Privacy Policy

1. Who we are, and what this policy covers

StackDesign is a web-native cabinet and room design service operated by Bespoke Woodcraft Studio LLC, a California limited liability company, whose registered business address is 688 N Rimsdale Ave, Covina, CA 91722, United States ("we", "us", "StackDesign"). Bespoke Woodcraft Studio is the data controller for the personal information described here.

This policy explains how we handle personal information on stackdesign.app and in the StackDesign tools, including the AI Designer. It works alongside our Terms of Service.

Many StackDesign tools run without an account at all. If you use the site that way, the only data we hold about you is the ordinary web server log described in section 2 and the usage measurement described in section 8.

2. What we collect

We do not ask for and do not want sensitive personal information such as government identifiers, health data, precise geolocation or biometric data. Please do not enter it into StackDesign.

3. Why we use it

• To run your account. Signing you in, keeping you signed in, syncing your work between your devices.
• To provide the tools. Storing and computing your designs, cut lists, materials and standards so the Service does what you asked.
• To bill you. Starting, renewing, changing and cancelling a paid plan, and keeping the record of your consent to a recurring charge that the law requires us to keep.
• To run the AI Designer. Sending your message and the necessary project context to our AI provider and returning the reply. See section 4.
• To keep the service working and secure. Diagnosing errors, preventing abuse, enforcing usage limits, and protecting accounts.
• To see how the tools are really used. Counting page views, and, if you accepted the cookie banner, which features get used and where people get stuck, so we know what to fix next. See section 8.
• To communicate with you. Service notices, billing notices, security notices, and replies to your support messages. These are sent through our email provider, listed in section 6.
• To meet legal obligations. Tax and accounting records, and responding to lawful requests.

If you are in a region with a legal-basis requirement such as the European Economic Area or the United Kingdom, our bases are: performance of our contract with you (running your account and the tools), legitimate interests (security, abuse prevention, improving the Service), legal obligation (tax and accounting), and consent where we ask for it.

4. The AI Designer: what happens to what you type

When you use the AI Designer, your message and the project context needed to answer it are sent from our server to Anthropic's API, which generates the reply. The call is made server side, so your browser never talks to the AI provider directly and no AI provider key is exposed to you.

Under Anthropic's standard commercial API terms, which is how StackDesign uses the service:

• the content you send and the replies you receive are not used to train models;
• Anthropic's operational logs are deleted automatically on a short rolling window, currently around seven days; and
• Anthropic acts as our sub-processor under a data processing agreement that includes Standard Contractual Clauses for international transfers.

Those three points describe Anthropic's commercial terms as they stood when this version was published. Vendor terms drift, so we re-read them whenever we publish a new version of this policy, and we will change this section rather than leave a stale promise standing.

We keep your conversation and any project facts it produced in your own workspace so the assistant has continuity between sessions. That copy is yours: you can delete it, and it goes when your account goes (see section 10).

There is a second AI provider, and it is connected but not yours to use. Your conversations are answered by Anthropic. StackDesign also carries a model switch that routes a conversation to Google instead, using Google's Gemini API, and that switch can only be turned on by one of our own platform administrator accounts. There is no address you can type, no setting in your account and no supported way for you to reach it, so no customer conversation is sent to Google. We use it for our own testing. It is disclosed here, and Google is listed in the table below, because the connection is live on our server and we would rather name a thing that exists than describe Anthropic as the only provider wired up. If we ever make a second provider available to you, we will say so on this page before any of your data reaches it. A third option labelled ChatGPT appears in the same internal switch but is not connected to anything.

We would rather tell you the switch exists than describe a single provider and leave you to discover a second one. If we connect another provider, we will name it here before any customer data reaches it.

Please do not paste anything into the assistant that you would not want processed by a third-party AI provider, including other people's personal information you have no right to share.

5. Customer records you store in StackDesign

StackDesign lets a shop store contact records and job notes about its own customers. That information is personal information about people who are not our users, so it is worth being precise about who is responsible for what.

You are the controller. We are the processor. In plain words: you decide what customer information to collect, why you collect it, and how long to keep it. We only hold and process it on your instructions, so that the Service works for you. We do not use your customers' details for our own purposes, we do not market to them, and we do not sell or share them with anyone outside the sub-processors listed in section 6.

