Sainai
Privacy policy
This policy explains the actual processing performed by the Swiss Sainai shop under the Swiss Federal Act on Data Protection (FADP).
Controller
Mark Rudenok · Sainai · Hübelistrasse 10 · 3612 Steffisburg · Switzerland · support@sainai.ch · +41 76 615 20 58
Data and purposes
Guest checkout uses name, email, shipping address, optional telephone number and order note, plus cart, order, price, payment-status, delivery and support data. There are no customer accounts or newsletter programme. Processing supports ordering, payment, delivery, support, transactional communication, security and technical operation.
Payment and email
Stripe processes payment data; full card numbers and CVC do not reach Sainai servers. Resend processes the recipient address and necessary transactional email content. We do not send newsletter marketing.
Hosting, database and files
Vercel provides hosting and server runtime, Neon the PostgreSQL database, and Cloudflare infrastructure and R2 object storage. These providers process technical connection, order or file data only as needed to provide their services.
Private Custom Photo images
Originals and previews are kept in a private Cloudflare R2 bucket without public object URLs. Server-side ownership and permission checks allow access only for production, fulfilment and necessary order support. Advertising, social media, portfolio, public display or unrelated marketing requires separate explicit permission.
Retention
Order and accounting data are kept for contractual, evidentiary and legal requirements. Unordered photo drafts normally expire after 24 hours. For fulfilled orders, the private source image becomes due for deletion 30 days after the order is marked Completed; protected cleanup removes the original, preview and private recovery record.
Analytics
Optional first-party analytics starts only after consent. It stores a random pseudonymous session, language, currency, broad device class, infrastructure country code and shop events. The application does not retain raw IP addresses for analytics, fingerprint visitors or load advertising/cross-site trackers.
Recipients and international processing
Data may be disclosed to Stripe, Resend, Vercel, Neon, Cloudflare and Swiss Post. Technology providers may process data outside Switzerland. We limit transfers to what is necessary and rely on applicable contractual and legal safeguards.
Security and rights
We use encrypted connections, private storage, server-side access controls, hashed session credentials and restricted administration. Under applicable Swiss law you may request access, correction, deletion or restriction and object where the requirements are met. Contact support@sainai.ch. Legal retention duties remain reserved.