Kanna Studio

Privacy Policy

Effective October 25, 2026

This policy explains what information Kanna Studio collects, why, who it’s shared with and the choices you have. Knit & Knot Studio (“we”) makes and runs Kanna Studio. It applies alongside our Terms of Service.

  1. Whose information it is
  2. What we collect
  3. How we use it
  4. Cookies and local storage
  5. Who we share it with
  6. How long we keep it
  7. Security
  8. Your choices and rights
  9. Children
  10. Where it’s processed
  11. Changes to this policy
  12. Contact

1. Whose information it is

Workshops use Kanna Studio to run their business, and much of what’s in it is about their clients. For that information the workshop decides what’s collected and why; we hold and process it on the workshop’s behalf, only to run Kanna Studio for them. If you’re a client, the workshop you deal with is your first contact for questions about your information.

For the people who sign up and use the app — workshop owners and their teams — we are responsible for their account information.

2. What we collect

  • Accounts: your name, e-mail address, password (stored only as a secure hash by our sign-in provider) and the workshop you belong to.
  • A workshop’s business data: its clients’ names, e-mail addresses, phone numbers and addresses; projects, estimates, proposals, invoices, schedules, time records, notes, designs, photos and files.
  • What clients send: designs from a configurator or board designer, quote requests and their photos, and the e-mail address used to sign in to the client portal.
  • Payments: amounts, dates and status. Card and bank details go straight to Stripe — we never see or store full card or bank numbers.
  • Connected mailboxes: if a workshop connects its mailbox, the messages its agent searches and reads, and the drafts it saves. Kanna Studio never sends from it.
  • Technical information: error reports (what went wrong, on which page, and your browser type) so we can fix problems, and the routine request logs our hosting keeps, which include IP addresses.

3. How we use it

  • to run Kanna Studio: show your data, render your designs, send the e-mails you ask for (proposals, invoices, sign-in links, reminders) and take payments;
  • to keep it secure: sign-in, limiting abuse of public pages, and investigating problems;
  • to support you and to tell workshops about changes to the service;
  • to meet our legal obligations.

We don’t sell personal information, share it for advertising, or use it to build profiles of you. We don’t use workshops’ or clients’ data to train AI models.

4. Cookies and local storage

Kanna Studio uses cookies only to keep you signed in (to the app, the client portal, or a password-protected shared link) and to finish connecting a payment account. Your browser’s local storage keeps small preferences, such as whether the sidebar is open. There are no advertising or analytics trackers. Our text font is loaded from Google Fonts, so Google receives your IP address and browser type when a page loads.

5. Who we share it with

Only the service providers that run Kanna Studio for us, each under its own privacy and security commitments:

  • Supabase — database, sign-in and file storage;
  • Vercel — hosting;
  • Stripe — payments, and verifying the identity of workshops that take them;
  • Resend — delivering e-mail;
  • Google Fonts — the text font.

A workshop’s information is shared with the tools that workshop chooses to connect — an AI agent, a calendar — and with its own clients as the workshop decides (a proposal, an invoice). We may also disclose information when the law requires it, to protect people’s safety or our rights, or as part of a sale or merger of our business, which would stay bound by this policy.

6. How long we keep it

For as long as a workshop’s account is open, or as long as the workshop keeps it there. When a workshop closes its account we delete its data within a reasonable time, except records the law requires us to keep, such as payment records. Backups are overwritten on their normal cycle.

7. Security

Data is encrypted in transit, each workshop’s data is kept apart from every other’s, and the people on a team see only what their role allows. No system is perfectly secure; if a breach affects your information, we’ll tell you as the law requires.

8. Your choices and rights

You can see and correct most of your information in the app. You can ask us for a copy of your information, to correct it, or to delete it, by writing to hello@kanna.studio. Depending on where you live you may have further rights — California residents, for example, can ask what we hold and have it deleted or corrected, and we don’t sell or share personal information. We won’t treat you differently for asking.

If you’re a workshop’s client, ask the workshop first; we’ll help them answer you.

9. Children

Kanna Studio is for businesses and their customers. It isn’t meant for children under 13, and we don’t knowingly collect their information.

10. Where it’s processed

Our service providers may process information in the United States and other countries where they operate.

11. Changes to this policy

We’ll post any change here with its date, and tell workshops in the app or by e-mail before a significant change takes effect.

12. Contact

Questions or requests about privacy: Knit & Knot Studio, hello@kanna.studio.

© 2026 Knit & Knot Studio
Terms · Privacy