Privacy policy

Who we are

StoMTO is operated by Phil Stone (trading as StoMTO / philstone tools). The data controller is Phil Stone, 2 Hazelgrove Avenue, Craigavon, BT66 7TF, Northern Ireland. Contact: pks@philstone.co.uk or stomto.co.uk/contact.

What we collect

• Account details you provide (email, name, password hash — we do not store plain-text passwords).
• Billing data processed by Stripe (customer and subscription identifiers). Card numbers are handled by Stripe, not stored on StoMTO servers.
• Organisation settings you save (company name, logo, Hub connection fields, template packs).
• Optional project metadata and share packs you choose to create on the service. Plan drawings and takeoff files are intended to stay in a folder you control unless you explicitly upload or share them.
• Support messages sent via the contact form, and technical logs needed to run and secure the service.

Why we use it

To provide the StoMTO desk and account features, process subscriptions, send transactional email (verify, reset, invites), respond to support requests, prevent abuse, and improve reliability. We do not sell your personal data.

Processors

We use trusted processors such as hosting (AWS Amplify), database (Neon), payments (Stripe), email (Amazon SES), and visit counts (Cloudflare Web Analytics). Where we send data to a merchant Hub you connect (for example a product feed or quote push), that Hub is under your or your merchant's control.

Retention and your rights

We keep account and billing records while your account is active and for a reasonable period afterwards for legal and accounting needs. You may request access, correction, or deletion of your account data via the contact form. UK GDPR / UK data-protection rights apply where relevant.

Cookies and analytics

We use an essential session cookie to keep you signed in. Stripe (card payments and the billing portal) and Cloudflare Turnstile (bot checks on sign-up, sign-in, password reset, and the contact form) may set their own essential cookies.

This site uses Cloudflare Web Analytics to count visits. It does not use cookies, does not collect personal data, and records aggregate page views only. Because no cookies or tracking identifiers are used, no cookie banner is needed.