Privacy Policy
- Who we are
- Scope of this policy
- Personal information we collect
- Camera, audio and the people in front of them
- Why we use it, and our lawful bases
- Who we disclose it to
- Overseas transfers
- Cookies and similar technologies
- How long we keep it
- Security
- Your rights and how to exercise them
- Complaints
- Children
- Automated decision-making
- Changes to this policy
- Contact
1. Who we are
SEED42 PTY LTD (ABN 77 702 466 126), of 410 Marrickville Rd, Marrickville NSW 2204, Australia ("seed42", "we", "us", "our") is the entity responsible for the personal information described in this policy. Under the Privacy Act 1988 (Cth) we are the APP entity; under the UK and EU GDPR we are the controller, except where section 4 says otherwise.
You can reach us at contact@seed42.app.
2. Scope of this policy
This policy covers the seed42 website at seed42.app, the seed42 web application, the mobile controller, the desktop application, and our email communications (together, the "Service"). It applies to visitors, account holders and paying customers.
It does not cover third-party sites we link to, or the separate terms of the providers listed in section 6. Your use of the Service is also governed by our Terms and Conditions.
3. Personal information we collect
3.1 Information you give us
- Account information. Email address and a password, which is stored only as a salted cryptographic hash and is never visible to us.
- Waitlist and enquiry information. Email address and, where you choose to give them, your role, your Instagram handle, whether you have an event coming up, which plan interests you, and how you heard about us.
- Content. Prompts you write, presets and canvas configurations you save, and settings you choose.
- Correspondence. Support requests, feedback, bug reports and anything else you send us.
- Booking information. If you book a call, the details you enter when scheduling it.
- Ambassador Program applicants. If you apply to the seed42 Ambassador Program: your name, email address, country, role, social media profile links, website if you give one, how many events you do a month, and what you tell us about what you do.
- Ambassador Program members. If you take part in the Program: the links to the reels you post, your monthly feedback, and whether you have agreed that we may quote it.
3.2 Information created by your use of the Service
- Usage records. When each streaming session starts and ends, its billed duration in minutes, your remaining allowance, and when your allowance renews. These are recorded on our servers, not in your browser, because they determine what you are charged.
- Product analytics. Which features you use and in what order, pages viewed, and device, browser and operating system information. Subject to section 8.
- Session recordings. On our public landing pages only, we record a replay of the page as it appeared, so we can see where the page confuses people. Every form input is masked before it leaves your browser, so replays never contain what you typed. Subject to section 8.
- Technical logs. IP address, request time, and error diagnostics, recorded by our hosting provider.
- Email engagement. Whether our emails to you were delivered, opened, or had a link clicked.
- Referral link. If you arrived through someone's personal seed42 link (including an Ambassador Program link), which link that was, recorded when your account is created.
3.3 Billing information
Payments are taken by Stripe. We never receive or store your full card number, expiry date or security code. What we hold is your Stripe customer and subscription identifier, the plan you are on, its status, when the current period ends, when you first paid, and your purchase history.
3.4 Information we do not collect
We do not collect government identifiers, and we do not knowingly collect sensitive information as defined in the Privacy Act or special category data as defined in the GDPR. Please do not send it to us.
4. Camera, audio and the people in front of them
This is the part of the Service with the greatest privacy consequence, so it is set out separately.
4.1 Your camera feed
seed42 works by taking a live camera feed and transforming it into visuals. To do that, the feed is transmitted from your device to a specialist third-party real-time video processing provider, which performs the transformation and returns the result within the session.
We do not record, store or retain your camera feed. It is processed in transit for the duration of the session and is not written to our databases. That provider is contractually bound to process the feed only to deliver the Service and not to retain it. If you would like to know which provider it is, ask us at contact@seed42.app and we will tell you.
4.2 Using a phone as a camera
When you connect a phone as a camera, video travels directly between your devices over WebRTC where possible. To establish that connection, your device contacts a public STUN service, which necessarily discloses your IP address to its operator for that purpose. No video passes through it.
