Privacy Policy

Responsible

UmbrinCraft
Diessenberg 2
3068 Bern
Switzerland
[email protected]

Data we collect

SeedFlows collects only the data necessary to provide the service:

  • Account data: Your email address and a hashed password for authentication.
  • Content data: Scripts, audio, images, and videos you create within SeedFlows are stored in private cloud storage accessible only to your account.
  • YouTube credentials: OAuth tokens for your connected YouTube channels are encrypted at rest. We never store your Google password.
  • Billing data: Payment processing is handled by Stripe. We do not store credit card details. Stripe's privacy policy applies.

Server logs

Our web server automatically stores access logs (IP address, browser, timestamp) for security purposes. These logs are not shared with third parties and are deleted after 30 days.

Third-party services

  • Google Gemini & Imagen: Used for AI-based script and image generation. Text prompts and image data are transmitted to Google's API servers for processing.
  • ElevenLabs: Used for text-to-speech audio generation. Script text is transmitted to ElevenLabs' servers.
  • YouTube Data API: Used to upload videos and manage playlists on your behalf. Your Google OAuth access token and video content are transmitted to Google's YouTube Data API servers solely to perform actions you explicitly request. We do not share your Google credentials or user data with any other third party. By using SeedFlows, you agree to the YouTube Terms of Service and Google's Privacy Policy. You can revoke SeedFlows' access to your Google account at any time via Google Account Permissions.
  • Stripe: Used for subscription billing. Payment data is processed exclusively by Stripe. Stripe's privacy policy applies.

Google user data

SeedFlows uses Google OAuth to authenticate users and to interact with the YouTube Data API on your behalf. The following applies to all Google user data we access:

  • Google user data is used exclusively to provide the features you requested (login, YouTube upload).
  • We do not sell, rent, or share your Google user data with any third party other than Google's own APIs.
  • We do not use Google user data for advertising or profiling purposes.
  • OAuth tokens are stored encrypted at rest and are only used to execute API requests on your behalf.
  • You may revoke access at any time at myaccount.google.com/permissions.

Data protection

We implement the following measures to protect your data:

  • Encryption in transit: All data is transmitted over HTTPS/TLS.
  • Encryption at rest: Sensitive credentials, including OAuth tokens, are encrypted in our database.
  • Access control: Your content is stored in private cloud storage accessible only to your account. Access is authenticated via JWT tokens.
  • No data sale: We do not sell personal data or Google user data to any third party.
  • Minimal data collection: We collect only the data necessary to provide the service.

Data retention

Your data is retained as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

Your rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at [email protected].

Contact

For any privacy-related questions: [email protected]