What we collect
Your account
- Your name, email address and password. Passwords are stored only as a one-way scrambled form (a hash) — no one at Stamp Kiln can see them.
- If you sign in with Google: your name, email address and profile picture from Google.
- An optional profile photo you add.
Your signatures and companies
- What you put in a signature: names, job titles, phone numbers, email and web addresses, street addresses, social links, photos, logos, colors and banners.
- Company details and, on the Team plan, the people you invite and the details you enter for them.
Billing
- Your plan, billing address and invoices. Card details go straight to Stripe; we only see the card's brand, last four digits and expiry date.
How you use Stamp Kiln
- Basic technical information, such as your browser, device type and IP address, in server logs and error reports.
- Which pages and features are used, to help us improve the product.
- How much of your monthly AI allowance you have used.
How we use it
- To run Stamp Kiln for you: build and preview your signatures, host their images, and run the AI tools you ask for.
- To manage your account and billing, and send emails you need, such as sign-in codes, password resets, receipts and team invites.
- To keep the service safe: preventing abuse, checking uploads for unsafe content, and fixing errors.
- To understand which features are used so we can improve them.
Images in your signature are public
So the people you email can see them, the photos, logos and banners in your signature are stored at web addresses that anyone with the address can open. Don't put anything in a signature image you wouldn't want a recipient to see.
We don't track who opens your emails or who clicks the links in your signature.
AI tools
When you use an AI tool, the text and images you give it are sent to OpenAI to produce the result, and uploads are checked by OpenAI's safety tools. OpenAI's business terms say it does not use this data to train its models; it may keep it for up to 30 days to watch for abuse, then deletes it. The results are saved in your Stamp Kiln account.
Who we share it with
We share personal information only with the services that help us run Stamp Kiln, and only what each one needs:
- Convex — our database, file storage and the servers that run the app
- Vercel — hosting the website
- Stripe — payments, invoices and billing details
- OpenAI — the AI tools you choose to use, and automatic checks that uploads are safe
- Resend — sending account emails, such as sign-in codes, password resets and team invites
- Google — signing in with Google, if you choose it
- Cloudflare — our domain and its network
- Sentry — error reports that help us find and fix bugs
- PostHog — product analytics: which pages and features are used
On the Team plan, the account owner can see and manage the signature details of the people on their team. We may also share information if the law requires it, to protect people from harm, or as part of a sale or merger of the business (you would be told first).
Cookies
We use one cookie: the sign-in cookie that keeps you signed in (for up to 30 days). Our product analytics runs without cookies or any other storage in your browser — visitors are counted with an anonymous code worked out on the analytics provider's servers, and we never link it to your account. We don't use advertising cookies. You can clear cookies in your browser at any time; you'll then need to sign in again.
How long we keep it
- We keep your information while you have an account.
- When you delete your account (Account page), your account, your companies and everything in them are deleted straight away, including the signature images we host. Copies in our backups are gone within 7 days.
- Stripe keeps billing records for as long as tax and accounting laws require. We keep a short log of support and security actions taken on accounts.
Your choices and rights
- You can see and change your details in the app at any time, and delete your account yourself.
- You can ask us for a copy of your information, to correct it, or to delete it, by emailing support@stampkiln.com. We'll reply within 30 days.
- Depending on where you live (for example, the EU, UK or California), you may have further rights, such as objecting to some uses or complaining to your data protection authority. We honor these rights for everyone, wherever they live.
Where your information is kept
Stamp Kiln is run from the United States, and your information is stored and processed there. If you use it from elsewhere, your information is transferred to the United States.
Security
We use encrypted connections everywhere, scrambled passwords, and access checks on every request so one account can never see another's data. No system is perfectly secure; if a breach affects you, we will tell you promptly.
Children
Stamp Kiln is for adults and businesses. It isn't meant for anyone under 18, and we don't knowingly collect their information.
Changes to this policy
If we change this policy in a significant way, we'll email account owners or show a notice in the app before it takes effect. The date at the top shows when it last changed.
Contact
Privacy questions or requests: support@stampkiln.com. See also our Terms of Service.