Sewly collects only what it needs to draft your patterns and run your account: your e-mail address, the pictures, links and measurements you give it, the patterns you make and your messages to the sewing guide. Your pictures and messages go to our AI provider only to produce your pattern or your answer. We do not sell your data, show it to anyone or use it to train AI models, and you can delete your account and everything in it at any time.
This policy explains the details, in line with the EU General Data Protection Regulation (GDPR). It applies to sewly.app, the Sewly app at app.sewly.app and Sewly inside ChatGPT and Claude.
Who is responsible for your data
The controller of your personal data is the company that operates Sewly:
- Company: Sewly
- Established in: France
- E-mail: hello@sewly.app
For any question about this policy or your data, write to hello@sewly.app. Sewly has not appointed a data protection officer, as the GDPR does not require one for its activities; messages about privacy sent to this address go to the people responsible for data protection at Sewly.
What we collect
Your account
- Your e-mail address, to sign you in and to write to you about your account.
- Sign-in with Google, if you choose it: the e-mail address, name and profile picture Google shares with us. We never see your Google password.
- Sign-in by e-mail link, if you choose it: we send a one-time link to your address. There is no Sewly password to store or to leak.
- Your preferences and plan: language, units, paper size, the plan you are on and your monthly AI usage, counted to apply your plan's limits.
What you give Sewly to make a pattern
- Pictures and links you import: photos, screenshots, links to Pinterest pins, Instagram posts or shop pages with the picture we fetch from them, and the descriptions you type.
- Measurements and measurement profiles: the body measurements you enter, for yourself or for the people you sew for, and the name you give each profile. A first name or a nickname is enough.
- Patterns: the garment, its options and fabric, the pattern pieces, the sewing guide and the PDF files Sewly makes for you.
- Messages to the AI guide: the changes you ask for in words, your questions about a pattern or about measuring, and the answers.
Payments
Paid plans are billed through Stripe. You enter your card or other payment details on Stripe's secure form: Sewly never sees or stores your full card number. Stripe gives us what we need to manage your subscription: your plan, billing country, amounts, invoices, payment status, and the card brand and last four digits.
When you write to us
The content of your messages, the address you write from and our replies.
Technical data
When you use Sewly, our servers and hosting provider record technical logs: IP address, browser and device type, the pages and functions requested, dates and times, and errors. We use them to keep Sewly running, secure and fast.
Cookies and similar storage
Sewly uses only the cookies and browser storage the service needs:
- Sign-in and session: to keep you signed in and protect your account.
- Preferences: to remember choices such as your language or units.
- Payments: Stripe sets its own cookies on its checkout pages to process the payment and prevent fraud.
These are strictly necessary or set at your request, so they do not need your consent. Sewly uses no advertising cookies and no cross-site tracking. If we ever add audience measurement or marketing cookies that need consent, we will ask you first with a clear option to refuse, and Sewly will work the same if you do.
Why we use your data and on what legal basis
| Purpose | Data used | Legal basis under the GDPR |
|---|---|---|
| Create and run your account, sign you in | E-mail address, Google profile, preferences | Performance of our contract with you (Art. 6(1)(b)) |
| Draft, preview, print and keep your patterns | Pictures, links, descriptions, measurements, patterns | Contract |
| Answer your requests and questions through the AI guide | Your messages and the pattern they are about | Contract |
| Bill your plan, issue invoices, keep accounting records | Billing and payment data | Contract and legal obligation (Art. 6(1)(c)) |
| Send service e-mails: sign-in links, receipts, renewal reminders, important changes | E-mail address | Contract |
| Answer your messages to us | Your messages, account data | Contract or legitimate interest (Art. 6(1)(f)) |
| Keep Sewly secure, prevent fraud and abuse, apply plan limits and fair use | Technical logs, usage counts | Legitimate interest |
| Fix problems and improve Sewly | Technical logs, usage statistics, the pictures or patterns you send us with a problem report | Legitimate interest |
| Send news and sewing tips from Sewly | E-mail address | Consent, which you can withdraw at any time (Art. 6(1)(a)) |
| Comply with the law, answer authorities, defend legal claims | The data concerned | Legal obligation or legitimate interest |
Where we rely on our legitimate interest, it is to offer a working, safe service, and you can object at any time (see your rights below). We do not sell your personal data, share it for advertising or use it to profile you. Sewly makes no decision with legal or similarly significant effects on you by automated means alone.
We do not look at your pictures, measurements or patterns, except when you ask us to (for example when you report a problem with a pattern) or when we must investigate abuse or answer a legal request.
Your pictures, your messages and AI
Sewly uses an AI model from Anthropic, through Anthropic's commercial API, to recognize the garment in your picture and to answer your messages.
- What is sent: the picture, link content or description you import; for a message, your message with the context needed to answer it: the garment, its options and, where useful, your measurements.
- Why: only to produce your pattern or your answer. The pattern pieces themselves are drawn by Sewly's own drafting engine, not by the AI.
- No training: Sewly does not use your pictures, measurements, patterns or messages to train AI models. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
- Retention by the provider: Anthropic keeps API inputs and outputs only for the limited period set out in its API terms and data retention policy, mainly to detect misuse, and then deletes them.
- Mistakes: an AI can misread a picture or give an imperfect answer. You see every choice it makes and can change any of them before you print.
Sewly in ChatGPT and Claude
You can use Sewly as an app in ChatGPT or a connector in Claude.
- Connecting: you sign in to your Sewly account and approve the connection (OAuth). The assistant then receives access tokens that let it use Sewly's tools on your account: make and change patterns, read the patterns and measurement profiles it needs, and get PDF links. It never receives your Sewly sign-in details.