4.3 People who appear in the frame
seed42 is built to be pointed at rooms, crowds and performances. Those people are usually not our users and have no relationship with us.
Where you point a camera at other people, you are the controller of that footage and we act on your instructions as your processor. It is your responsibility, not ours, to have a lawful basis for filming them and to give them whatever notice their law requires. That normally means the venue's own signage and conditions of entry. If you cannot rely on those, do not point the camera at the crowd.
4.4 Audio
Audio is analysed in your browser to drive visuals that react to sound. Raw audio is not transmitted to us or stored by us. We record only that an audio feature was used and which input type it was.
5. Why we use it, and our lawful bases
If you are in the EEA, the UK or Switzerland, the GDPR requires us to name a lawful basis for each purpose. If you are elsewhere, the purposes still apply; the third column simply does not.
| Purpose | Information used | Lawful basis (GDPR) |
|---|---|---|
| Create and operate your account, authenticate you | Account information | Performance of a contract |
| Deliver the Service, including transforming your camera feed | Camera feed, content, settings | Performance of a contract |
| Meter usage and enforce plan allowances | Usage records | Performance of a contract |
| Take payment, manage subscriptions, prevent payment fraud | Billing information | Performance of a contract; legal obligation |
| Provide support and answer you | Correspondence, account information | Performance of a contract; legitimate interests |
| Keep the Service secure, diagnose faults, prevent abuse | Technical logs, usage records | Legitimate interests in a working, secure service |
| Understand how the Service is used and improve it | Product analytics, session recordings | Consent (see section 8) |
| Send service messages you need to receive | Account information | Performance of a contract |
| Send marketing about seed42 | Email address, engagement | Consent, withdrawable at any time |
| Meet tax, accounting and other legal duties | Billing information | Legal obligation |
| Review Ambassador Program applications and run the Program | Ambassador applicant and member information | Taking steps to enter, and performing, the ambassador agreement |
| Understand which personal links bring sign-ups | Referral link | Legitimate interests |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and concluded they are not, because the processing is limited to what running the Service requires. You may object at any time (section 11).
6. Who we disclose it to
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We disclose it to the following categories of provider, each only for the purpose shown. If you want the identity of any of them, ask us at contact@seed42.app and we will tell you.
| Provider | What it does for us | Where it processes |
|---|---|---|
| Database and authentication provider | Storing your account, content and usage records | United States |
| Hosting provider | Serving the website and application, request logs | United States and a global edge network |
| Real-time video processing provider | Transforming the camera feed into visuals, in session | United States |
| Stripe | Payment processing and subscription billing | United States, Australia |
| Email delivery provider | Sending transactional and marketing email | United States |
| Product analytics provider | Usage analytics and session replay | United States |
| Public STUN service | Establishing a direct device-to-device video connection | Global |
| Internal workspace tool | Reviewing Ambassador Program applications and keeping the member register | United States |
We may also disclose personal information where we are required to by law or a valid legal request; where it is necessary to establish, exercise or defend a legal claim; and to a purchaser or successor if the business is sold or reorganised, in which case this policy will continue to apply until they tell you otherwise.
7. Overseas transfers
We are based in Australia and most of our providers are in the United States, so your personal information will be handled outside your own country and, if you are in Australia, outside Australia.
For transfers out of the EEA, the UK or Switzerland we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), incorporated into our agreements with the providers listed above.
For the purposes of Australian Privacy Principle 8, we take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles, principally through those contractual terms.
8. Cookies and similar technologies
We use a small number of cookies and browser storage entries. These are all of them.
| Name | Type | Purpose | Life |
|---|---|---|---|
site_auth | Cookie, essential | Keeps you signed in. Without it you cannot use your account. | Up to 30 days |
s42_cookie_consent | Local storage, essential | Remembers the analytics choice you made here, so we do not ask again. | Until cleared |
| Interface preferences | Local storage, essential | Remembers panel and folder states, and whether you have seen the demo. | Until cleared |
| Analytics cookie and local storage | Set by our analytics provider | Identifies a returning browser so analytics are not counted twice. Set only with consent. | Up to 12 months |
| Stripe cookies | Third-party, essential to payment | Set by Stripe on its own checkout pages to process your payment and prevent fraud. | Per Stripe's policy |
Our analytics are served through our own domain rather than a third-party one. That is done so ad blockers do not silently distort our usage figures, and it does not change who receives the data: our analytics provider does, as described above.
