Privacy policy
This policy explains what personal data Seedancee collects when you use the website, the workspace and the API, why we collect it, who we share it with, how long we keep it, and the choices you have. It is written in plain English and applies worldwide unless a section says otherwise.
1. Who we are
Seedancee is an independent AI video creation platform operated by the company identified on our contact page (the 'Company', 'we', 'us'). We are the controller of the personal data described here. We are not affiliated with ByteDance, and ByteDance is not a party to this policy. Contact for privacy matters: legal@seedancee.com.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, display name, authentication identifiers, locale, workspace membership | You; your sign-in provider (e.g. Google) if you use OAuth |
| Content data | Prompts, settings, uploaded reference images/video/audio, generated videos, poster frames, project and asset names | You; generated by the service |
| Billing data | Plan, credit ledger, invoices, last four digits of card, billing country; full card numbers are handled by Stripe, not us | You; Stripe |
| Usage data | Pages viewed, features used, generation events, error reports, device and browser type, approximate location from IP | Automatically, via analytics and error tools |
| Technical data | IP address, request logs, cookies and similar identifiers, API key usage | Automatically |
| Support data | Messages you send us, reports you file, appeal correspondence | You |
| Moderation data | Hashes and metadata of content that triggered moderation, review decisions | Generated by the service |
3. Why we use it (and our legal bases)
- To provide the service: run generations, store your library, bill credits, and operate the API (performance of a contract).
- To keep the service safe: moderation, abuse and fraud prevention, rate limiting, security logging (legitimate interests and legal obligations).
- To improve the product: aggregate analytics, error diagnosis, feature usage (legitimate interests; consent where required for non-essential cookies).
- To communicate: transactional emails such as generation completed, payment receipts, policy changes; optional product updates you can opt out of (contract; consent for marketing).
- To comply with law: tax records, responding to lawful requests, enforcing our terms (legal obligation; legitimate interests).
We do not sell personal data. We do not use your prompts, references or generated videos to train AI models, and we do not permit our provider to do so on our behalf; the provider's own terms govern its processing (see section 5).
4. How generation works with your data
When you generate, your prompt, settings and any reference files are transmitted to our video provider, Kie.ai, which runs the Seedance model. The provider returns the output to us; we copy it to our own storage (Cloudflare R2) and delete our dependency on the provider's copy, which the provider retains for a limited period (14 days at the time of verification) before it expires. Reference files you upload are stored in our storage under your account and sent to the provider only for jobs that use them.
5. Who we share data with
| Recipient | Purpose | Data |
|---|---|---|
| Kie.ai (video provider) | Run Seedance generations | Prompts, settings, reference files, outputs |
| Supabase | Database and authentication | Account, content metadata, ledger |
| Cloudflare (R2, CDN, Turnstile) | Media storage, delivery, bot protection | Media files, IP address, request data |
| Stripe | Payments and invoicing | Billing data; Stripe is an independent controller for card data |
| Hosting provider | Run the application | All data in transit and at rest on our servers |
| Analytics and error tools (e.g. PostHog, Sentry) | Product analytics and diagnostics | Usage and technical data; prompts and media URLs are excluded by default |
| Email provider | Transactional email | Email address, message content |
| Authorities and advisers | Legal compliance, disputes | As required |
Processors act on our instructions under data processing agreements. If we sell or reorganise the business, data may transfer to the successor under this policy.
6. International transfers
Our providers operate in several countries, including the United States and, for the video provider, potentially other regions. Where data leaves the EEA, UK or Switzerland, we rely on adequacy decisions or standard contractual clauses and assess the transfer. You can ask legal@seedancee.com for details of the safeguards for a given provider.
7. Retention
| Data | Retention |
|---|---|
| Account data | While the account exists, then up to 90 days after deletion for recovery and abuse prevention |
| Generated videos and uploads | While the account exists or until you delete them; deleted items are purged from storage within 30 days |
| Credit ledger, invoices | As long as tax and accounting law require (typically 7–10 years) |
| Request logs and security logs | Up to 90 days, longer if part of an investigation |
| Moderation records (hashes, decisions) | Up to 2 years, or longer where legally required |
| Support correspondence | Up to 3 years |
| Analytics | Aggregated or pseudonymised; raw events up to 12 months |
8. Cookies and similar technologies
We use strictly necessary cookies for sign-in, security, language preference and Turnstile. Analytics cookies or identifiers are used only where permitted, and where consent is required we ask first and default to off. You can control cookies in your browser; blocking necessary cookies will prevent sign-in.
9. Your rights
- Access a copy of your data and export your library.
- Correct inaccurate account data.
- Delete your account and content (subject to legal retention of billing records).
- Object to or restrict processing based on legitimate interests, including analytics.
- Withdraw consent for marketing at any time.
- Port your data in a machine-readable format.
- Complain to your data protection authority. In the EEA/UK you may contact your local supervisory authority; California residents have rights under the CCPA/CPRA including the right to know and delete, and we do not sell or share personal data for cross-context behavioural advertising.
To exercise a right, use the account settings where available or email legal@seedancee.com from your account email. We may need to verify your identity. We respond within the time the applicable law requires (usually one month).
10. Security
We use encryption in transit, encrypted storage, role-based access with row-level security in our database, server-side handling of all provider keys, hashed API keys, and audit logging of administrative actions. No system is perfectly secure; if we discover a breach affecting your data we will notify you and any required authority without undue delay.
11. Children
The service is for adults 18 and over. We do not knowingly collect data from anyone under 18; if you believe we have, contact legal@seedancee.com and we will delete it.
12. Changes
We update this policy when our practices change. Material changes are announced by email or in the workspace before they take effect, and the verification date at the top shows the latest revision.
13. Contact
Privacy questions and requests: legal@seedancee.com. General support: support@seedancee.com. Postal address: see the contact page.