Privacy Policy

Seedtag Advertising SL, C/ Marqués de Valdeiglesias — Nº 6, Madrid, Spain, operates an AI-assisted purchase investigation service at seedtag.app. We are the data controller for the personal data described in this policy. Privacy questions can be sent to [email protected] or through the contact page.

We keep the dataset deliberately small.

• Account data: first name, last name, email address and a hashed password.
• Order data: credits purchased, promo code used, chosen payment method and payment status.
• Investigation data: the product links or descriptions you submit and the case files generated from them.
• Technical data: IP address, device and browser type, and essential cookie identifiers.

We process account and order data to perform our contract with you: opening an account, allocating credits and delivering investigations. Technical data is processed on the basis of legitimate interest in keeping the service secure and reliable. Optional analytics are processed only with your consent.

Bank transfer is currently the only active payment method. We receive the payment reference and the fact of settlement from our bank; we never hold your full banking credentials. When card, PayPal and Stripe payments become available, card data will be handled by the payment provider and never stored on our systems.

Account and case file data is retained while your account is active and for 24 months afterwards. Invoicing records are retained for the statutory period required by tax law. You can request earlier deletion at any time, subject to those statutory obligations.

We share data only with processors that make the service work: hosting and infrastructure, email delivery, payment settlement and AI inference providers. Processors act on our instructions under a data processing agreement. We never sell personal data and we do not share it with retailers or advertisers.

Where a processor is located outside the European Economic Area, transfers rely on the European Commission's Standard Contractual Clauses together with technical safeguards such as encryption in transit and at rest.

You have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time. You also have the right to lodge a complaint with your national supervisory authority.

Passwords are stored using a modern one-way hashing function, traffic is encrypted with TLS, and administrative access is limited to staff who need it. No system is perfect: if a breach affects your rights we will notify you and the supervisory authority without undue delay.

If we materially change how personal data is processed we will update this page and, where the change affects your rights, notify account holders by email before it takes effect.