Privacy policy

What this policy covers

This policy describes what SaigonSt collects when you use our website or our mobile app, why we collect it, who processes it for us, and what you can ask us to do about it. It is written to describe what the platform actually does, not what a template says a platform usually does.

SaigonSt is operated by SENPRINTS LLC, 1095 Sugarview Dr Ste 100, Sheridan, WY 82801-5386, United States. Privacy contact: [email protected].

What we collect

Your sign-in identity — an email address or a phone number. Signing in is a one-time code sent to one of the two. There is no password. Whichever you type becomes your account, and it is the only identity we hold for you.

Delivery details you enter at checkout — recipient name, phone number and postal address. The address form changes shape per country because addresses do; the categories do not.

Text you paste into the address box. The address box accepts a pasted message and extracts the address from it. When you use that, the whole pasted text is sent to our own server to be parsed — not to a third party — and only the address fields it finds are saved. If the message you paste contains more than an address, that extra text reaches our server too, so paste only what you are happy to send.

Your orders — what you bought, what you paid, the delivery address, the shipping and refund status. These are the records of a sale.

Payment details, which are collected by Stripe and never by us. Card entry happens inside Stripe's own payment sheet. Card numbers do not pass through our servers and we never store them. We keep the identifier of the payment, its amount and its status.

Product analytics. We record which screens and products are opened, and events such as adding to cart or placing an order. Each event carries: a randomly generated identifier that your device makes for itself the first time the app or site is used, a session identifier that rotates after thirty minutes of inactivity, and — while you are signed in — your account id. The random identifier is not derived from your device, your email or anything else about you; it is a random value, it is only ever used by us, and reinstalling the app replaces it. Because the account id sits on the same row, we treat analytics as data linked to you and do not claim it is anonymous.

An approximate country. Our content delivery network tells our server which country a request came from, and we store that country code on analytics rows. Neither the app nor the site asks for location permission and neither links a location library. We derive nothing finer than the country.

Reviews you write, including the rating, the text, any photos you attach and the height, weight and size you choose to show alongside them. Reviews are public once approved, so treat what you write as published.

Messages you send us through the feedback form — what you wrote, any screenshot you attach, and a reply address if you give one or are signed in.

Your measurements, if you enter them — height, weight and shoe size, saved to your profile so the size panel can make a recommendation. Optional, and yours to clear.

Marketing consent, if you give it — the fact that you said yes, when, and where you said it. Newsletter sign-ups also store the address you gave until you confirm or the invitation expires.

What we do not do

• We do not sell your personal data, and we do not share it for anyone else's advertising.
• There is no advertising identifier in the app: no IDFA, no Android advertising ID, no device identifier of any kind. There is no ad network in the app and no cross-app or cross-site tracking, which is why iOS never shows you a tracking permission prompt.
• We do not build profiles about you for third parties.
• We do not ask for your contacts, your camera roll beyond a photo you deliberately attach, your microphone or your precise location.

Who processes data for us

These companies handle data on our instruction, for the purposes below and nothing else:

• Stripe — card payments and refunds.
• Cloudflare — serving and protecting our traffic, and the country header described above.
• Expo — app updates and, once push notifications ship, delivering them.
• Our email and SMS senders — sending your sign-in code, order updates and any newsletter you asked for. Codes to phone numbers in mainland China are sent through a Chinese SMS provider, because that is what reaches them.
• Our own servers, which run our analytics and our error monitoring. Neither is a third-party analytics product.

How your data is protected

Everything travels over HTTPS; there is no plaintext fallback anywhere in our clients. On your device, the app stores its sign-in credential in the operating system's secure store (the iOS keychain or the Android keystore) and keeps only non-secret things — a cached feed, your last-used address, the random analytics identifier — in ordinary app storage. Signing out removes the credential.

How long we keep things

• Orders, payments, refunds and the delivery address on them are commercial and tax records. We keep them for as long as accounting and tax law requires us to, even after an account is deleted. We keep order, invoice and tax records for 7 years from the end of the tax year they belong to, in line with US federal record-keeping requirements.
• Addresses in your address book, your cart, your wishlist, your saved measurements and your sign-in credentials live only as long as your account does, and are deleted when you delete it.
• Analytics rows are kept for product analysis. We do not delete them on a fixed schedule; what deletion removes is the map that links your device's random identifier to your account, after which the remaining rows carry an account reference that no longer names anyone.
• Reviews stay published after an account is deleted, with no identity behind them.

Deleting your account

You can delete your account yourself, from the account screen on the website and from the app's profile screen. We ask for a fresh one-time code first, sent to your own email address or phone number, so that a stolen session cannot delete an account.

Deletion is immediate and there is no waiting period. When you confirm:

• your email address and phone number are replaced with a placeholder that identifies nobody, and your saved measurements and marketing consent are cleared;
• your saved addresses, your cart, your wishlist, your saved sign-in devices (passkeys), your newsletter subscription and the map linking your analytics identifier to you are deleted;
• every session is ended, on every device;
• your orders, payments, refunds and loyalty ledger are kept, because they are financial records, and the account they point at no longer names you;
• your reviews stay on the product pages with no author identity attached.

There is no way to undo it and nothing to recover. Signing in again with the same email address or phone number creates a brand-new, empty account — it does not bring the old one back.

Your other choices

• See or correct what we hold. Your orders, addresses, wishlist and profile are all visible and editable in the account screen.
• Stop marketing email. Every marketing email has an unsubscribe link, and it takes effect without you having to ask us. Order and sign-in messages are not marketing and continue for as long as you have an account.
• Ask us anything else — including a copy of your data — through the feedback form below.

Children

SaigonSt is not directed at children. We do not knowingly create accounts for anyone under 16; if you believe we have, tell us through the form below and we will remove it.

Contact

The feedback form in the account screen reaches us, signed in or not: Send us a message. It is the fastest route for a privacy question, a deletion problem or a data request. You can also email [email protected], or write to SENPRINTS LLC, 1095 Sugarview Dr Ste 100, Sheridan, WY 82801-5386, United States.

Changes

When this policy changes we update the date shown at the bottom of this page. If a change materially affects what we collect or why, we will say so in the app or on the site rather than relying on you noticing the date.