Privacy Policy
Feng Feng is responsible for the personal data described in this policy.
Data we process
We process uploaded photos, generated previews and pattern files, email addresses, order and payment references, upload-consent records, support messages, and basic technical logs needed to operate and secure the service.
Why and legal basis
Photos, previews, email addresses, and order data are processed to provide the requested preview, fulfil the purchase, deliver files, and support the order (performance of a contract or steps requested before a contract). Security and fraud-prevention logs are processed for our legitimate interests. Records required by tax or accounting law are kept to meet legal obligations.
Photo use and AI training
Original uploaded photos are processed temporarily to create the requested craft preview and pattern and are not retained in the order record. We do not use customer photos to train AI models, for advertising, or in a public gallery unless separate, explicit permission is given.
Service providers
Hosting providers process application files and logs; Stripe processes checkout and payment data; and the configured email provider delivers order messages. Each provider receives only the data needed for its service and acts under its own terms or a data-processing arrangement.
Retention
Original uploaded photos are discarded after temporary processing and are not retained with draft or paid orders. Generated pattern data is held temporarily during checkout. If payment is cancelled, fails, or expires, it is deleted; a fallback cleanup removes abandoned unpaid data within 2 hours. Generated previews, pattern data, and download files for paid orders are scheduled for deletion after 30 days. Essential transaction and accounting records may be retained for the period required by Norwegian law. Support correspondence is normally deleted within 24 months after the matter is closed.
International transfers
A provider may process data outside Norway or the EEA. Where this occurs, the transfer must use an adequacy decision or approved safeguards such as the EU standard contractual clauses.
Your rights
You may request access, correction, deletion, restriction, portability, or object to certain processing by emailing hello@enoki.no. You may also complain to the Norwegian Data Protection Authority (Datatilsynet). Some records cannot be deleted immediately where law requires retention.
Security and automated decisions
We use access controls, signed payment webhooks, secret download links, and limited retention to reduce risk. The service does not make decisions that produce legal or similarly significant effects about customers.
Contact
Feng Feng, Sophus Bugges Gate 12, 4041 Stavanger, Norway. Email: hello@enoki.no.