Seedia Lab Privacy Policy

The data controller responsible for personal information processed through the Service is Seedia Lab.

Depending on how you use the Service, we may collect:

• Account information, such as your email address, username, login credentials, and profile details if you create an account.
• Billing and subscription information, such as plan type, transaction identifiers, billing status, and limited payment-related metadata. Full payment card details are processed by Stripe and are not stored by Seedia Lab.
• Content and interaction information, such as prompts you save, download history, favorites, collections, comments, feedback, support requests, and other information you choose to submit.
• Communications, such as messages you send to customer support, survey responses, and email preferences.

When you visit or use the Service, we and our service providers may automatically collect:

• Device and browser information, such as IP address, device type, browser type, operating system, language settings, time zone, and general location derived from IP address.
• Usage data, such as pages viewed, links clicked, search queries, referring URLs, session duration, downloads, and interactions with prompts or image listings.
• Cookies and similar technologies, including identifiers used to keep you signed in, remember preferences, measure performance, detect abuse, and understand how the Service is used.

We use personal information for the following purposes:

• To provide, operate, maintain, and improve the Service.
• To allow users to browse, access, download, save, and manage images and prompts.
• To create and manage accounts, authenticate users, and provide customer support.
• To process payments, subscriptions, renewals, invoices, refunds, and billing support through Stripe.
• To analyze website performance, usage trends, and product effectiveness.
• To send service-related communications, such as account notices, security alerts, policy updates, and support replies.
• To send optional marketing communications where permitted by law and subject to your preferences.
• To prevent fraud, abuse, security incidents, scraping, spam, unauthorized access, and violations of our terms.
• To comply with legal obligations and enforce our agreements.

Where privacy laws such as the EU General Data Protection Regulation (GDPR) or UK GDPR apply, we rely on one or more of the following legal bases:

• Performance of a contract: to provide the Service, manage your account, provide downloads, process subscriptions, and respond to support requests.
• Legitimate interests: to secure and improve the Service, prevent misuse, analyze non-sensitive usage patterns, and communicate about service-related matters, provided those interests are not overridden by your rights and freedoms.
• Consent: for optional cookies, analytics, marketing emails, or other activities where consent is required by law. You may withdraw consent at any time.
• Legal obligation: to comply with tax, accounting, consumer protection, data protection, law enforcement, or other legal requirements.

We use cookies and similar technologies to operate the Service, remember preferences, understand performance, and analyze usage. Some cookies are necessary for the Service to work. Others, such as analytics cookies, may be optional depending on your location and applicable law.

You can usually control cookies through your browser settings. Disabling some cookies may affect Service functionality.

We use Google Analytics to help understand how visitors use the Service. Google Analytics may collect information such as IP address, device identifiers, browser information, pages visited, and interactions with the Service. Where required, we will provide a cookie consent mechanism that allows users to accept or reject non-essential cookies.

We do not sell personal information. We may share personal information with the following categories of recipients:

• Service providers, including Stripe for payment processing, AWS for hosting, storage, and infrastructure, and Google Analytics for analytics.
• Professional advisors, such as lawyers, accountants, auditors, insurers, and other advisors where necessary for business operations.
• Legal and safety recipients, such as courts, regulators, law enforcement, or other parties when required by law or when we believe disclosure is necessary to protect rights, safety, security, or the integrity of the Service.
• Business transaction recipients, such as a buyer, successor, or affiliate in connection with a merger, acquisition, financing, reorganization, or sale of assets.

Our current key third-party service providers include:

• Stripe: payment processing, subscriptions, invoicing, fraud prevention, and billing support.
• Amazon Web Services (AWS): website hosting, storage, infrastructure, security, backups, and related operational services.
• Google Analytics: website analytics, performance measurement, and usage insights.

These providers may process personal information on our behalf or, in some cases, as independent controllers depending on the context and their own terms. We seek to use appropriate contractual, technical, and organizational safeguards with service providers that process personal information for us.

The Service may make images, prompt text, tags, descriptions, creator names, or related metadata available for browsing or download. Please do not upload or submit content that contains personal information unless you have the right to do so and understand that it may become available to others, depending on the feature used.

If you believe content on the Service includes your personal information or infringes your rights, contact us at support@seedialab.com.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods may depend on the type of data, the nature of your relationship with us, legal obligations, security needs, and whether the data is needed to resolve disputes or enforce agreements.

Typical retention practices include:

• Account information is generally retained while your account remains active and for a reasonable period afterward for backup, legal, fraud-prevention, and dispute-resolution purposes.
• Billing and transaction records may be retained as required for tax, accounting, legal, and compliance obligations.
• Support communications may be retained to provide ongoing assistance, improve support quality, and maintain business records.
• Analytics data may be retained in aggregated or pseudonymized form where feasible.

Seedia Lab and its service providers may process personal information in countries other than the country where you live, including the United States or other jurisdictions that may not provide the same level of data protection as your home jurisdiction.

Where required by applicable law, we rely on appropriate safeguards for international transfers, such as standard contractual clauses, data processing agreements, adequacy decisions, or other lawful transfer mechanisms.

We use reasonable technical, administrative, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include access controls, encryption in transit where appropriate, monitoring, backups, and security reviews.

No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any suspected unauthorized use of your account.

Depending on your location and applicable law, you may have rights to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information.
• Request restriction of processing.
• Object to processing based on legitimate interests or direct marketing.
• Request portability of personal information that you provided to us.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority or other regulator.

To exercise your rights, contact us at support@seedialab.com. We may need to verify your identity before responding. We will respond within the time required by applicable law.