Account and billing privacy.

Controller and current scope

Alexander Belik, operating as Abelik1, Ireland, controls Saiph account administration. This portal is restricted to its configured owner. Public registration and paid Hosted are closed. The working public contact and provider retention/transfer details still need confirmation before public onboarding. See contact status.

Auth0 and essential cookies

Auth0 (Okta) handles sign-in and receives identity/login information, network/device metadata and authentication events. Enabled identity connections, tenant region and log retention must be confirmed. The portal requests the openid, profile and email sign-in scopes, but saves only the authenticated subject in its session user profile to check its owner.

The secure, HTTP-only, host-only, SameSite Lax session cookie is transient, non-rolling and limited to one hour. Sign-in also uses temporary transaction cookies. Auth0 maintains a separate session on its domain. Local sign-out does not erase provider records. Essential authentication is separate from advertising or marketing consent.

Stripe sandbox and billing records

Billing handlers accept test-mode Stripe resources only and are disabled unless configured for owner testing. Enter only Stripe test payment details. Stripe Checkout and its billing portal receive payment/billing details directly; this application does not store full card numbers or security codes.

The billing database stores the Auth0 subject, Stripe account/customer/subscription/price identifiers, status and billing/cancellation dates, creation/observation times, and minimal event receipts for replay protection. Stripe metadata contains a derived account reference, which remains linked personal data. The billing schema does not store full webhook payloads. Login/payment does not approve devices or grant content keys.

Purposes, bases and recipients

The proposed bases are requested account/service and billing administration (contract), required financial records (legal obligations), and necessary security, fraud prevention and reconciliation (assessed legitimate interests). These purposes and assessments must be finalized before public use. Account/billing data is not automatically enrolled in launch emails.

Auth0 supplies identity services, Vercel hosts the portal, Neon supplies the billing database and Stripe processes billing/payments. Stripe acts as processor for some merchant-directed activities and as independent controller for its own purposes. Authorized administrators, necessary advisers and legally entitled authorities may receive relevant records. Actual regions, subprocessors, contracts and international-transfer safeguards must be verified; an EU region alone is not an EU-only processing guarantee.

Retention and deletion

No self-service account deletion or automatic billing purge is implemented. The current database protects customer mappings against deletion; a reviewed maintenance process is required before public use. Deleting an Auth0 user does not automatically remove local, Stripe, support or backup records.

Proposed targets, pending approval and tested procedures: account/profile data within 30 days after closure, security logs after 30 days and resolved routine correspondence after 12 months. Required Irish business tax records generally need six years; the precise records and retention trigger require confirmation. Provider backup windows, event-replay retention and any narrowly scoped legal holds remain to be settled. Cancellation, refund and erasure are distinct operations.

Your choices and rights

Where applicable, request access, correction, erasure, restriction or portability, object to legitimate-interests processing or withdraw optional consent. Requests normally require a response within one month; a lawful extension must be explained within that month. Use the verified controller contact once published. You may complain to the Irish Data Protection Commission or your local supervisory authority.

No analytics or advertising is included in this portal. It does not receive clipboard, message or file content. Hosted content, metadata, retention and security require a separate verified production description; this draft does not claim production readiness.

Provider information: Auth0, Vercel, Neon and Stripe. Read the full account/privacy preparation notice and website notice.