Last updated · 6 September 2026
Privacy notice.
This is an interim notice for the invitation-only preview, not a claim that public-launch or formal GDPR disclosures are complete. It explains what is active today and what remains disabled.
You can explore Salenna today. Accounts, artwork generation, ordering and payment are not open yet. Generation, rendering, printing, quotes and checkout are each switched on separately. Checking availability never places an order, takes a payment or sends content to a provider. Nothing you do on this site is sent to an AI, print or payment provider.
Who we are and where this notice applies
Salenna is the service name for this invitation-only preview. The legal operator/controller name and postal address are not published yet; they will appear here before new public personal-data collection is enabled. Public contact intake, optional analytics, paid checkout and external providers remain disabled, and the public browser app's account, authentication, upload and project-data connection is disabled. Invited or operator testing may occur only in a separately controlled environment; it does not make public processing available. This notice applies across salenna.com, salenna.design, salenna.studio and related Salenna website, app, invitation and demo surfaces. Questions about this notice go to hello@salenna.com.
What we may collect at pre-launch
The public browser app does not currently connect to account, authentication, upload or project-data services. In a separately controlled invited or operator test environment, data may include a name, email address and authentication identifiers; room, project, measurement, preference, saved-item and artwork data; room photographs, structured scans and measured room data; chosen reference images or a signature; and limited technical or security logs. Product-link interactions may also provide limited data. Paid checkout, payment processing, production image or render providers, print fulfilment, optional analytics and marketing tools are inactive. We do not currently collect payment-card details or send content to those inactive providers.
Required and optional data
The public browser app does not request account, upload or project data. In a separately controlled test, you will be told when information is required to secure the environment or provide a feature you asked to test. Project details, uploads and design choices are optional unless clearly marked otherwise. Please do not include personal data that is not needed.
Purposes and lawful bases
The public browser connection for account and project processing is disabled. A separately controlled invited or operator environment may process limited test data to provide a requested feature, protect and debug that environment, answer a privacy request and meet legal obligations. The legal operator must confirm and publish the applicable lawful bases before new public collection is enabled. Optional analytics or marketing would require separate valid consent; neither is active today.
Recipients and processors
The technical foundation can use Supabase for database, authentication and storage, but its public browser connection is disabled. In a separately controlled test environment, personal data is available only to people who need it to operate or secure that test and to active processors acting on the operator's instructions. Limited data may also be disclosed to professional advisers or public authorities where reasonably necessary or legally required. Room or artwork content may be sent to an AI, render, print or fulfilment processor only when the feature is explicitly enabled and you request it. No public provider processing is active today, and enabling one feature does not authorise another provider or purpose. If you follow a retailer link, your browser connects to that retailer and its own terms and privacy notice apply; private room or project contents are not sent to retailers.
International transfers
A separately controlled test environment may use technical infrastructure that involves processing outside the operator's country or the European Economic Area; the public browser data connection remains disabled. The legal operator must confirm actual locations and publish the applicable international transfers and safeguards before public launch. Depending on the transfer, a safeguard may include an adequacy decision or the European Commission Standard Contractual Clauses, with additional measures where appropriate. Actual locations and safeguards have not yet been confirmed for this public notice.
How long we keep data
Contact intake is currently disabled. If it is enabled later, its published, configured retention period will apply from submission. Current invitation-only account and project data are held while the account and invitation-only preview are active. Deletion and backup timing will be confirmed before public launch; this interim notice makes no fixed timing promise. Requests about retention and deletion are handled subject to the current test environment, legal obligations and backup limitations; deletion from active systems may not remove a lawful backup immediately. Security logs are held only for as long as needed for security or legal purposes, with data minimisation. Financial records will exist only if payments are enabled later; if that happens, they will be kept only for as long as legally required.
Art source photographs
Where photo transformation is enabled, Salenna asks you to confirm your rights and the upload notice before any source is stored. JPEG, PNG and WebP sources are decoded within strict size limits, metadata is removed and a sanitized JPEG copy is stored privately. HEIC is not accepted. The sanitized source is sent to the configured AI provider only when the transform capability is available and you explicitly request a transform. Do not upload photographs containing people or private documents. The private source expires after no more than 30 days and can be removed sooner with Delete now. Deleting the source does not automatically delete artwork already created; the versioned consent audit remains as evidence of the earlier instruction.
Cookies and browser storage
Salenna uses strictly necessary storage only by default. This currently includes a sidebar preference cookie and local browser storage for preferences and local app continuity. The public Supabase browser connection is disabled, so public account, authentication, upload and Supabase-backed project persistence do not run. A separately controlled test environment may use Supabase storage only under its own access controls. There is no consent banner today because optional storage is not running. Optional analytics and marketing storage are disabled and will remain off unless separately enabled after valid consent. Any future consent request will be freely given, specific, informed and unambiguous, will not be pre-ticked, and will make it as easy to withdraw consent as to give it.
Security
We use proportionate technical and organisational measures designed to protect personal data, including access controls, restricted server-only provider credentials and private storage for sensitive project material. Owned room and artwork media are exposed to the browser only through short-lived signed links when an authorised preview is requested; durable records use owned identifiers rather than public media URLs. No online service can promise absolute security. Please use a strong password and use the contact channel provided by your test organiser if you believe test data may be at risk.
Your rights and consent choices
Depending on the law and circumstances, you may ask for access, correction, deletion, restriction or portability of your data, or object to processing based on legitimate interests. You can withdraw consent at any time without affecting earlier lawful processing. Optional tracking is not active today; if it is introduced, the consent request will provide an equally easy withdrawal control. To make a request, email hello@salenna.com. You may raise a concern with the relevant data protection authority. For people in Ireland, information is available from the Data Protection Commission. We may need to verify your identity before acting on a rights request.
No sale or significant automated decisions
We do not sell personal data. Salenna does not currently make decisions based solely on automated processing that produce legal or similarly significant effects. Future AI-assisted renders or recommendations will be creative aids, not significant automated decisions about you.
Children
Salenna is for people aged 16 and over. We do not knowingly offer accounts to, or collect personal data from, children under 16. Contact us if you believe a child has provided data.
Changes to this notice
We may update this notice as the pre-launch service changes. We will post the new date here and give an additional notice where a change materially affects how we use personal data. Earlier versions are available on request from hello@salenna.com.
Email hello@salenna.com