This Privacy Policy (the “Policy”) explains how Seyuna Inc. (“Seyuna,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information in connection with our website, Accounts, Subscriptions, AI-assisted Services, Customer Applications, support, and legal channels.

Capitalized terms not defined in this Policy have the meanings given in the Terms of Service.

Seyuna Inc. is the organization or controller responsible for the processing described in this Policy, except where Seyuna processes personal data on behalf of a customer as described in Section 5.

Privacy Officer
Seyuna Inc.
7030 Woodbine Ave, Suite 500
Markham, Ontario L3R 6G2, Canada
privacy@seyuna.com

1. Scope

This Policy applies to personal information processed by Seyuna through the Services. It does not govern a customer’s independent collection and use of personal information through a Customer Application. The customer must provide its own privacy notice for that processing; Seyuna’s processor obligations are governed by the Data Processing Addendum.

2. Personal information we collect

Depending on your relationship with Seyuna and the features you use, we may collect:

  • Account and organization information, including name, email address, authentication-provider identifier, Account and organization identifiers, role, membership, and age or legal-majority affirmation.
  • Location and eligibility information, including declared country and subdivision, billing location, network-derived location, and the result of eligibility, fraud, sanctions, or service-availability checks.
  • Billing and tax information, including billing name and address, plan, price, currency, billing period, tax identifier or exemption information, calculated tax, invoices, payment status, processor customer and transaction identifiers, limited card descriptors returned by a processor, and cancellation, refund, or dispute records. Full card numbers and security codes are collected through processor-hosted payment fields and must not be submitted directly to Seyuna.
  • Project and AI information, including prompts, instructions, source code, files, project content, generated Output, feedback, publication records, and information needed to build, test, host, secure, or support a project.
  • Customer Application information, including content and technical data delivered through a hosted Customer Application and information the customer configures that application to collect from end users.
  • Technical and Usage Data, including IP address, user agent, device and browser details, request metadata, authentication and session events, feature usage, performance measurements, security events, audit records, and diagnostic information.
  • Support, safety, and legal information, including communications, contact details, rights requests, reports, URLs, evidence, decisions, appeals, preservation records, and delivery records.
  • Integration information, including provider identifiers, repository or installation metadata, and credentials or tokens required for an authentication method or customer-selected integration.
  • Communications preferences, including records of consent, objection, unsubscribe, and message delivery.

Please do not send payment-card details outside designated hosted payment fields or submit health information, biometric data, government identifiers, children’s data, or other specially regulated information unless a Seyuna feature expressly authorizes and documents that use.

3. Sources of personal information

We collect personal information:

  • directly from you or an Authorized User;
  • automatically from a browser, device, network request, or use of the Services;
  • from an authentication, integration, payment, tax, infrastructure, or security provider;
  • from a customer that operates a Customer Application;
  • from an end user who interacts with a Customer Application; and
  • from a person or authority submitting a support request, rights request, complaint, safety report, legal notice, or valid legal demand.

We may derive limited fraud, security, tax, eligibility, moderation, and service-operation results from these sources.

Seyuna processes personal information to:

  1. create, authenticate, administer, and secure Accounts and organizations;
  2. verify eligibility and maintain records of contract acceptance and consent;
  3. provide Subscriptions, projects, AI-assisted generation, hosting, publication, integrations, support, export, and deletion;
  4. process payments, calculate and record taxes, issue invoices, administer renewals and cancellations, and resolve refunds or disputes;
  5. operate, monitor, troubleshoot, and improve the reliability, safety, and performance of the Services;
  6. detect, prevent, and investigate fraud, abuse, security incidents, sanctions concerns, and violations of our policies;
  7. receive and decide rights requests, safety reports, copyright notices, legal complaints, and appeals;
  8. send transactional, security, billing, support, and material policy communications;
  9. send marketing communications where the recipient has provided any consent required by law; and
  10. comply with legal obligations and establish, exercise, or defend legal claims.

