Privacy Policy

KNIT AND COMPUTE, LLC

Effective Date: October 4, 2026
Last Updated: October 4, 2026

1. SCOPE AND OVERVIEW

This Privacy Policy (this “Policy”) explains how Knit and Compute, LLC, a New York limited liability company (“Knit and Compute,” “Colorwork Studio,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes personal information in connection with the Colorwork Studio websites, applications, software, rendering tools, pattern tools, and related services that link to this Policy (collectively, the “Service”).

This Policy applies when you visit, access, or use the Service, communicate with us, or otherwise provide personal information to us. It does not apply to information processed solely by a third party under that third party's own privacy policy, except to the extent we receive that information from the third party.

This Policy supplements our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service. By using the Service, you acknowledge that you have reviewed this Policy. This Policy is intended to provide notice of our privacy practices and does not form part of the Terms of Service.

The Service is available to users in the United States and other jurisdictions in which we make it available. This Policy applies to our processing of personal information regardless of where you reside, subject to any additional rights and disclosures required under applicable law. The Service is available only to individuals who are at least eighteen (18) years old.

2. PERSONAL INFORMATION WE COLLECT

We collect personal information in three ways: information you provide, information generated through your use of the Service, and information we receive from third parties.

2.1 Information You Provide Directly

• Account information. When you create an account, we collect your email address and the password you set. We store passwords only in salted, hashed form and cannot recover your plaintext password.

• Age information. We may collect your date of birth, age range, or similar information reasonably necessary to confirm that you meet the Service’s minimum age requirement.

• Profile information. A username and any optional profile image, display name, or biographical details you choose to provide.

• User Content. The charts, pattern data, titles, yarn selections, descriptions, license and rights notices, and other content you create, upload, store, or publish through the Service, as described in the Terms of Service.

• Communications. Information you provide when you contact us for support, submit a report, exercise a privacy right, or otherwise correspond with us, including the contents of those communications.

• Payment information .. If you purchase a subscription or other paid feature, our third-party payment processor collects and processes payment and billing information, which may include your name, billing address, payment-card details, transaction amount, subscription plan, and payment status. We do not directly collect or store full payment-card numbers, but we may receive transaction identifiers, limited payment-method details, and records concerning payments, refunds, disputes, and subscription status.

2.2 Information Collected Automatically

• Authentication and session data. Records of sign-in, sign-out, session tokens, and related authentication events used to keep you logged in and to secure your account.

• Device and network information. Your IP address, browser and device type, operating system, user-agent string, referring pages, timestamps, requested URLs, and similar information automatically recorded when you access the Service.

• Usage information. Information about how you interact with the Service, including features used, rendering and export activity, error and crash diagnostics, and performance metrics.

• Cookies and similar technologies. We use cookies and similar technologies that are necessary to operate the Service (for example, to maintain your session and security state) and may use a limited set of analytics or preference cookies. See Section 5.

2.3 Information from Service Providers and Other Sources

We may receive technical, security, or delivery information from our hosting, email, authentication, analytics, and error-monitoring providers in connection with operating the Service.

2.4 Information We Derive

We derive information from the data described above, such as rendering and export activity, feature-usage patterns, and aggregate or deidentified statistics used to operate, secure, and improve the Service.

2.5 Categories of Personal Information

The categories below describe the personal information we collect and have collected during the preceding twelve (12) months. These categories are provided for purposes of applicable privacy laws, including U.S. state privacy laws, and the information collected will depend on how a person uses the Service:

• Identifiers and account information, such as email address, username, and device or session identifiers.

• Internet or other electronic-network activity, such as device, browser, session, usage, security, and diagnostic information.

• Commercial information, such as your subscription plan (if applicable) and interactions with the Service.

• Financial information (if applicable), such as billing details processed on our behalf by a payment processor when we offer paid subscriptions or features.

• Communications and support information, such as the content of messages you send to us and records of our responses.

• Inferences, such as feature-usage and rendering-activity patterns used to operate and improve the Service.

We collect these categories from you, your device or browser, and the service providers described in this Policy. We use them for the purposes in Section 3 and disclose them to the recipient categories in Section 4.

We do not knowingly collect sensitive personal information (such as government identifiers, precise geolocation, health, or biometric data), and we ask that you not submit it through the Service.

3. HOW WE USE PERSONAL INFORMATION

We use personal information to:

• create, maintain, authenticate, and secure your account;

• provide, operate, and maintain the Service, including hosting, storing, rendering, and exporting your User Content;

• implement the visibility, copy, attribution, and source-record settings you select;

• communicate with you about your account, security, legal notices, support requests, and changes to the Service or our policies;

• diagnose errors, monitor performance, and improve the reliability, rendering quality, accessibility, and usability of the Service;

• understand feature performance and develop aggregate or deidentified statistics;

• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service;

• moderate content and respond to reports, copyright notices, and removal requests;

• comply with legal obligations and enforce our agreements; and

• verify that users meet the Service's minimum age requirement.

3.1 Automated Processing and Analytics

We may use account activity, device information, technical logs, and aggregate or deidentified information to operate and secure the Service, prevent fraud and abuse, understand feature performance, diagnose errors, improve rendering and usability, and develop aggregate statistics.

Colorwork Studio does not sell your personal information, use it for cross-context behavioral advertising, or submit it to third-party general-purpose artificial-intelligence models for training. Our service providers may process information to provide, secure, support, or improve their services under their agreements with us.

3.2 Aggregated and De-Identified Information

We may aggregate or de-identify information so that it cannot reasonably be linked to you and use or disclose that information for lawful purposes, including analytics, security, research, and Service improvement. Where required by law, we will maintain de-identified information in de-identified form and will not attempt to re-identify it except to test whether our de-identification processes are effective.

3.3 Legal Bases for Processing

Where applicable law requires us to identify a legal basis for processing personal information, including in the European Economic Area and United Kingdom, we rely on the following legal bases:

• Performance of a contract. We process account information, User Content, subscription information, and related information as necessary to provide the Service, process requested transactions, maintain accounts, and perform our obligations under the Terms of Service.

• Legitimate interests. We process personal information as necessary for our legitimate interests in securing, maintaining, analyzing, improving, and administering the Service; communicating with users; preventing fraud and misuse; enforcing our agreements; and protecting our rights and the rights of others, provided that those interests are not overridden by your rights and interests.

• Consent. We rely on your consent where required, including for certain nonessential cookies, marketing communications, or other optional processing. You may withdraw your consent at any time, without affecting the lawfulness of processing conducted before withdrawal.

• Legal obligations. We process personal information where necessary to comply with applicable laws, legal processes, regulatory requirements, and recordkeeping obligations.

• Protection of legal rights. Where permitted by applicable law, we process personal information as necessary to establish, exercise, or defend legal claims and protect users, Knit and Compute, and others.

4. HOW WE DISCLOSE PERSONAL INFORMATION

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as described below.

• Service providers and contractors. We share personal information with vendors who process it on our behalf and under contract, including hosting, email delivery, authentication, analytics, error-monitoring, and (if we offer paid subscriptions or features) payment-processing providers. These providers are permitted to use the information only to provide services to us.

• Public or visible content. User Content you designate as public or unlisted, along with the username and attribution information associated with it, may be visible to others according to the visibility and copy settings you select. Public patterns and profiles may be indexed by search engines. If you allow others to copy your public User Content, a pattern created from your pattern (a "Remix") will display your username as the source, and your original pattern's attribution will remain visible in connection with the Remix, as described in the Terms of Service. If you separately authorize us to use your public User Content for promotional purposes, we may display that content together with your username and associated attribution information through our websites, email newsletters, social-media accounts, presentations, advertisements, and other promotional channels. This promotional-use permission is off by default and is never preselected. You may withdraw that permission prospectively as described in the Terms of Service.

