How your wage, stock and money records are protected.
The controls on a live workspace (your company's own Stitchfloor, as opposed to the public demo), and every company that handles your data by name. The privacy policy is the full statement, and the terms of service set out what you and we each promise; this page says what it means for a factory.
- On a live workspace everyone signs in with their own phone number, email or Google account, and administrators add an authenticator app. The public demo is one shared password.
- Every save on a live workspace goes through our server and is recorded with who made it.
- Each company's workspace is separate from every other company's.
- There is no advertising, and nothing is sold or shared for marketing.
- An administrator can download every record at any time, and can ask us to delete the workspace.
Real sign‑in on a live workspace.
Each live workspace has its own address, like yourcompany.stitchfloor.com. Nobody reaches it without being invited by one of its administrators.
Each person has their own way in.
- A mobile number, with a one-time code by SMS
- An email address, by a sign-in link or a password
- A Google account
Signing in proves who you are. It opens nothing until your company has given that account access, so a stranger with a Google account sees no records at all.
A second step for administrators.
Administrators' accounts can download or import a whole workspace, so on a live workspace they also confirm sign-in with an authenticator app on their phone.
The public demo has none of this. It is one shared password and this browser's storage, which is why anyone can open it and take it apart without asking.
Invite links that work once.
An administrator makes a link that grants one desk. Whoever opens it registers once and gets that desk; anyone opening it after that is told the link has been used. The administrator's list shows which link became which person.
Access taken away at once.
An administrator can withdraw a person's access at any time, from the workspace itself. From that moment the server refuses every read and save they attempt, so the account opens nothing new. It is the first thing to do when a phone is lost or someone leaves.
Every save is checked on our server.
The checks on stock and on the weekly payout run on the server, where a browser cannot change them: a payout batch cannot be marked paid twice.
Every save goes through the server
On a live workspace each save is sent to our server, checked there against what that person's desk may change, and recorded with who made it and when.
Every action is one transaction
Validated before it posts, and written as a unit: a confirmation interrupted halfway does not leave the stock moved and the wage unrecorded.
Wages are locked once submitted
Changing a process rate in Settings changes the rate offered on new assignments. Once work is in a weekly payout batch, its rate, pieces and worker are locked, so the wage an owner approves is the wage that is paid. To correct one, reject the batch while it is still awaiting approval.
Who handles your data on our behalf, and why.
Each is used as a processor under its own terms, and none is given your records for any purpose of its own. The privacy policy is the full statement.
| Provider | What it does | When it sees anything |
|---|---|---|
| Cloud infrastructure | Holds sign-in identities, sends the one-time SMS codes, checks the sign-in screen for automated abuse, and hosts the databases that store the records. | Whenever a live workspace is used |
| Website hosting | Serves the website and the app, and keeps ordinary server request logs. | On every visit |
| Speech recognition | Turns a voice recording into text. | Only when someone uses voice entry |
| Language processing | Reads those words to work out which worker, lot and quantity were meant. | Only when someone uses voice entry |
| GST Suvidha Provider | A licensed GST Suvidha Provider and its integration partner. They receive an e-way bill's or an e-invoice's details and pass them to the government's e-way bill and e-invoice systems. | Only when your company files or cancels an e-way bill, or reports or cancels an e-invoice, from Stitchfloor |
| Meta (WhatsApp Business) | Delivers an invoice or a payment reminder sent from Stitchfloor through your company's own WhatsApp Business account. | Only if your company has connected its WhatsApp Business account, and only for a message someone sends. Send on WhatsApp otherwise opens WhatsApp on the sender's own phone, and nothing passes through us. |
Voice recordings are not kept
The microphone records only from a tap on Say it instead to a tap on Stop, on a form, and only on a live workspace. The recording is turned into text so the form can fill itself in and is used for nothing else. It is not kept by Stitchfloor and is never used to identify a voice. Nothing is saved until the person presses Confirm. On a computer, the browser also shows the words as they are spoken, using its own speech service (Google in Chrome, Microsoft in Edge).
No advertising, no tracking in the app
Nothing collected is sold, rented or shared for marketing. The Android app has no analytics or tracking software of any kind. The website uses one piece of software that behaves like it: Google reCAPTCHA, on the sign-in screen only, to check that a sign-in is a person.
Your records are yours to take and to remove.
Business records belong to the company that entered them. An administrator can take a copy at any time, and the company can have the whole workspace deleted.
- Download everything, whenever you like. Settings has Download records, which produces the whole workspace as one file. Several registers and reports also download as CSV.
- Remove a person. An administrator withdraws their access straight away. To have the account and its personal details deleted, ask an administrator or write to hello@stitchfloor.com from the account's address.
- Delete the whole workspace. An administrator asks, from their own address. Download a copy first: a deleted workspace cannot be restored.
- In a reasonable time. Deletion requests are handled within a reasonable time, subject to any record we must keep by law. Backups are overwritten on their normal cycle.
What a careful owner asks.
Can another company see our records?
No. Each company's workspace is separate, and staff at one customer cannot read another customer's records.
Can a supervisor change wages or invoices?
Each desk decides what a person may change, and the server checks it on every save. A production supervisor can correct an assignment's rate and quantity until its work goes into a weekly payout batch. From then on the rate, pieces and worker are locked, and an administrator approves the batch before it is marked paid.
What uptime and support do you commit to?
Stitchfloor is available 99.9% of the time in each calendar month, not counting planned work announced to your administrators beforehand. Every support request gets a response within 24 hours, on WhatsApp or by phone (the number is on our contact page), or at hello@stitchfloor.com. Section 11 of the terms of service sets this out.
What happens if a phone is lost?
An administrator withdraws that person's access from the workspace, and from then on the server refuses that account's reads and saves. A phone that was offline can still show the last figures it loaded, marked as not current.
Do you sell or share our data?
No. There is no advertising anywhere in Stitchfloor, and nothing collected is sold, rented or shared for marketing.
Is the demo safe for our real data?
No, and it is not meant to be. The demo is a sample factory behind a shared password, and what you enter stays in your own browser. Use it to try the product, then talk to us about a workspace.
Show all 6 questionsShow fewer
Have a question your CA or IT person wants answered?
Write to us with it. If the answer is that we do not do something, we will say so.