Privacy policy

Suita (suita.store) is operated by Aurora Trading LLC ("Suita", "we"). This policy explains what personal data we collect when you shop on Suita, including through an AI assistant such as ChatGPT, or when you run a store on Suita; why we use it; who receives it; how long we keep it; and the choices you have. Questions: contact@suita.store.

What we collect

Order details: your email address, name, shipping address, the items you buy, prices, and order and delivery status.
Payment: payments are processed by Stripe on a secure payment page. We receive the payment result and the last details Stripe shares with merchants (for example the payment status); we never receive or store your full card number.
Cookies and session data: a cart cookie (30 days) that keeps your bag, a random session identifier (up to 1 year) used to keep your cart and count anonymous page and product views, and a sign-in cookie if you have an account. We do not use advertising cookies or sell data to advertisers.
Technical data: your IP address is used briefly to limit abuse (for example too many sign-in attempts or orders); these rate-limit records are deleted after about a day. Our hosting provider also keeps standard security logs.
Accounts: if you create an account or a store, your name, email, password (stored only as a secure hash), business details you provide, and your store content.
Messages: what you send us when you contact support or report a listing.

Shopping through an AI assistant

When you shop with an assistant such as ChatGPT connected to Suita, the assistant sends us only what is needed to search and price products and create your order: search terms, product and size choices, quantities and the destination country. We do not receive your conversation. You enter your email and shipping address and pay on our secure payment page, not in the chat. The assistant provider handles your conversation under its own privacy policy.

How we use it

To process, ship and support your order, send order and shipping emails, and handle returns and refunds.
To prevent fraud and abuse and keep the service secure.
To run and improve Suita (for example aggregate sales and traffic statistics for store owners).
To send marketing emails only if you opted in; every such email has an unsubscribe link.
To meet legal, tax and accounting obligations.

Who receives it

The store you buy from receives your order details so it can fulfil the order. Stores marked "Suita brand" are operated by Aurora Trading LLC; other stores are independent merchants responsible for their own handling of your data.
Service providers acting on our instructions: Stripe (payments), Cloudflare (hosting, content delivery and storage), Neon (database hosting), Resend (email delivery), OpenAI (AI features that help store owners write and organise product content; we do not send shoppers' payment details), and shipping carriers that deliver your parcel.
Authorities when the law requires it.

We do not sell your personal data.

How long we keep it

Order and payment records: as long as tax and accounting law requires (generally up to 7 years).
Account and store data: while the account is open, then deleted or anonymised unless we must keep it by law.
Unpaid orders keep their details so the payment link keeps working, and are kept with your order history.
Rate-limit records: about one day. Cookies: as listed above.

Your choices and rights

You can ask us to access, correct, export or delete your personal data, or object to or restrict its use, by emailing contact@suita.store. We will respond within the time the law requires. You can unsubscribe from marketing at any time. Depending on where you live (for example the EU, UK or California), you may also complain to your local data protection authority.

International transfers and security

We and our providers process data in the United States and other countries. We use encryption in transit, access controls and providers with recognised security programmes, and transfer data under appropriate safeguards where required.

Children

Suita is not directed to children under 13, and we do not knowingly collect their data.

Changes

We will post any changes here and update the date above.