That means a few practical things:

• You are responsible for having a lawful basis to collect and store your customers' details, and for telling your customers what you do with them.
• If one of your customers asks you to correct or delete their record, you can do that yourself inside StackDesign. If you need our help, ask us.
• If your business needs a formal data processing agreement covering this relationship, for example because you work with clients in Europe or the United Kingdom, we can provide a standard one. Ask us using the details in section 15.

Our standard agreement for this is written to Article 28 of the General Data Protection Regulation: it names the subject matter and duration of the processing, restricts us to acting on your documented instructions, binds us to confidentiality and security, passes the same obligations down to the sub-processors in section 6, and commits us to help you answer your own customers' requests. Ask us for it using the details in section 15.

6. Who processes data for us

Each of these providers processes data for us under its own data processing agreement, which forms part of the terms we accepted when we opened the account and which restricts that provider to processing data for the purpose we engaged it for. Those agreements also carry the transfer protections described in section 13.

Google, if you sign in with it. This is a different thing from the Gemini row above, and the distinction matters. For the AI model, Google processes your conversation on our behalf, as our sub-processor. For sign-in it does not: When you choose Sign in with Google, you are asking Google to confirm who you are, and it hands us your name, email address and a reference to your profile picture. Google decides for itself what it records about that sign-in, under its own privacy policy, not ours. If you would rather not involve Google, use a password or an email sign-in link instead.

Beyond those nine, we share personal information only when we have to: with professional advisers under confidentiality, in response to a lawful legal request, to protect the rights or safety of people or of the Service, or to a successor if the business is sold, in which case we would tell you first.

7. What we never do

8. Cookies, local storage and tracking

StackDesign uses browser storage for three things of its own:

• Keeping you signed in. Your authentication session is stored by the Supabase client in your browser. Clearing it signs you out.
• Remembering your settings. Small preferences such as your chosen colour theme, your unit of measure, and unsaved work in progress are kept in your browser's local storage so the tools behave the way you left them. Some tools work entirely on your device this way, with nothing sent to us.
• Remembering your cookie answer. Your answer to the banner below is stored under bws:cookie-consent, with the date you gave it. That entry is the only reason we stop asking.

The cookie banner, and what each answer does

The first time you open StackDesign you get a banner asking about analytics cookies. PostHog does not load until you answer it, and the answer sticks.

• Accept loads PostHog, our product analytics service. It stores its own identifiers in cookies and in your browser's local storage, and while you are signed in what it records is tied to your account. It sees which pages and features you use and where you get stuck. We run it with two of its features switched off on purpose, autocapture and session recording, so it never records what you click on, what you type, or a picture of your screen. It never receives your designs, your dimensions, your customers' records or your AI Designer messages.
• Decline means PostHog is not loaded at all: no script, no request, no cookie and no local storage entry of its own, then or later. There is no reduced or cookieless version of it running quietly instead.

What runs either way. Ahrefs Web Analytics counts page views on this site, including this page, and it sits outside the cookie choice. Ahrefs states that it sets no cookies, stores nothing on your device, collects no personal data, and never keeps a raw IP address, hashing it with a daily salt instead. We rely on that description, and it is why there is nothing here for you to consent to. Ahrefs is listed in section 6 with every other provider.

Changing your mind. Clear my cookie choice Clearing it makes the banner ask again the next time you open StackDesign, and nothing goes to PostHog until you have answered it.

If you had accepted and then cleared it, PostHog stops at once in any StackDesign tab you still have open, and the cookie and the random id it kept in your browser are deleted. If no tab is open, they are deleted the next time you open StackDesign. One entry is deliberately kept: PostHog's own note that you opted out, which is the thing that stops it starting again. Clearing your browser's site data for this site removes that too.

Do Not Track and Global Privacy Control. California law requires us to tell you how we respond to Do Not Track signals. We do not follow you across other websites and we run no advertising trackers, so there is no cross-site tracking here for a Do Not Track signal to switch off. There is nothing for a Global Privacy Control signal to switch off either, because we never sell or share personal information in the first place.

9. Where your data lives, and how it is protected

Your account and your work are stored in our Supabase database. Traffic between your browser, our site and our providers is encrypted in transit using TLS, and data is encrypted at rest by our providers.

Access between workspaces is enforced in the database itself, using row level security policies, so one customer's account cannot read another customer's projects, materials or customer records. Administrative access on our side is limited to the people who need it to run and support the Service.

