Privacy policy
Last updated: 10 September 2026
Who we are
Controller: Vivivo Solutions, ul. Cicha 26, 96-513 Kozłów Biskupi, Poland. NIP: 1251758025, REGON: 526903367. Contact:[email protected]. No DPO appointed.
Coversemailstitch.comandapp.emailstitch.com.
Roles
We are controller for accounts, billing, cookies, security logs, and analytics (if you accept). For HTML and templates you store, you are controller; we process them only to provide the service. Recipient data inside email HTML is yours.
What we process
| Data | Why | Basis |
|---|---|---|
| Account (email, name, organization) via Clerk | Sign-in and the app | Art. 6(1)(b) contract |
| Templates (HTML, translations, versions, checklists) | Edit, compile, QA, ZIP download | Art. 6(1)(b) |
| IP and request metadata | Rate limits, security, operations | Art. 6(1)(f) legitimate interests |
| Billing data (plan, invoices) via Paddle | Sell and invoice paid plans | Art. 6(1)(b) and 6(1)(c) tax law |
| Analytics (Google Analytics) | This site, after consent | Art. 6(1)(a) consent |
| Marketing email (address, name) via Klaviyo | Product updates after optional sign-up checkbox | Art. 6(1)(a) consent |
We do not use automated decisions with legal or similarly significant effects. We do not sell personal data or train AI on your HTML.
This site
No account. Optional Google Analytics and Klaviyo load only after Accept on the cookie banner.
App
Sign-in is handled by Clerk. We store your templates and version history (7 days on the free plan, longer on paid plans). Paid plans are sold and invoiced through Paddle as merchant of record. Optional product emails are sent only if you tick the marketing checkbox at sign-up.
Cookies
Device storage follows Polish Electronic Communications Law and GDPR. Necessary storage does not need consent (sign-in, workspace, remembering Accept/Decline). Analytics needs consent.
| What | Where | When |
|---|---|---|
| Consent choice | This site | When you choose |
| Sign-in cookies | App | When you sign in |
| Workspace cookie | App | When you use the app |
| Analytics cookies | This site | Only after Accept |
Recipients
- Clerk — sign-in (US; DPF and/or SCCs).Clerk DPA
- Paddle — payments and invoicing for paid plans, as merchant of record (US/UK; SCCs).Paddle DPA
- Google Analytics — analytics after consent (US; SCCs).Google terms
- Klaviyo — marketing analytics after you accept cookies, and product emails after optional sign-up consent (US; SCCs).Klaviyo DPA
- Hosting providers — to run the service (EEA and/or SCCs)
Retention
Account and templates: until you or the organization is deleted. Version history: 7 days on the free plan, longer on paid plans. Security logs: a limited period. Billing records (via Paddle): kept as long as tax law requires. Consent choice: until you clear site data. Marketing email: until you withdraw consent or the account is deleted.
Your rights
Access, rectify, erase, restrict, port (where applicable), object to legitimate interests, withdraw analytics or marketing email consent, complain toUODOor your EU authority. Email[email protected]. For organization content we may point you to your admin.
Other
Connections use HTTPS. Not directed at children under 16. We may update this policy (see “Last updated”).
Contact
Vivivo Solutions, ul. Cicha 26, 96-513 Kozłów Biskupi, Poland. NIP: 1251758025, REGON: 526903367