Privacy

Updated 20 September 2026. This notice describes the use of personal data on the Ninaky website and in the business relationship.

Controller and contact

Ruben Bento, trading as Ninaky, is responsible for the processing described in this notice. Address: Route de Mézières 23, 1673 Ecublens FR, Switzerland. For questions or requests about your data, contact info@ninaky.com.

Contact and quote requests

The form collects your name, email address, business activity, message and, if provided, telephone number. Your selected plan and payment option accompany the request. This information is used to understand your needs, reply and prepare a quote. Submitting the form does not commit you to placing an order.

Your request passes through the Base44 server and then Resend for delivery to Ninaky's inbox, info@ninaky.com. The form does not save your message in your browser's local storage, and its handler does not create a request record in an application database. The received message, delivery information and any provider logs follow the rules described below.

You can also email info@ninaky.com directly. Limit your message to information needed for your project; do not include passwords, secret keys, unnecessary sensitive information or a full payment card number.

Projects, billing and payment

Once a project is agreed, contact details, correspondence, content and necessary documents are used to deliver the service, obtain your approvals and provide follow-up. Billing details, amounts, invoices and payment confirmations are used to manage payments and accounting.

Payment takes place through Stripe after the quote is accepted. Payment information is entered in Stripe's payment flow and processed, in particular, to complete the transaction and prevent fraud. Ninaky does not request it in the contact form. Stripe's role depends on the operation, as explained in its privacy policy.

Website operation and preferences

Base44 provides website hosting and server functions. Connections may generate technical data, such as IP addresses, browser information, requested pages and logs needed for operation, security and diagnostics. The platform's native functions may also produce usage statistics. After you accept cookies, Ninaky also uses Base44 to measure pricing views, plan and payment choices, form starts and confirmed submissions, error categories and clicks on the contact email or client project. These events do not contain your contact details or message content.

Your choice of light or dark theme is stored in your browser's local storage until it is replaced or deleted. You can change it on the website or clear website data in your browser settings. The language follows the page you visit; the website uses no additional persistent storage for the language choice or introduction screen. The selected plan may appear in the page address to prepare the form.

Google Analytics and Google Ads conversion measurement are integrated through Google Tag Manager. These services remain disabled until you choose "Accept cookies". Once accepted, they measure page views, scrolls, outbound clicks and the confirmed submission of an enquiry. The conversion event does not include the name, email address, telephone number or message. No Meta pixel, remarketing or personalised advertising is active in this version. Your choice is stored in the browser's local storage and can be changed through "Manage cookies" in the footer. Base44's native session recording feature remains disabled.

Google Ireland Limited provides Google Analytics, Google Tag Manager and Google Ads conversion measurement. After consent, Google may process online identifiers, technical connection data, including transient processing of the IP address, and usage or conversion events. As of 20 September 2026, the Ninaky property retains event data associated with identifiers for two months and user data for fourteen months; standard aggregated reports may remain available for longer. Google's privacy policy and transfer information describe its processing and safeguards, including outside Switzerland.

Providers and processing locations

Infomaniak Network SA manages the domain. Its privacy policy describes its practices.

Base44 processes data needed for the website's functions. Its documentation describes default hosting in the United States; its subprocessor list includes providers in the United States and Wix in Israel. Its processing terms provide for transfer mechanisms applicable to each operation, including adequacy decisions or standard contractual clauses with the necessary Swiss-law adaptations.

Resend processes email content and metadata for delivery. Resend states that it stores this data in the United States, including when a European sending region is selected. Its data processing agreement provides for standard contractual clauses adapted for transfers from Switzerland. Its providers appear in its subprocessor list.

For payments, Stripe uses entities and providers corresponding to the service involved. Its privacy centre identifies entities in Ireland and the United Kingdom for Switzerland. Stripe also mentions processing in the United States and India. Its privacy policy describes transfers and safeguards, including standard contractual clauses and applicable data protection frameworks.

The stages of a form submission or payment can therefore involve processing outside Switzerland. Providers may use their own subprocessors under their processing terms.

Creative tools and artificial intelligence

Ninaky uses BYQ Supply, Higgsfield and ChatGPT to prepare visuals, text and code. Displaying a finished visual on the website does not, by itself, send visitor data to those tools. Prompts submitted to BYQ Supply exclude personal data, confidential client information and credentials. Where other tools need to process personal data for a project, the relevant content and uses are specified for that project, in accordance with the provider's terms.

Retention and use of content depend on the service and plan used. According to its documentation, Base44 automatically excludes Enterprise workspace data from model training; data from other plans may be used for that purpose. The policies of BYQ Supply, Higgsfield and OpenAI describe their own practices.

Retention

Business enquiries that do not proceed are deleted after twelve months without further correspondence. Data needed for a project is retained during its delivery. At the end of the contract, an announced thirty-day period allows you to retrieve files due for handover, after which unnecessary operational copies are deleted.

Accounting books and supporting records are kept for ten years from the end of the financial year concerned. Archives required for a legal obligation or dispute are kept separately for as long as that need continues. This does not mean every email or working file is kept for ten years.

Provider logs and backups follow their own retention and deletion cycles. Deleting an operational copy held by Ninaky does not mean that all backups are deleted simultaneously. You can request information about retention of your data at info@ninaky.com.

For its sending service, Resend states that emails and logs are retained for thirty days on Free, Pro and Scale, with specific terms for Enterprise. Backups persist for seven days and remaining customer data is deleted within ninety days after account termination under its retention terms. These periods do not determine how long messages already delivered to Ninaky's inbox are retained.

Your rights

You may request access to your data and, subject to applicable law, its correction, deletion, handover or transfer. You may object or withdraw consent where those mechanisms apply. A legal retention obligation may limit immediate deletion.

Send your request to info@ninaky.com. Proportionate identity verification may be necessary to protect your data. Access requests generally receive a free response within thirty days, subject to statutory exceptions. You may also contact the Federal Data Protection and Information Commissioner.

Data processed for a client

This notice concerns Ninaky. For a website created for your business, roles are defined according to the processing involved. Where Ninaky acts on your behalf, a project annex sets out instructions, data, affected individuals, providers, protective measures, incidents and handover arrangements. It does not replace the information your business must provide to its own visitors or customers.

Changes to this notice

This notice is updated when purposes, recipients or processing methods change. The update date appears at the top of the page. Updating the notice does not, by itself, authorise a new use incompatible with commitments already made.