Under Canadian privacy law, we identify the purposes of collection and seek meaningful consent where required. We may process information without consent where applicable law authorizes or requires it. You may withdraw an optional consent, subject to legal and contractual limits and reasonable notice.

For personal data governed by the European Economic Area or United Kingdom data-protection regimes, Seyuna relies on:

  • performance of a contract or steps requested before entering it for Accounts, Subscriptions, requested features, payments, and support;
  • legal obligations for tax, accounting, sanctions, consumer protection, privacy, safety, and valid legal process;
  • legitimate interests in securing and operating the Services, preventing fraud and abuse, improving reliability, maintaining appropriate records, and defending claims, balanced against the individual’s rights; and
  • consent for optional marketing, non-essential browser technologies, or another purpose for which consent is specifically requested.

Providing Account, location, billing, and contract-assent information is necessary to create an Account or purchase a Subscription. If required information is not provided, Seyuna may be unable to open the Account, complete the transaction, or provide the requested feature.

Seyuna does not use solely automated decision-making that produces legal or similarly significant effects about an individual. Automated signals may flag a signup, payment, security, content, or eligibility event for restriction or review. You may contest a decision through support@seyuna.com.

5. Customer Applications and processor activities

A customer determines the purposes and means of personal-data collection configured in its Customer Application. For that processing, the customer ordinarily acts as controller or business and Seyuna acts as processor, service provider, or subprocessor on the customer’s documented instructions.

Seyuna may separately act as controller for Account administration, billing, platform security, abuse prevention, and legal compliance. The Data Processing Addendum governs Customer Personal Data processed by Seyuna on the customer’s behalf.

An end user should ordinarily direct a request concerning a Customer Application’s collection to the customer that operates it. The Privacy request form remains available if the customer cannot be reached or the request concerns Seyuna’s independent processing.

6. Artificial-intelligence processing

When you request an AI-assisted action, Seyuna sends the Input and relevant project context to a contracted AI service provider to generate a response. Seyuna does not use Customer Data to train general-purpose artificial-intelligence models and does not authorize the provider to use Customer Data for model training.

Output may be inaccurate or non-unique. Do not include specially regulated or highly sensitive information in an Input unless a Seyuna feature expressly authorizes and documents that use.

7. Payments and transaction taxes

For billing addresses in Canada and the United States, Moneris processes payment-card information. For other enabled billing locations, Stripe processes payment-card information. Those providers may process payment and fraud-prevention data under their own privacy notices as well as providing services to Seyuna.

Stripe also receives billing location, product, price, and transaction information to calculate and record applicable transaction taxes. Seyuna remains the seller of the Subscription. Do not send full payment-card details to Seyuna by email or support message.

8. Disclosure of personal information

Seyuna may disclose personal information to:

  • infrastructure, hosting, storage, database, authentication, email, AI, security, payment, and tax providers that support the Services;
  • an integration provider that you direct Seyuna to connect;
  • a customer responsible for information submitted through that customer’s Customer Application;
  • auditors, insurers, and professional advisers subject to appropriate duties of confidentiality;
  • a prospective or completed purchaser, successor, or financing party in a corporate transaction, subject to appropriate safeguards; and
  • courts, regulators, law enforcement, emergency services, claimants, or affected parties where disclosure is required by law or reasonably necessary to protect rights, safety, and security.

The Service Providers page identifies current providers and their functions. Seyuna does not sell personal information for money, share it for cross-context behavioural advertising, or intentionally disclose it to a data broker.

9. International processing

Seyuna is based in Canada. We and our service providers may process personal information in Canada, the United States, the European Economic Area, the United Kingdom, and other countries in which a provider operates. Privacy laws and lawful government-access rules can differ between countries.

Where required, Seyuna relies on an applicable adequacy decision, contractual safeguards, or another lawful transfer mechanism. The Data Processing Addendum addresses transfers of Customer Personal Data processed on a customer’s behalf. You may contact privacy@seyuna.com for information about an applicable safeguard, subject to protection of confidential and security-sensitive terms.

10. Retention

Seyuna retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide an active Account or Subscription, comply with legal and tax obligations, resolve disputes, enforce agreements, and maintain security and audit records.

