Privacy policy

Effective 13 November 2026.

Stitch PM is a desktop app. This page explains what stays on your computer, what the app sends and to whom, and what we, the makers of Stitch PM, can see.

Your data stays on your computer

Your projects, the data synced from your tools, the app's findings and your settings are stored in a database on your computer. Your AI keys and sign-in tokens are kept in your computer's keychain. We don't run servers that store your project data, and you don't need an account with us.

Who the app talks to

• The tools you connect (GitHub, Jira, Confluence, Slack, Google Calendar, and later Outlook and Teams). The app talks to them directly with your own sign-in and reads only what you choose to add to a project. It never posts, comments or changes anything in them until you approve the exact draft.
• The AI provider you choose (OpenAI, Anthropic, GitHub Copilot, or a local model on your computer). To answer you, the app sends that provider the project content it needs, under that provider's own terms. A local model keeps everything on your computer.
• Our sign-in helper, for Atlassian and Slack only, hosted on Cloudflare. It exchanges a one-time sign-in code for your tokens and passes them straight back to the app. It stores nothing.
• Extra tools you add yourself (MCP servers), only when you turn them on. You choose, tool by tool, whether the assistant must ask you each time or may use it freely; a new tool always asks first.

What we receive, only if you say yes

When you set up the app, it asks once whether to send usage and error reports. The box is not ticked for you, and you can change your answer at any time in Settings; turning it off stops sending immediately and deletes anything not yet sent. If you say yes, the app sends:

• usage events: the app opening, setup steps reached, a tool connected or disconnected, pages and widgets opened or changed, chat edits kept or undone, drafts approved or rejected, notes imported, notifications shown or clicked, extra tools added or used, and which of the app's features you use;
• error events: a failed connection (which tool, which kind of request, the error code and how many retries), a failed or rate-limited background job, an AI provider error or timeout, an AI answer the app discarded as invalid, and crashes with the position in the app's own code where they happened (never a file path or user name from your computer);
• speed and usage measures: how long the app took to start and to switch pages, how long jobs and the first project read took, and how long the AI took to answer and how many tokens it used.

Every detail in a report comes from a fixed list (for example the type of error or the name of a feature), so a report can't contain your content. Each report carries the app version, your operating system, the type of AI provider you use and an anonymous install id. Any ids are scrambled (hashed) on your computer first. Reports go to PostHog, the analytics service we use; like any web service, it sees the network (IP) address a report comes from.

What we never receive

Whether you say yes or not, the app never sends us the text of your tickets, pull requests, messages, meetings or files; titles; names or email addresses; file paths; repository or channel names; what you ask the AI or what it answers; or any token, password or key.

Diagnostics you send yourself

If something goes wrong, you can press "Send diagnostics". The app builds a report from recent log lines and the app's state with secrets and content removed, and shows it to you before anything is sent. Reports are stored on Cloudflare for 90 days, then deleted, and you get a reference number to quote.

Downloads and this website

We count downloads from the download host (GitHub's download counts for each release), which carry no personal data. This website is hosted on Cloudflare and has no analytics, no cookies and no third-party scripts.

Google user data

If you connect Google Calendar, Stitch PM can read your list of calendars and the events on calendars you own; it uses only the meeting series you pick. It can't change your calendar. Events are stored on your computer and used only to prepare your meetings and track follow-ups. To prepare a meeting, the app sends the details it needs (such as the title, time, attendees and description) to the AI provider you chose, as described above; nothing from your calendar is sent to us. Stitch PM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing your data

Delete the app and its data folder to remove everything it stored, and remove the app's access in each tool's settings if you like. To stop reports, turn them off in Settings.

Changes to this policy

If this policy changes, we'll update this page and its effective date.