- What Sewly sees: only what the assistant sends to Sewly's tools, such as a picture link, a description, measurements and your request. Sewly does not see the rest of your conversation.
- What the assistant sees: what Sewly sends back: the pattern summary and preview, fabric quantities, the PDF link and the measurement profiles it asks for.
- Tokens: we store access tokens securely to recognize the connection. They expire on their own; you can revoke them at any time by disconnecting Sewly in the assistant's settings or by writing to us, and deleting your Sewly account revokes them all.
- Your conversation is processed by OpenAI (ChatGPT) or Anthropic (Claude) under their own terms and privacy policies, as independent controllers.
Who processes your data
We share your data only with the providers that run Sewly for us. Each is bound by a data processing agreement to use it only on our instructions, keep it confidential and protect it.
| Provider | What it does for Sewly | Data concerned | Where |
|---|---|---|---|
| Supabase | Database, sign-in and file storage | Account, pictures, measurements, patterns, messages | European Union |
| Anthropic | AI that recognizes garments and answers messages | Pictures, links, descriptions, messages and their context | United States |
| Stripe | Payments, subscriptions and invoices | Billing and payment data, e-mail address | Ireland and United States |
| Vercel | Hosting of the website and the app | Technical data and the requests passing through the app | United States, with servers worldwide |
| E-mail delivery service | Sign-in links, receipts and service e-mails | E-mail address, message content | European Union or United States |
When you choose to sign in with Google, Google handles that sign-in as an independent controller under its own privacy policy. Stripe also acts as an independent controller for its own legal obligations, such as fraud prevention and anti-money-laundering checks.
We may also disclose data when the law requires it (a court order or a request from a competent authority), to protect the rights and safety of Sewly and its users, or to a company that takes over Sewly, which would remain bound by this policy.
Transfers outside the European Economic Area
Your account, pictures, measurements and patterns are stored in the European Union. Some of the providers above are based in the United States or may access data from there. When data leaves the European Economic Area, it stays protected: through the EU–US Data Privacy Framework when the provider is certified under it, or through the Standard Contractual Clauses adopted by the European Commission, with additional measures such as encryption in transit. You can ask us for a copy of these safeguards.
How long we keep your data
| Data | How long |
|---|---|
| Account, measurements, patterns, pictures and messages | While your account is open. You can delete any pattern, picture or profile at any time. |
| After you delete your account | Deleted within 30 days; backup copies are overwritten within a further 30 days |
| Free accounts unused for 3 years | Deleted, after a warning e-mail |
| Invoices and accounting records | 10 years, as French law requires |
| Messages to us | 3 years after our last exchange |
| Technical logs | Up to 12 months |
| Pictures and messages at our AI provider | The limited period set by its API terms |
| ChatGPT and Claude access tokens | Until they expire or you disconnect |
Your rights
Wherever you live, you can:
- Access your data and get a copy of it.
- Rectify it: you can change most of it yourself in the app.
- Erase it: delete a pattern, a picture, a profile or your whole account.
- Port it: receive the data you gave us in a common machine-readable format, to reuse elsewhere.
- Object to processing based on our legitimate interest, and to marketing at any time.
- Restrict processing while a request or a complaint is being examined.
- Withdraw your consent where we asked for it, without affecting what was done before.
- Give instructions about what happens to your data after your death, a right under French law.
To exercise a right, write to hello@sewly.app, ideally from the e-mail address of your account. We answer within one month; for complex requests this can be extended by two months, and we tell you if so. We may ask you to confirm your identity. It costs nothing.
If you think we have not respected your rights, you can complain to the CNIL, the French data protection authority (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr), or to the data protection authority of the country where you live or work. We would appreciate the chance to put things right first.
If you live in California or another US state with a privacy law, you have the rights above, including to know, correct and delete your personal information. We do not sell or share it for cross-context behavioral advertising, and we will not treat you differently for using your rights.
Deleting your account
You can delete your account at any time from your account page in the app, or by writing to hello@sewly.app. Deleting your account:
- cancels any active subscription, so you are not charged again (the refund policy explains what happens to the period already paid);
- deletes your profile, measurements, patterns, pictures and messages within 30 days, and from backups within a further 30 days;
- revokes the access of ChatGPT or Claude to your account.
We keep only what the law requires us to keep: invoices and accounting records, for 10 years.
Children
Sewly is meant for people aged 16 and over. Younger people may use Sewly only with the permission of a parent or guardian, who should create or supervise the account. If we learn that we hold the data of a child under 16 without that permission, we delete it.
Parents who sew for their children can save the children's measurements in a profile: a first name or a nickname is all Sewly needs.
Security
We protect your data with measures suited to what it is:
- Encrypted connections (HTTPS) everywhere, and data encrypted at rest by our providers.
- Strict access rules in the database, so that each account can read only its own pictures, measurements and patterns.
- Access by the Sewly team only when needed, with strong authentication.
- Sign-in with Google or one-time e-mail links, so there is no Sewly password to steal.
No system is perfectly secure. If a breach puts your data at risk, we will notify the CNIL within 72 hours and tell you without undue delay when the risk to you is high, as the GDPR requires.
Changes to this policy
We update this policy when Sewly or the law changes; the date at the top shows the version in force. If a change matters for how we use your data, we tell you by e-mail or in the app before it applies, and ask for your consent where the law requires it.
Contact
Questions or requests about your data: hello@sewly.app. See also our terms of service and refund policy.