Privacy Policy

Draft for lawyer review before launch. This page is a plain-English working draft, not final legal text. Bracketed items are placeholders.

Effective date: [Effective date]. Operated by [Entity name], [Registered address].

On this page
  1. 1. Who we are
  2. 2. What we collect
  3. 3. How we use it
  4. 4. AI processing
  5. 5. Who we share it with
  6. 6. How long we keep it
  7. 7. Your rights
  8. 8. Cookies
  9. 9. International transfers
  10. 10. Security
  11. 11. Children
  12. 12. Changes

This policy explains what personal data Seedcite handles and the choices you have. It is written in plain English.

1. Who we are

[Entity name], [Registered address], is the controller of personal data described here. Contact: hello@seedcite.com.

2. What we collect

  • Account data: name, email, password hash, plan.
  • Billing data: handled by Stripe. We receive a customer ID, plan, and card brand and last four digits, not the full card number.
  • Site and crawl data: public pages from the sites you add, the results of audits, your content drafts, and AI citation check results.
  • Connection data: access tokens for your CMS, stored encrypted.
  • Usage data: basic logs such as IP address, browser type and pages used, for security and debugging.

3. How we use it

To run the service, draft and publish content you approve, process payments, keep the service secure, answer support requests and improve the product. We do not sell personal data and we do not use your content to train our own models.

4. AI processing

To draft content and check citations, we send prompts that can include excerpts of your site content to our AI model providers, who act as our subprocessors. Output is AI-generated and must be approved by you before publishing.

5. Who we share it with

We share data only with companies that help us run Seedcite, including our AI model providers (used to draft articles), Stripe (payments) and our hosting provider. The current list is on the subprocessors page. We may also disclose data where the law requires it.

6. How long we keep it

  • Crawl data and audit results: 90 days, then deleted.
  • Account data: while your account is open, then deleted within a reasonable period after closure.
  • Billing records: kept as tax and accounting law requires.

You can ask us to delete your data earlier at any time by emailing hello@seedcite.com.

7. Your rights

EU and UK (GDPR): you can ask to access, correct, delete, restrict or export your data, object to processing, and complain to your data protection authority. Our legal bases are contract (running your account), legitimate interests (security and product improvement) and legal obligation (tax records).

California (CCPA/CPRA): you can ask to know, delete or correct your personal information, and opt out of sale or sharing. We do not sell or share personal information for cross-context advertising. We will not discriminate against you for using these rights.

To use any right, email hello@seedcite.com. We reply within 30 days.

8. Cookies

We use only cookies and similar storage needed to keep you signed in, remember preferences such as theme, and protect the service. Stripe may set cookies when you pay. We do not use advertising cookies. If we add analytics, we will update this page and ask for consent where the law requires it.

9. International transfers

Our providers may process data in the United States and elsewhere. Where required, we rely on safeguards such as standard contractual clauses.

10. Security

We use encryption in transit, encrypted storage of connection tokens, and access controls. No system is perfectly secure, and we will notify you of a breach as the law requires.

11. Children

Seedcite is for businesses and is not directed to anyone under 18.

12. Changes

We will update this page and tell you before material changes take effect. Questions: hello@seedcite.com.