8.1 How we ask
If you are in the EEA, the UK or Switzerland, analytics and session recording are switched off until you accept them. A prompt asks you when you first arrive. Nothing analytical is loaded or stored before you answer it, declining is a single click, and Decline is presented no less prominently than Accept.
Elsewhere we do not interrupt you with a prompt, because Australian and United States law require that this collection be disclosed and that you can opt out, rather than that you consent to it in advance. This policy is that disclosure, it is linked from every page that runs analytics, and the button below is the opt-out. It takes effect immediately and applies from the moment you use it.
8.2 Opting out, or changing your mind
Use this button, wherever you live and whichever of the two applies to you:
You can also block or delete cookies in your browser settings, and set a Global Privacy Control signal, which we honour as an opt-out where the law requires it. Blocking essential cookies will stop you being able to sign in.
9. How long we keep it
| Information | Kept for |
|---|---|
| Account information | While your account exists, then up to 30 days |
| Content you saved | While your account exists, then up to 30 days |
| Usage records | 7 years, because they substantiate what you were charged |
| Billing and transaction records | 7 years, as required by Australian tax law |
| Camera and audio feeds | Not retained. Processed in transit only |
| Product analytics and session recordings | Up to 12 months |
| Technical logs | Up to 30 days |
| Marketing contact records | Until you unsubscribe, then a suppression record indefinitely so we do not contact you again |
| Declined Ambassador Program applications | Deleted within 12 months |
| Ambassador Program member records | While you are a member, then up to 2 years after |
10. Security
Personal information is encrypted in transit and at rest. Access to production systems is restricted to those who need it. Passwords are stored only as salted hashes. Card details never reach our systems.
No system is perfectly secure, and we do not claim otherwise. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires, and any other regulator we are obliged to tell.
11. Your rights and how to exercise them
Wherever you live, you may ask us to give you a copy of your personal information, correct it if it is wrong, or delete it.
If you are in the EEA, the UK or Switzerland you also have the right to restrict processing, to object to processing based on legitimate interests, to receive your information in a portable form, and to withdraw consent at any time without affecting what we did lawfully before you withdrew it.
If you are a California resident you may request disclosure of the categories and specific pieces of personal information we collected, request deletion or correction, and opt out of sale or sharing. As stated in section 6, we do not sell or share personal information, and we will not discriminate against you for exercising any right.
To exercise any of these, email contact@seed42.app from the address on your account. We will respond within 30 days. We may need to confirm your identity first, and we will tell you if a request is one we can only partly meet, and why. Exercising these rights is free.
To stop marketing email, use the unsubscribe link in any message or reply asking us to stop. Service messages about your account or your payments will continue, because you need them.
12. Complaints
Please raise it with us first at contact@seed42.app, and we will investigate and reply within 30 days.
If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you are in the EEA you may complain to your national supervisory authority; if you are in the UK, to the Information Commissioner's Office (ico.org.uk).
13. Children
The Service is not directed at, and may not be used by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
14. Automated decision-making
We do not make decisions producing legal or similarly significant effects about you by automated means alone, and we do not profile you for that purpose. Usage allowances are applied by an automatic meter, but that is the arithmetic of the plan you chose rather than a decision about you.
15. Changes to this policy
We may update this policy. The version number and effective date at the top will change. If a change materially affects your rights, we will tell you by email or in the Service at least 14 days before it takes effect, so you have time to object or close your account.
16. Contact
SEED42 PTY LTD (ABN 77 702 466 126)
410 Marrickville Rd, Marrickville NSW 2204, Australia
Email: contact@seed42.app
Web: seed42.app