Privacy Policy

At Seizn ("we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI memory infrastructure platform and related services (collectively, the "Service").

By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Profile picture (if provided via OAuth)
• Authentication credentials (securely hashed passwords or OAuth tokens)
• Account preferences and settings

1.2 Usage Data

We automatically collect information about how you interact with our Service:

• API request logs (timestamps, endpoints called, response times)
• Feature usage patterns and frequency
• Device information (browser type, operating system, device type)
• IP address and approximate location (country/region level)
• Referring URLs and pages visited within our Service

1.3 Memory and Content Data

When you use our AI memory infrastructure, we store:

• Memory entries you create through our API
• Metadata associated with memories (timestamps, tags, categories)
• Vector embeddings generated from your content
• Search queries and retrieval patterns

1.4 Payment Information

When you subscribe to a paid plan, payment processing is handled by our third-party payment processor (Paddle). We do not directly store your credit card numbers or banking details. We receive:

• Transaction IDs and payment status
• Billing address (country and postal code)
• Subscription plan and billing cycle information
• Payment method type (e.g., credit card, PayPal)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related notifications
• Authenticate users and secure accounts
• Respond to customer support requests and inquiries
• Send administrative communications (service updates, security alerts)
• Analyze usage patterns to enhance user experience
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service
• Develop new features and services based on aggregated, anonymized insights

3. Data Storage and Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS 1.3
• Data at rest is encrypted using AES-256 encryption
• API keys are securely hashed and never stored in plain text
• Regular security audits and penetration testing
• Access controls and authentication for all internal systems
• Automated monitoring for suspicious activity

Your data is primarily stored on servers located in the United States, with backup and redundancy systems to ensure availability. We use Supabase as our primary database provider, which maintains SOC 2 Type II compliance.

4. Third-Party Services

We work with trusted third-party service providers to operate our Service:

4.1 Paddle (Payment Processing)

Paddle acts as our Merchant of Record, handling all payment processing, tax compliance, and billing. Paddle's privacy policy governs their use of your payment information. Visit paddle.com/legal/privacy for details.

4.2 Supabase (Database Infrastructure)

Supabase provides our database and authentication infrastructure. They maintain strict data protection standards and comply with GDPR and other privacy regulations. Visit supabase.com/privacy for their privacy policy.

4.3 Vercel (Hosting)

Our application is hosted on Vercel's platform. Vercel may collect server logs and performance data. Visit vercel.com/legal/privacy-policy for details.

4.4 Analytics

We use privacy-focused analytics to understand how users interact with our Service. Analytics data is aggregated and does not include personally identifiable information. We do not sell analytics data to third parties.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

5.1 Essential Cookies

Required for the Service to function properly. These include:

• Session cookies to maintain your login state
• Security cookies to prevent CSRF attacks
• Language and locale preference cookies

5.2 Analytics Cookies

Help us understand how visitors use our Service. These cookies collect aggregated, anonymous information.

5.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features of our Service.

6. Data Retention

We retain your data according to the following guidelines:

• Account data: Retained while your account is active and for 30 days after deletion request
• Memory data: Retained until you delete it or close your account
• API logs: Retained for 90 days for debugging and security purposes
• Payment records: Retained for 7 years as required for tax and legal compliance
• Analytics data: Aggregated data may be retained indefinitely; raw logs are deleted after 30 days

Upon account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

7.1 Right to Access

You can request a copy of the personal data we hold about you. We will provide this information within 30 days of your request.

7.2 Right to Rectification

You can update or correct your personal data at any time through your account settings, or by contacting us.

7.3 Right to Deletion

You can request deletion of your personal data. You can delete your account directly from your account settings, or contact us to request deletion.

7.4 Right to Data Portability

You can request an export of your data in a machine-readable format (JSON). This includes your memories, account settings, and usage history.

7.5 Right to Object

You can object to certain processing of your personal data, such as processing for direct marketing purposes.

7.6 Right to Restrict Processing

You can request that we limit how we use your personal data while a complaint or issue is being resolved.

To exercise any of these rights, please contact us at privacy@seizn.com.

8. GDPR Compliance

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data in accordance with the General Data Protection Regulation (GDPR) and equivalent local laws.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing for fraud prevention, security, and service improvement
• Consent: Where you have explicitly consented to specific processing
• Legal Obligation: Processing required to comply with applicable laws

International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for such transfers.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal data we have collected
• Right to Delete: You can request deletion of your personal data
• Right to Opt-Out: We do not sell personal information, so this right does not apply
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

10. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@seizn.com. We will take steps to delete such information from our systems.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

• We will update the "Last updated" date at the top of this page
• We will notify you via email (if you have an account) at least 7 days before the changes take effect
• We may display a prominent notice on our website

Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all privacy-related inquiries within 30 days. For urgent security concerns, please include "URGENT" in your email subject line.