Trust, security
and your data.
Short version: we hold your logo, your store's settings, and the orders your buyers place. We do not sell any of it, we do not train anything on it, and you can have all of it deleted by sending one email. Everything below is what is actually true today.
What we actually hold
| Data | Why we have it | Where it lives |
|---|---|---|
| Your logo file | To photograph it on the garments and show it on your store | Cloudflare D1, US |
| Your brand name, site URL, colours | To build and theme the store | Cloudflare D1, US |
| Your email, if you gave one | Order notifications and nothing else | Cloudflare D1, US |
| Buyer name, email, shipping address | To make and post the parcel | Cloudflare D1, US |
| Card details | — | Never touches our servers. Stripe holds them. |
Your data controls
Close my store
A button in your dashboard. The storefront goes offline immediately and nothing more can be ordered. Closing is not erasing, deliberately — closing can be undone, so your logo and the four product photographs stay in our database until you tell us otherwise. Use one of the next two if you want them gone.
Delete my account — and erase the files with it
Also a button in your dashboard. Every store on your email address goes offline, every sign-in link and API key is cancelled, and your logo and every generated photograph are deleted then and there — from the database and from the address they were served at on the internet. There is no undo. Any copy still held in one of our data centres expires within a day. A copy a visitor's browser already downloaded is on their own device and stays until they clear it — that one is beyond our reach, and beyond anyone else's.
Erase the files but keep my account
Email [email protected] from the address on the store, or from an address at your company's domain, with the store address. Close the store first, then we remove the logo and the generated photography. We do it within seven days and confirm when it is done.
What we keep either way, and why
Orders, the buyer's name and shipping address, and the receipts we emailed your buyers. Those are a financial record and somebody else's proof of their own purchase — tax law sets the clock, a chargeback can arrive months later, and you cannot waive them on a buyer's behalf. Your store's web address is not reissued to anyone else either. A buyer who wants their own record removed can ask us directly; that is on the privacy notice.
Get a copy of what you hold on me
Same address. Your orders are already downloadable as CSV from your own dashboard, without asking us. Everything else we send within seven days.
Stop emailing me
Order notifications are the only thing we send a brand owner, and turning them off is a reply. We do not run a marketing list off store owners.
Take my store down but keep the orders
We can unpublish a store without deleting order history, so you can still fulfil and refund what is outstanding. Ask for that specifically.
What we never do
- We never sell your data, or your buyers', to anyone.
- We do not train models on your logo or your buyers' details. Your mark is sent to OpenAI's image API to generate the four product photographs and for nothing else — see below.
- We never charge a card without a completed checkout. There is no stored-card billing.
- We never contact your buyers except about the order they placed.
Who else touches it
| Who | What they get | Why |
|---|---|---|
| Cloudflare | Everything — they host the store and the database. On SEWN's own pages (not your storefront) they also count anonymous page views | Hosting, and cookieless analytics on our own pages |
| OpenAI | Your logo, at build time only | Generating the four product photographs |
| Stripe | Buyer email, amount, card | Taking payment |
| MailerSend | Buyer email address, order contents | Order and shipping emails |
| Our production partner | Buyer name and shipping address, the piece, your artwork | Embroidering and posting the parcel |
That list is the whole list. If it changes, this page changes.
On analytics, precisely: SEWN's own pages — the ones at
app.yoursewn.store and our marketing site — carry Cloudflare Web Analytics,
which sets no cookie, stores no identifier and cannot follow anyone between sites. We added it on
7 September 2026 so we can tell how many people reach the page at all.
Your storefront carries none of it. Your buyers are yours; we do not put our
measurement on your shop.
Security, stated honestly
What is true:
- Everything is served over HTTPS, on Cloudflare's edge, with certificates issued per store.
- Card details never reach our servers. Payment is handled by Stripe and we store an identifier, never a card number.
- Your private dashboard link is a random 32-character token, not a guessable URL.
- Operator actions — anything that writes a brand, a product or an order status — sit behind a separate admin token, not a password anyone shares.
- Nothing is produced and no vendor is contacted until an order is actually paid for.
If your security or procurement team needs something specific — a certification, single sign-on, named accounts and roles, or a security review — email [email protected] and we will answer you straight about what we have today and what we can do on your timeline.
If someone made a store with a logo that isn't theirs
Anyone can currently type a brand name and upload a file, so this can happen and we would rather fix it in an hour than argue about it.
Email [email protected] with the store address and a line saying you own the mark. We take the store offline first and ask questions afterwards. We do not require a lawyer's letter to do that, and there is no charge.
We are also adding domain verification — proving control of the brand's own domain before a store can be published — so this stops being a cleanup job. Until that ships, the takedown above is the control, and saying so is more useful than pretending otherwise.
If you bought something
Your name, email and address go to exactly two places: the person embroidering the piece, and the carrier. Payment is Stripe's. Nothing is produced until your payment clears, and if a run sells out before yours is made you are refunded in full rather than waitlisted. See Shipping & Returns and Privacy, and track an order any time.
Last reviewed 4 September 2026. Questions: [email protected] · security: [email protected]