This policy explains what KilnWorks ("KilnWorks", "we", "us") collects when you use the application at getkilnworks.app, why, who it's shared with, and the choices you have. We don't sell your data and we don't use it for advertising.
| Category | What it is |
|---|---|
| Account | Your email address and a hashed (not readable) copy of your password. Optionally a shop name. |
| Billing | Handled by Stripe. We store your Stripe customer and subscription identifiers and your plan and status. We never receive or store your full card number. |
| Etsy data | When you connect Etsy, we retrieve and store shop details, listings, tags, images metadata, transactions, receipts, and reviews for your shop, plus an access token (encrypted at rest) used to make those requests on your behalf. |
| Printify data | The API token you provide (encrypted at rest) and the products and order data we read with it. |
| Derived analytics | Scores, aggregates, historical snapshots, and suggestions KilnWorks computes from the above. |
| Operational logs | An audit log of significant account actions, plus standard server logs (IP address, timestamps, request paths, errors) kept for security and debugging. |
| Cookies | One session cookie to keep you logged in, and a CSRF token. No third-party analytics, tracking, or advertising cookies. |
We use a small number of processors to run the Service. We share only what each one needs:
| Provider | Purpose | What it gets |
|---|---|---|
| Stripe | Payments and subscription billing | Your email and payment details you enter on Stripe's checkout; subscription events |
| Anthropic | AI Listing Assistant | Only the listing title, tags, and description you choose to work on, and only when you use that feature. Per Anthropic's API terms, this data is not used to train their models. |
| Google Workspace | Sending our email | Recipient address and message content of transactional emails |
| Hosting provider | Running the servers and database | Everything above, as stored data on infrastructure we control |
We may also disclose data if required by law, to enforce our terms, or as part of a business transfer, in which case we'll notify you. Etsy, Printify, and Stripe are sources and destinations you connect directly; their handling of your data is governed by their own policies.
KilnWorks is operated from the United States and your data is stored there.
We keep your account data for as long as your account is active. If you cancel, we keep it for up to 90 days to allow reactivation and then delete or anonymize it, except where we need to retain limited records (for example billing history for tax and accounting, and security logs) for longer. You can ask us to delete your data sooner (see below).
Connections to the Service use HTTPS. Etsy and Printify access tokens are encrypted at rest. Access to production systems is restricted, and account actions are logged. No system is perfectly secure, but we take reasonable measures appropriate to the data we hold and will notify affected users of a breach as required by law.
Depending on where you live (for example the EU/UK or California) you may have additional rights over your personal data, including the right to object to or restrict certain processing and the right not to be discriminated against for exercising a right. We honor these requests. To exercise any of the above, email support@getkilnworks.app from your account address.
KilnWorks is a business tool not intended for anyone under 18, and we don't knowingly collect data from children.
We'll update this policy as the Service changes and revise the effective date above. For material changes we'll notify you by email or in the app.
Privacy questions or requests: support@getkilnworks.app.
See also our Terms of Service.