How your wage, stock and money records are protected.
The controls on a live workspace (your company's own Stitchfloor, as opposed to the public demo), every company that handles your data by name, and the things we do not have yet. The privacy policy is the full statement; this page says what it means for a factory.
- On a live workspace everyone signs in with their own phone number, email or Google account, and administrators add an authenticator app. The public demo is one shared password.
- Every save on a live workspace goes through our server and is recorded with who made it.
- Each company's workspace is separate from every other company's.
- There is no advertising, and nothing is sold or shared for marketing.
- An administrator can download every record at any time, and a deletion request is actioned within 30 days.
Real sign‑in on a live workspace.
Each live workspace has its own address, like yourcompany.stitchfloor.com. Nobody reaches it without being invited by one of its administrators.
Each person has their own way in.
- A mobile number, with a one-time code by SMS
- An email address, by a sign-in link or a password
- A Google account
Signing in proves who you are. It opens nothing until your company has given that account access, so a stranger with a Google account sees no records at all.
A second step for administrators.
Administrators' accounts can download or import a whole workspace, so on a live workspace they also confirm sign-in with an authenticator app on their phone.
The public demo has none of this. It is one shared password and this browser's storage, which is why anyone can open it and take it apart without asking.
Invite links that work once.
An administrator makes a link that grants one desk. Whoever opens it registers once and gets that desk; anyone opening it after that is told the link has been used. The administrator's list shows which link became which person.
Access taken away at once.
An administrator can withdraw a person's access at any time, from the workspace itself. From that moment the server refuses every read and save they attempt, so the account opens nothing new. It is the first thing to do when a phone is lost or someone leaves.
Every save is checked on our server.
The checks on stock and on the weekly payout run on the server, where a browser cannot change them: a payout batch cannot be marked paid twice.
Every save goes through the server
On a live workspace each save is sent to our server, checked there against what that person's desk may change, and recorded with who made it and when.
Every action is one transaction
Validated before it posts, and written as a unit: a confirmation interrupted halfway does not leave the stock moved and the wage unrecorded.
A rate change applies to new work
Changing a process rate in Settings applies to work assigned from then on; wage rows already recorded keep the rate they were made with. Editing an assignment itself does change its wage, so check a batch before you approve it.
The companies that see your data, and why.
Each is used as a processor under its own terms, and none is given your records for any purpose of its own. This is the same list as the privacy policy.
| Company | What it does | When it sees anything |
|---|---|---|
| Google LLC | Holds sign-in identities, sends the one-time SMS codes, runs reCAPTCHA on the sign-in screen, and hosts the databases that store the records. | Whenever a live workspace is used |
| Vercel Inc. | Serves the website and the app, and keeps ordinary server request logs. | On every visit |
| Sarvam AI | Turns a voice recording into text. | Only when someone uses voice entry |
| TypeSafe AI | Reads those words to work out which worker, lot and quantity were meant. | Only when someone uses voice entry |
| Sandbox and Quicko Infosoft | Sandbox, and Quicko Infosoft, the GST suvidha provider Sandbox works through. They receive an e-way bill's details and pass them to the government's e-way bill system. | Only when your company files or cancels an e-way bill from Stitchfloor |
Voice recordings are not kept
The microphone records only from a tap on Say it instead to a tap on Stop, on a form, and only on a live workspace. The recording is turned into text so the form can fill itself in and is used for nothing else. It is not kept by Stitchfloor and is never used to identify a voice. Nothing is saved until the person presses Confirm. On a computer, the browser also shows the words as they are spoken, using its own speech service (Google in Chrome, Microsoft in Edge).
No advertising, no tracking in the app
Nothing collected is sold, rented or shared for marketing. The Android app has no analytics or tracking software of any kind. The website uses one piece of software that behaves like it: Google reCAPTCHA, on the sign-in screen only, to check that a sign-in is a person.
Your records are yours to take and to remove.
Business records belong to the company that entered them. An administrator can take a copy at any time, and the company can have the whole workspace deleted.
- Download everything, whenever you like. Settings has Download records, which produces the whole workspace as one file. Several registers and reports also download as CSV.
- Remove a person. An administrator withdraws their access straight away. To have the account and its personal details deleted, ask an administrator or write to hello@stitchfloor.com from the account's address.
- Delete the whole workspace. An administrator asks, from their own address. Download a copy first: a deleted workspace cannot be restored.
- Within 30 days. Deletion requests are actioned within 30 days. Encrypted backups held by our processors roll off on their own schedule.
The gaps, before anyone has to ask.
Larger vendors put badges here. We would rather list what is missing, so you can weigh it with your accountant or IT person.
- No ISO 27001 certification. We have not been audited against it.
- No SOC 2 report. There is no third-party report to send you.
- No published uptime SLA. We do not promise an uptime figure or a support response time.
- No separate security mailbox. Report anything to hello@stitchfloor.com, and say it is about security.
- The demo is not a workspace. It is one shared password and fictional records. Do not put real business information into it.
What a careful owner asks.
Can another company see our records?
No. Each company's workspace is separate, and staff at one customer cannot read another customer's records.
Can a supervisor change wages or invoices?
Each desk decides what a person may change, and the server checks it on every save. A production supervisor can edit an assignment's rate and quantity, and that edit changes its wage, even after the week's payout has been submitted. An administrator approves the payout before it is marked paid, so check the batch before approving it.
What happens if a phone is lost?
An administrator withdraws that person's access from the workspace, and from then on the server refuses that account's reads and saves. A phone that was offline can still show the last figures it loaded, marked as not current.
Do you sell or share our data?
No. There is no advertising anywhere in Stitchfloor, and nothing collected is sold, rented or shared for marketing.
Is the demo safe for our real data?
No, and it is not meant to be. The demo is a sample factory behind a shared password, and what you enter stays in your own browser. Use it to try the product, then talk to us about a workspace.
Have a question your CA or IT person wants answered?
Write to us with it. If the answer is that we do not do something yet, we will say so.