Privacy Policy

Last updated 6 August 2026

1. Who is responsible

The data controller for Seed (seed.superseeds.io) is Superseeds (Emil Mogensen), a sole proprietorship (enskild firma) registered in Sweden, org. nr 980604-XXXX (partially masked; full number available on request), emil@superseeds.io. Contact us at that address for anything in this policy, including exercising your rights.

2. What we process

• Account data — your email address, name, and optional profile photo, used to sign you in and show who did what in a shared workspace.
• Client workspace data — the client company name and the contact details of invited members, used to scope portal access.
• Content — the product, prop, and backdrop photos you upload, brand assets, prompts, and the images and video generated from them. Uploading photos of real people is not permitted (see the Terms), so content is not intended to contain personal data.
• Purchase data — token purchases and balances. Card details are handled entirely by Stripe; we never see or store them.
• Technical data — sign-in and security logs kept by our hosting providers.

3. Why we process it

We process this data to provide the service you or your studio agreed to (contract, GDPR art. 6(1)(b)), to keep the service secure and improve it (legitimate interest, art. 6(1)(f)), and to meet legal obligations such as bookkeeping (art. 6(1)(c)). We do not sell data, run advertising, or use your content to train AI models.

4. Who processes it for us

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Stripe — payment processing.
• fal.ai — AI image and video generation. Your uploaded reference photos and prompts are sent to fal.ai only to fulfil the generations you request.

These providers act as our processors under data processing agreements. Some are located in, or may process data in, the United States; transfers rely on the EU–US Data Privacy Framework or the EU standard contractual clauses.

5. How long we keep it

Account and workspace data is kept while the account or client relationship is active. Uploaded and generated content is kept so your reference bank stays useful, and is deleted when you delete it in the app or when the client relationship ends and deletion is requested. Purchase records are kept for 7 years as required by Swedish bookkeeping law.

6. Your rights

You can ask for access to, correction of, deletion of, or a copy of your personal data, and you can object to or ask us to restrict processing. Write to emil@superseeds.io and we will respond within a month. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, www.imy.se).

7. Cookies

Seed sets only the strictly necessary cookies used to keep you signed in. There are no analytics, advertising, or third-party tracking cookies, so there is no cookie banner.

8. Changes

If this policy changes materially, we will notify account holders by email or in the app. The date above shows the latest revision.