Privacy Policy

At Seaweed.ai, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume and CV building service. Please read this policy carefully.

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect:

• Account Information: Email address, name, password (encrypted)
• Professional Information: Work history, education, skills, certifications, and achievements you provide for your resume/CV
• Job Application Data: Job descriptions, company information, and position details you input for tailoring applications
• Payment Information: Billing details processed securely through Lemon Squeezy (we do not store your full payment card details)

Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the platform
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs

2. How We Use AI (OpenAI Processing)

What We Send to OpenAI

• Resume/CV content you create or upload
• Job descriptions you provide for tailoring
• Professional profile information for optimization

How OpenAI Uses This Data

• Data sent via the API is not used to train OpenAI models
• OpenAI retains API data for up to 30 days for abuse monitoring, then deletes it
• We use OpenAI's enterprise-grade API with enhanced privacy protections

AI-Generated Content

AI-generated suggestions for your resume, cover letters, and other documents are created based on your input and industry best practices. You retain full control over what content to include in your final documents.

3. Data Storage and Security

Where Your Data Is Stored

Your data is stored securely in the European Union (EU) using Supabase infrastructure located in the eu-central-1 region (Frankfurt, Germany). This ensures compliance with EU data protection regulations.

Security Measures

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication for administrative access
• Regular Audits: Periodic security assessments and vulnerability scanning
• Secure Authentication: Industry-standard password hashing and secure session management
• Database Security: Row-level security policies ensuring users can only access their own data

4. Third-Party Services

We use carefully selected third-party services to provide and improve our platform:

5. Your Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@seaweed.ai. We will respond within 30 days.

6. GDPR Compliance

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we comply with the General Data Protection Regulation (GDPR):

Legal Basis for Processing

• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: Improving our services, fraud prevention, and security
• Consent: Marketing communications and certain cookies (where applicable)
• Legal Obligation: Compliance with applicable laws and regulations

Data Protection Officer

For GDPR-related inquiries, you can reach our Data Protection Officer at privacy@seaweed.ai.

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your data protection rights.

7. CCPA Compliance

For California residents, we comply with the California Consumer Privacy Act (CCPA):

Your California Privacy Rights

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Do Not Sell My Personal Information

Seaweed.ai does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share data as described in this Privacy Policy.

8. Data Retention

We retain your data according to the following schedule:

• Active Account Data: Retained while your account is active
• Deleted Account Data: Permanently deleted within 30 days of account deletion request
• Backup Data: Removed from backups within 90 days
• Usage Analytics: Anonymized data may be retained for analytical purposes
• Legal Requirements: Some data may be retained longer if required by law

9. Children's Privacy

Our service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at privacy@seaweed.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top
• Sending an email notification for significant changes (if you have an account)

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: