuse cookies, but this may prevent you from logging in or using the platform correctly. By using StitchFlow, you consent to our use of essential session cookies.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain records for a longer period (e.g., financial transaction records required under Pakistani tax or commercial law).

9. Children's Privacy

StitchFlow is intended for business use by individuals aged 18 years and above. We do not knowingly collect personal information from minors. If you become aware that a minor has registered without parental consent, please contact us immediately and we will delete the account.

10. Contact Us

For any privacy-related queries, requests, or complaints, please contact:

We aim to respond to all privacy inquiries within 7 business days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered users via email or an in-app notification. Continued use of StitchFlow after the effective date of any changes constitutes your acceptance of the updated policy.

12. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Islamic Republic of Pakistan. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Pakistan.