Privacy Policy

1. Information We Collect

We collect information in three categories:

Account information. When you sign up or request a demo, we collect your name, email address, company name, and job title.

Connected system data. When you connect integrations (such as your CRM, email, calendar, or documents), Stitch accesses data from those systems to power your workflows. This may include CRM records, email metadata and content, calendar events, meeting transcripts, document content, and chat messages. We only access the data required to run the automations you configure.

Usage and technical data. We collect information about how you use Stitch, including pages visited, features used, browser type, device information, and IP address. We use PostHog for product analytics.

2. How We Use Your Data

We use your data to:

• Operate your workflows and automations
• Keep your CRM and connected systems in sync
• Process AI-assisted actions such as field updates, summaries, and recommendations
• Provide approvals, run history, and audit trails
• Improve the product based on usage patterns
• Communicate with you about your account and product updates
• Monitor and resolve errors using Sentry

We do not sell your data. We do not use your data for advertising.

3. AI and Your Data

Stitch uses AI to power actions within your workflows, such as extracting information from calls, generating CRM field updates, and producing deal summaries. We want to be explicit about how this works:

• Zero-data retention. We use AI providers that operate under zero-data retention agreements. Your data is processed in real time and is not stored by our AI providers after the request completes.
• No model training on your data. Your data is never used to train, fine-tune, or improve any AI models. Not by us, and not by our AI providers.
• Inspectable outputs. Every AI-generated action includes justification and citations so your team can verify what changed and why before or after it happens.

4. Third-Party Services

We use a limited set of third-party services to operate Stitch:

• PostHog for product analytics. PostHog collects usage data to help us understand how teams use Stitch and where we can improve. You can opt out of analytics tracking.
• Sentry for error monitoring. Sentry collects technical error data (stack traces, browser information, and request metadata) to help us identify and fix bugs. Error reports may include contextual data but do not intentionally capture customer business data.
• AI providers for workflow processing, operating under zero-data retention agreements as described above.
• Integration partners (Salesforce, HubSpot, Google, Slack, etc.) to connect your existing systems. Stitch accesses these systems using credentials you provide and only performs actions your workflows are configured to take.

We do not share your data with any other third parties except as required by law.

5. Data Security

We protect your data with encryption in transit (TLS 1.2+) and at rest (AES-256). We enforce role-based access controls, maintain audit logs, and conduct regular security reviews. Access to production systems is restricted and logged.

Connected system credentials are encrypted and stored separately from your account data. We use OAuth where available and never store plaintext passwords.

6. Data Retention

We retain your account data and workflow history for as long as your account is active. Connected system data is processed in real time and cached only as long as necessary to operate your workflows. When you disconnect an integration or delete your account, we remove the associated data within 30 days.

Error logs in Sentry are retained for 90 days. Analytics data in PostHog is retained for 12 months.

7. Your Rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Export your data
• Disconnect integrations and revoke access at any time
• Opt out of analytics tracking
• Opt out of marketing communications

To exercise any of these rights, contact us at privacy@trystitch.io.

8. Cookies

We use cookies for authentication, preferences, and analytics. PostHog sets analytics cookies to understand product usage. You can disable non-essential cookies in your browser settings.

9. Changes to This Policy

We may update this policy as our product and practices evolve. When we make material changes, we will notify you by email or through the product. The date at the top of this page reflects the most recent update.

10. Contact

If you have questions about this policy or how we handle your data, contact us at privacy@trystitch.io.