No system is perfectly secure, and we cannot promise that a determined attacker will never succeed. If a breach affects your personal information, we will notify you and any regulator as the law requires.

10. How long we keep it, and how to delete it

We keep your account and your work for as long as your account is open, and for as long afterwards as we need to meet a legal or accounting obligation.

Deleting your account. You can delete your StackDesign account yourself from your account settings. Doing so removes your account and the project data attached to it from the live database.

Backups, honestly. Deletion from the live database does not instantly erase every encrypted backup copy. Backups roll over on a fixed schedule, and a deleted record disappears from them as they age out. We do not restore deleted data from a backup except to recover from a genuine system failure. Here is the actual number: our database runs on the Supabase Pro plan, which takes a backup once a day and keeps each one for seven days. So a record you delete today is gone from the live database immediately and out of the last backup copy within a week.

Records we keep after deletion. We retain what the law requires us to retain, which is mainly the billing and tax record of what you paid, and the record of your consent to a recurring charge, which California's automatic renewal law requires us to keep. We keep that consent record for three years, or for one year after the subscription ends, whichever is the longer of the two. Nothing is being charged during the open beta, so for most accounts there is no such record yet.

AI conversations. Your AI Designer conversation history and the project facts it produced are part of your workspace and are deleted with it.

11. Your privacy rights

Whoever you are and wherever you live, you can ask us to:

• tell you what personal information we hold about you and where it came from;
• correct anything that is wrong;
• give you a copy in a portable format;
• delete your account and the personal information attached to it; or
• stop a particular use of it.

Contact us as described in section 15. We will respond within the time the applicable law allows, and we will not treat you worse for exercising a right.

If you are in California

The California Online Privacy Protection Act applies to StackDesign regardless of our size. This page is our conspicuously posted privacy policy under that law: it names the categories of personal information we collect (section 2), the third parties we share it with (section 6), how you review and change your information (section 11 and your account settings), how we announce changes to this policy (section 14), and our Do Not Track disclosure (section 8).

The California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to businesses above certain revenue and volume thresholds. StackDesign does not meet those thresholds today, so we are not currently a covered business under that law. We nevertheless offer the rights it grants, as a matter of practice: to know, to delete, to correct, to opt out of sale or sharing (which never happens here), and to limit the use of sensitive personal information (which we do not collect). We do not sell or share personal information as those terms are defined in that law, and we have not done so in the preceding twelve months.

If you are in the European Economic Area, the United Kingdom or Switzerland

The General Data Protection Regulation may apply to you even though we are based in the United States, because it follows the person rather than the company. You have the rights to access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where we rely on it. You also have the right to complain to your local supervisory authority.

We have not appointed an Article 27 representative, and we would rather say so plainly than leave the question open. That obligation applies to companies outside the European Union or United Kingdom that offer goods or services to people there, or monitor their behaviour, on more than an occasional basis. We are a small California company, we do not target or advertise to the European Union or the United Kingdom, and any use from there today is occasional. We review that as the business grows and will appoint a representative, and name them here, if the position changes. In the meantime you can reach us directly using section 15, and you keep every right described above, including the right to complain to your local supervisory authority.

12. Children

StackDesign is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

13. International transfers

StackDesign is operated from the United States, and our sub-processors process data in the United States and, depending on the provider, in other countries where they operate. If you use StackDesign from outside the United States, you are sending your information to the United States.

Where personal information is transferred out of the European Economic Area, the United Kingdom or Switzerland, our providers' data processing agreements include the European Commission's Standard Contractual Clauses, or an equivalent approved transfer mechanism.

14. Changes to this policy

We will update this policy when our practices or the law change. The effective date at the top of the page always shows the current version.

If we make a material change, for example adding a sub-processor that handles personal information or starting to use a new category of data, we will post the updated policy here before the change takes effect and tell account holders by email or by a notice in the Service.

15. How to reach us

For any privacy question, or to make a request under section 11, write to us through the contact form on our support page - we reply within one business day.

Written requests and formal notices can be posted to us at:

We have not appointed a dedicated data protection officer. One is required only of public authorities and of organisations whose core activity is large-scale monitoring or large-scale processing of sensitive data, and we are neither. Privacy requests go to the address above and are handled by the company's owner.

To help us find your records quickly, write from the email address on your StackDesign account where you can. If we cannot verify that a request comes from you, we may not be able to act on it, which is a protection for you rather than an obstacle.