COLORWORK STUDIO PRIVACY POLICY

Effective date: June 20th, 2026

This Privacy Policy explains how Knit and Compute LLC, a New York limited liability company (“Knit and Compute,” “Colorwork Studio,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes personal information in connection with the Colorwork Studio websites, applications, software, rendering tools, pattern tools, and related services that link to this Policy (collectively, the “Service”).

This Policy is incorporated into and supplements our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms of Service. By using the Service, you acknowledge this Privacy Policy.

The Service is offered only to individuals who reside in the United States and who are at least 18 years old. It is not directed to children or to individuals located outside the United States.

1. Information We Collect

We collect personal information in three ways: information you provide, information generated through your use of the Service, and information we receive from third parties.

1.1 Information you provide

• Account information. When you create an account, we collect your email address and the password you set. We store passwords only in salted, hashed form and cannot recover your plaintext password.
• Profile information. A username and any optional profile image, display name, or biographical details you choose to provide.
• User Content. The charts, pattern data, titles, yarn selections, descriptions, license and rights notices, and other content you create, upload, store, or publish through the Service, as described in the Terms of Service.
• Communications. Information you provide when you contact us for support, submit a report, exercise a privacy right, or otherwise correspond with us, including the contents of those communications.

1.2 Information generated through your use of the Service

• Authentication and session data. Records of sign-in, sign-out, session tokens, and related authentication events used to keep you logged in and to secure your account.
• Technical and log data. Your IP address, browser and device type, operating system, user-agent string, referring pages, timestamps, requested URLs, and similar information automatically recorded when you access the Service.
• Usage and diagnostic data. Information about how you interact with the Service, including features used, rendering and export activity, error and crash diagnostics, and performance metrics.
• Cookies and similar technologies. We use cookies and similar technologies that are necessary to operate the Service (for example, to maintain your session and security state) and may use a limited set of analytics or preference cookies. See Section 6.

1.3 Information from third parties

• Payment information. When you purchase a subscription, our payment processor (currently Stripe) collects and processes your payment-card and billing information. We do not directly store complete payment-card numbers. We receive limited information such as a payment token, the last four digits of a card, card brand, billing ZIP or country, subscription status, and transaction results.
• Infrastructure and service providers. We may receive technical, security, or delivery information from our hosting, email, authentication, analytics, and error-monitoring providers in connection with operating the Service.

We do not knowingly collect sensitive personal information (such as government identifiers, precise geolocation, health, or biometric data), and we ask that you not submit it through the Service.

2. How We Use Personal Information

We use personal information to:

• create, maintain, authenticate, and secure your account;
• provide, operate, and maintain the Service, including hosting, storing, rendering, and exporting your User Content;
• process subscriptions, payments, renewals, and refunds, and administer billing;
• implement the visibility, copy, attribution, and source-record settings you select;
• communicate with you about your account, subscriptions, security, legal notices, support requests, and changes to the Service or our policies;
• diagnose errors, monitor performance, and improve the reliability, rendering quality, accessibility, and usability of the Service;
• understand feature performance and develop aggregate or deidentified statistics;
• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service;
• moderate content and respond to reports, copyright notices, and removal requests; and
• comply with legal obligations and enforce our agreements.

We may process information on the basis of providing the Service you request, our legitimate interests in operating and improving the Service, your consent where required, and compliance with law.

3. Machine Learning and Analytics

We may use account activity, device information, technical logs, and aggregate or deidentified information to operate and secure the Service, prevent fraud and abuse, understand feature performance, diagnose errors, improve rendering and usability, and develop aggregate statistics.

We will not use your private, unlisted, or public User Content to train a generative machine-learning model without obtaining your separate affirmative consent.

This commitment does not prevent ordinary rendering, search, indexing, moderation, security analysis, abuse detection, technical processing, aggregate analytics, or other processing necessary to provide and improve the Service.

4. How We Disclose Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as described below.

• Service providers. We share personal information with vendors who process it on our behalf and under contract, including hosting, payment processing (Stripe), email delivery, authentication, analytics, and error-monitoring providers. These providers are permitted to use the information only to provide services to us.
• Public and shared content. User Content you designate as public or unlisted, along with the username and attribution information associated with it, is visible to others according to the visibility and copy settings you select. Public patterns and profiles may be indexed by search engines. See the Terms of Service for details on visibility and copying.
• Legal and safety. We may disclose information when we reasonably believe it is necessary to comply with law, legal process, or a governmental request; to enforce our Terms of Service; to protect the rights, property, or safety of users, Knit and Compute, or others; or to detect, prevent, or address fraud, security, or technical issues.
• Business transfers. We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to this Policy or a successor policy.
• With your direction. We may share information when you direct us to do so or otherwise consent.

5. Third-Party Services

The Service relies on third-party providers, including payment, hosting, email, authentication, analytics, error-monitoring, and infrastructure providers. Your use of certain third-party services, such as our payment processor, may be governed by that provider’s own terms and privacy practices. We do not control and are not responsible for the privacy practices of third parties.

6. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, maintain security and session state, remember preferences, and understand how the Service is used. Strictly necessary cookies are required to operate the Service and cannot be disabled through the Service. You may be able to control non-essential cookies through your browser settings, though disabling cookies may affect functionality.

We do not currently respond to browser “Do Not Track” signals. Where required by law, we honor recognized opt-out preference signals applicable to the limited categories of processing to which they apply.

7. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, enforce our agreements, maintain security and fraud-prevention records, and keep billing and tax records.

When you delete your account or specific User Content, we remove it from active systems and public access within a reasonable period. Residual copies may remain temporarily in backups, logs, security and fraud-prevention systems, billing records, and legal-preservation systems retained for legitimate legal and operational purposes. As described in the Terms of Service, deleting content does not automatically remove copies independently saved, exported, cached, or retained by other users or third parties.

8. Your Privacy Rights

Depending on your state of residence, you may have rights to:

• Know and access the categories and specific pieces of personal information we have collected about you;
• Correct inaccurate personal information;
• Delete personal information we have collected from you, subject to legal exceptions;
• Obtain a portable copy of certain information; and
• Opt out of any sale or sharing of personal information or of certain profiling. As noted above, we do not sell or share personal information for cross-context behavioral advertising.

You may also access and update much of your account information directly through your account settings, and you may cancel a subscription or request account deletion through those settings.

To exercise a right, contact us at legal@colorwork.studio. We will verify your request, typically by confirming control of the account email associated with the information. You may use an authorized agent where permitted by law. We will not discriminate against you for exercising your privacy rights. If we decline a request, we will explain why to the extent required by law, and you may appeal by replying to our response.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including hashing passwords and restricting access to systems that store personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for notifying us promptly at legal@colorwork.studio if you believe your account has been accessed without authorization.

10. Children’s Privacy

The Service is not directed to children and is intended only for individuals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will take reasonable steps to delete it. If you believe a person under 18 has provided us with personal information, please contact us at legal@colorwork.studio.

11. United States Only

The Service is intended for use only by individuals who reside in the United States, and personal information is processed and stored in the United States. We do not intend to offer the Service to individuals located outside the United States.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes to the Service, our practices, legal requirements, or other legitimate reasons. We will post the updated Policy with a new effective date and, where required by law or where the changes are material, provide additional notice such as an email to the address associated with your account or an in-product notice. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy to the extent permitted by law.

13. Contact Information

Questions or requests regarding this Privacy Policy or your personal information may be sent to:

Email: legal@colorwork.studio