Privacy policy

Who we are

StoMTO is operated by Phil Stone (trading as StoMTO / philstone tools), United Kingdom / Northern Ireland. Contact: stomto.co.uk/contact or the email shown on that form.

What we collect

• Account details you provide (email, name, password hash — we do not store plain-text passwords).
• Billing data processed by Stripe (customer and subscription identifiers). Card numbers are handled by Stripe, not stored on StoMTO servers.
• Organisation settings you save (company name, logo, Hub connection fields, template packs).
• Optional project metadata and share packs you choose to create on the service. Plan drawings and takeoff files are intended to stay in a folder you control unless you explicitly upload or share them.
• Support messages sent via the contact form, and technical logs needed to run and secure the service.

Why we use it

To provide the StoMTO desk and account features, process subscriptions, send transactional email (verify, reset, invites), respond to support requests, prevent abuse, and improve reliability. We do not sell your personal data.

Processors

We use trusted processors such as hosting (AWS Amplify), database (Neon), payments (Stripe), and email (Amazon SES). Where we send data to a merchant Hub you connect (for example a product feed or quote push), that Hub is under your or your merchant's control.

Retention and your rights

We keep account and billing records while your account is active and for a reasonable period afterwards for legal and accounting needs. You may request access, correction, or deletion of your account data via the contact form. UK GDPR / UK data-protection rights apply where relevant.

Cookies

We use an essential session cookie to keep you signed in. We do not run third-party advertising trackers on the marketing site today.