Retention is determined by the nature of the record, the reason it was collected, the status of the Account or Customer Application, applicable legal and limitation periods, the duration of a dispute or legal hold, and the deletion schedules of relevant systems and providers. After the applicable period, information is deleted, de-identified, or isolated from ordinary use.

Account and project data are processed through the Account-deletion workflow when a verified deletion request is completed. Residual copies may remain for a limited period in backups or where retention is required by law. Payment, tax, contract, cancellation, security, abuse, and legal records may be retained for the applicable record-keeping, dispute, or limitation period.

11. Security and personal-data breaches

Seyuna applies administrative, technical, and organizational safeguards proportionate to the nature and risk of the information. These safeguards include access controls, authentication, secure transport, service isolation, credential protection, logging, input limits, and incident procedures. No service can guarantee absolute security.

Report a suspected vulnerability through Security. We assess, notify, and report a personal-data breach in accordance with the laws applicable to the affected information and individuals.

12. Your rights and choices

Subject to applicable law and lawful exceptions, you may have the right to:

  • obtain information about processing and access personal information;
  • correct inaccurate or incomplete information;
  • receive a portable copy or request a transfer;
  • request deletion or restriction;
  • object to certain processing;
  • withdraw consent or unsubscribe from marketing;
  • contest an automated flag and request human review;
  • appeal the denial of a privacy request; and
  • use an authorized representative.

Submit a request through the Privacy request form or email privacy@seyuna.com. We may verify identity and authority in a manner proportionate to the request and the information involved. Under Canada’s Personal Information Protection and Electronic Documents Act, access requests are generally answered within 30 days, subject to a permitted extension and notice. Other laws may provide different response periods.

You may complain to the Office of the Privacy Commissioner of Canada, an applicable European supervisory authority, the United Kingdom Information Commissioner’s Office, or another regulator with jurisdiction over your complaint.

13. United States disclosures

The categories of personal information Seyuna may collect are identifiers; customer records; commercial and transaction information; internet or other electronic activity; approximate geolocation; content submitted electronically; professional information provided for an organization Account; and limited inferences used for fraud, security, eligibility, and service operation. The sources, purposes, recipients, and retention criteria for those categories are described above.

Seyuna does not sell personal information or share it for cross-context behavioural advertising and does not discriminate against an individual for exercising a privacy right. If an applicable United States state law grants you additional rights, you may exercise them through the same Privacy request form. Where required, you may appeal a decision by replying to the decision notice.

Seyuna does not respond to the legacy browser Do Not Track header because there is no consistent industry standard for interpreting it. Seyuna recognizes Global Privacy Control where legally required for a covered sale, sharing, or targeted-advertising activity. Payment, identity, fraud-prevention, and security providers may independently collect technical or transaction information over time and across unaffiliated services under their own privacy notices to operate their services, secure transactions, or prevent fraud. Seyuna does not permit that collection for cross-context behavioural advertising.

14. Children

Seyuna Accounts are limited to individuals who are at least 18 and have reached the age of legal majority where they live. The Services are not directed to children. A customer must not configure a Customer Application to collect children’s personal information unless Seyuna has expressly authorized and documented that feature and the customer has implemented every legally required notice, consent, and safeguard.

15. Cookies and similar technologies

Seyuna uses cookies, local storage, and similar technologies for authentication, security, signup, service location, payments, rights access, and user preferences. Protected forms may use Cloudflare Turnstile, and hosted payment interfaces may use payment and fraud-prevention technologies. See the Cookie Policy.

16. Changes to this Policy

Seyuna may update this Policy prospectively. We will post the updated version and effective date and provide additional notice, or request consent, where required by law. We will not rely on a material new purpose for previously collected personal information merely by revising this Policy where further notice or consent is required.

17. Contact

For any privacy concern or request, contact:

Privacy Officer, Seyuna Inc.
7030 Woodbine Ave, Suite 500
Markham, Ontario L3R 6G2, Canada
privacy@seyuna.com