• Legal and safety purposes. We may disclose information when we reasonably believe it is necessary to comply with law, legal process, or a governmental request; to enforce our Terms of Service; to protect the rights, property, or safety of users, Knit and Compute, or others; or to detect, prevent, or address fraud, security, or technical issues.

• Professional advisers and insurers. To lawyers, auditors, accountants, consultants, and insurers subject to appropriate professional or contractual duties.

• Affiliates. To a parent, subsidiary, or other entity under common control, if any, for purposes consistent with this Policy.

• Business transactions. We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to this Policy or a successor policy.

• Consent. We may share information when you direct us to do so or otherwise consent.

5. COOKIES, TRACKING TECHNOLOGIES, AND COMMUNICATION CHOICES

5.1 Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, maintain security and session state, remember your preferences, understand how the Service is used, diagnose errors, and improve the Service.

Strictly necessary cookies are required to operate and secure the Service and cannot be disabled through the Service. Where required by applicable law, we obtain your consent before using analytics or other nonessential cookies or similar technologies. You may accept, reject, or manage nonessential technologies through any cookie preference tool we make available and may change your selections at any time. Withdrawing consent does not affect the lawfulness of processing conducted before withdrawal.

You may also control certain cookies through your browser settings, although disabling cookies may affect the availability or operation of certain Service features.

5.2 Do Not Track and Global Privacy Control

We do not currently respond to browser “Do Not Track” signals. Where required by law, we honor recognized opt-out preference signals, such as Global Privacy Control, applicable to the limited categories of processing to which they apply.

5.3 Email and Other Communications

You may unsubscribe from marketing emails using the link in the message. You will continue to receive non-promotional communications necessary to administer your account, such as security notices and legal or policy updates.

6. DATA RETENTION AND DELETION

We retain personal information for as long as your account is active and as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, enforce our agreements, and maintain security and fraud-prevention records.

• Account and content deletion. When you delete your account or specific User Content, we remove it from active systems and public access within a reasonable period. As described in the Terms of Service, deleting content does not automatically remove copies independently saved, exported, cached, or retained by other users or third parties.

• Backups and provider records. Residual copies may remain temporarily in backups, logs, security and fraud-prevention systems, and legal-preservation systems retained for legitimate legal and operational purposes.

7. DATA SECURITY

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including hashing passwords and restricting access to systems that store personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for notifying us promptly at legal@colorwork.studio if you believe your account has been accessed without authorization.

8. YOUR ACCOUNT CONTROLS

• Profile and preferences. You may review and update available profile fields and settings through your account.

• Account deletion. You may request account deletion through your account settings. Deletion is subject to Section 6 and may be irreversible.

9. YOUR PRIVACY RIGHTS

Depending on where you reside and subject to applicable law, you may have the right to:

• request access to the personal information we maintain about you;

• request correction of inaccurate or incomplete personal information;

• request deletion of personal information, subject to applicable exceptions;

• obtain a portable copy of certain personal information;

• restrict or object to certain processing;

• withdraw consent where processing is based on consent;

• opt out of certain sales, sharing, targeted advertising, or profiling;

• appeal our denial of a privacy request; and

• lodge a complaint with an applicable data-protection or supervisory authority.

These rights are subject to exceptions and limitations under applicable law. You may also access and update much of your account information directly through your account settings and may request account deletion through those settings.

9.1 Submitting a Request

To exercise a right, contact us at legal@colorwork.studio. We will verify your request, typically by confirming control of the account email associated with the information. You may use an authorized agent where permitted by law. We will not discriminate against you for exercising your privacy rights. If we decline a request, we will explain why to the extent required by law, and you may appeal by replying to our response. We may require information reasonably necessary to verify the requester’s identity and authority.

9.2 California Disclosures

If and to the extent the California Consumer Privacy Act applies, the categories of personal information collected during the preceding twelve (12) months are described in Section 2.5; the sources are described in Section 2; the business and commercial purposes are described in Section 3; and the categories of recipients to whom information is disclosed for business purposes are described in Section 4. We have not sold or shared personal information as those terms are defined by California law, and we have no actual knowledge that we sell or share the personal information of consumers under sixteen (16).

California's “Shine the Light” law may permit residents to request information regarding disclosures of personal information to third parties for their own direct-marketing purposes. We do not make such disclosures.

9.3 Additional Information for EEA and UK Users

If you are located in the European Economic Area or United Kingdom, you may exercise the rights described in this Section by contacting us at legal@colorwork.studio. You may also lodge a complaint with the data-protection authority in the country where you reside, where you work, or where you believe a violation of applicable data-protection law occurred. We encourage you to contact us first so that we may attempt to address your concern.

Our representatives in the EU and UK. Knit and Compute is not established in the European Union or the United Kingdom. Pursuant to Article 27 of the EU General Data Protection Regulation and Article 27 of the UK General Data Protection Regulation, we have appointed the following representatives, whom you or your supervisory authority may contact, in addition to or instead of us, on any matter relating to our processing of your personal information:

• EU representative: European Data Protection Office (EDPO), Avenue Huart Hamoir 71, 1030 Brussels, Belgium (Brussels Register of Legal Entities no. 0689.629.220). View the representation certificate (PDF).

• UK representative: EDPO UK Ltd, Unit 33, Waterside, Schooner Court, 44-48 Wharf Road, London N1 7UX, United Kingdom (Companies House no. 12945565). View the representation certificate (PDF).

We have not appointed a Data Protection Officer because we do not meet the thresholds under applicable law that require one. Requests sent to legal@colorwork.studio reach us directly and remain the fastest way to exercise your rights.

10. THIRD-PARTY SERVICES AND LINKS

The Service relies on third-party providers, including hosting, email, authentication, analytics, error-monitoring, and infrastructure providers, and may link to services or websites operated by third parties. Your use of certain third-party services may be governed by that provider's own terms and privacy practices. We do not control and are not responsible for the privacy practices of third parties.

11. CHILDREN'S PRIVACY

The Service is not directed to children and is intended only for individuals who are at least eighteen (18) years old. We do not knowingly collect personal information from anyone under eighteen. If we learn that we have collected personal information from a person under eighteen, we will take reasonable steps to delete it and terminate or restrict the associated account, subject to applicable law.

If you believe a person under eighteen has provided us with personal information, please contact us at legal@colorwork.studio.

12. INTERNATIONAL PROCESSING AND DATA TRANSFERS

Knit and Compute is based in the United States, and we and our service providers may process and store personal information in the United States and other countries where we or they operate. These countries may have data-protection laws that differ from those in your country of residence.

Where required by applicable law, we use appropriate safeguards for international transfers of personal information, which may include adequacy decisions, the European Commission’s Standard Contractual Clauses, the United Kingdom’s International Data Transfer Agreement or Addendum, or another legally recognized transfer mechanism. You may contact us at legal@colorwork.studio for additional information regarding the safeguards applicable to your personal information.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes to the Service, our practices, legal requirements, or other legitimate reasons. We will post the updated Policy with a new effective date and, where required by law or where the changes are material, provide additional notice such as an email to the address associated with your account or an in-product notice. If required by applicable law, we will obtain your consent before using personal information for a materially new purpose that is not compatible with the purpose for which the information was originally collected.

14. CONTACT US

Questions or requests regarding this Privacy Policy or your personal information may be sent to:

Knit and Compute, LLC

418 Broadway, Ste N

Albany, NY 12207

legal@colorwork.studio

If you are located in the European Economic Area or United Kingdom, you may also contact our Article 27 representatives:

EU representative

European Data Protection Office (EDPO)

Avenue Huart Hamoir 71

1030 Brussels, Belgium

UK representative

EDPO UK Ltd

Unit 33, Waterside, Schooner Court

44-48 Wharf Road

London N1 7UX, United Kingdom