← EmailStitchPrivacy policy
Last updated: 10 September 2026
Who we are
Controller: Tomasz Szymańczak, conducting business as Vivivo Solutions, ul. Cicha 26, 96-513 Kozłów Biskupi, Poland. NIP: 1251758025, REGON: 526903367. Contact: contact@uynix.com. No DPO appointed.
Covers emailstitch.com and app.emailstitch.com.
Roles
We are controller for accounts, billing, cookies, security logs, and product analytics. For HTML and templates you store, you are controller; we process them only to provide the service. Recipient data inside email HTML is yours.
What we process
| Data | Why | Basis |
|---|---|---|
| Account (email, name, organization) via Clerk | Sign-in and the app | Art. 6(1)(b) contract |
| Templates (HTML, translations, versions, checklists) | Edit, compile, QA, ZIP download | Art. 6(1)(b) |
| IP and request metadata | Rate limits, security, operations | Art. 6(1)(f) legitimate interests |
| Product analytics (PostHog): signed-in user and organization id, plan, feature events | Understand and improve the app | Art. 6(1)(f) legitimate interests |
| Marketing email (address, name) via Klaviyo | Product updates after optional sign-up checkbox | Art. 6(1)(a) consent |
We do not use automated decisions with legal or similarly significant effects. We do not sell personal data or train AI on your HTML.
App
Sign-in is handled by Clerk. We store your templates and version history (7 days on the free plan, longer on paid plans). We use PostHog for product analytics: explicit feature events only, no autocapture, no third-party ad tracking, tied to your user and organization id so we can see how the app is used. Optional product emails are sent only if you tick the marketing checkbox at sign-up.
Cookies
Device storage follows Polish Electronic Communications Law and GDPR. We only use storage necessary to run the app (sign-in, active workspace). No advertising cookies.
Recipients
- Clerk — sign-in (US; DPF and/or SCCs). Clerk DPA
- PostHog — product analytics (US; SCCs). PostHog DPA
- Paddle — payments and invoicing for paid plans, as merchant of record (US/UK; SCCs). Paddle DPA
- Klaviyo — product emails after optional sign-up consent (US; SCCs). Klaviyo DPA
- Hosting providers — to run the service (EEA and/or SCCs)
Retention
Account and templates: until you or the organization is deleted. Version history: 7 days on the free plan, longer on paid plans. Security logs: a limited period. Product analytics: retained by PostHog for a limited period. Billing records (via Paddle): kept as long as tax law requires. Marketing email: until you withdraw consent or the account is deleted.
Your rights
Access, rectify, erase, restrict, port (where applicable), object to legitimate interests, withdraw marketing email consent, and complain to UODO or your EU authority. Email contact@uynix.com. For organization content we may point you to your admin.
Other
Connections use HTTPS. Not directed at children under 16. We may update this policy (see “Last updated”).
Contact
Tomasz Szymańczak, conducting business as Vivivo Solutions, ul. Cicha 26, 96-513 Kozłów Biskupi, Poland. NIP: 1251758025, REGON: 526903367