Privacy Policy

Revised 26 August 2026

This policy explains what personal data the Seeno service collects, why, who else sees it, and what you can ask us to do with it. It covers the website at seeno.ai and the dashboard at app.seeno.ai.

The data is processed by CARDIGITAL FZCO. Registration is under way; when it completes, the registered name, number, address and country will be published here. For anything about your data, write to [email protected]. That is the address for every request in section 9.

We do not sell personal data, and we do not pass it to anyone so that they can use it for their own purposes.

1. What data we collect

We process six groups of data, and only these.

Free audit request: the address of the website to be checked, and the work email address the report is sent to. Together with them we record the date, the time and the IP address from which the request was confirmed
Account data: email address, name, the name of the organisation, the role inside it, and the password stored as an irreversible hash
What you set up for measurement: brand name, brand domain, competitors and the text of buyer questions. This is business data rather than data about a person, and it becomes personal only if you put personal data into it, which section 3 asks you not to do
Payment records: the fact and the amount of a payment, the subscription period, the plan and the invoice, together with the billing details needed for the invoice. Card details are entered on the payment provider’s side; we do not receive them and do not store them
Data that turns up inside answers from AI engines: we store an answer exactly as the engine produced it, and an answer can name people
Technical data: IP address, information about the browser and the device, request logs, and strictly necessary cookies

Also, when an organisation owner invites someone in, we receive that person’s email address from the person inviting them, and use it only to send the invitation.

We do not collect special categories of personal data and we do not collect biometric data.

The audit form on seeno.ai sends one thing: the address of the site to be checked. It is an ordinary form submitted by GET, so anything typed into it would end up in the browser address bar, in browsing history and in server logs. The email address is asked for later, on the audit screen in the dashboard, and is sent by POST.

2. Why we process it

To run the free audit and send the report to the address given
To create an account, let you sign in, and separate what each role can reach
To provide the paid service and to bill for it
To send service messages: email confirmation, password recovery, invitations, reports and alerts from your subscription
To answer a message you send us
To keep the service secure and to investigate incidents
To meet obligations placed on us by law
To send product news and offers — only to people who asked for them separately

Product news and offers go only to people who ticked the separate box for them. The box is not ticked by default, and the result of an audit does not depend on it. Every such message carries an unsubscribe link, and unsubscribing stops them. Service messages and the reports you ordered keep arriving.

3. Measurements and personal data

What Seeno measures is brand names, buyer questions and the public answers of AI engines.

The request that goes to an AI engine contains the text of the buyer question and nothing else — the same question a person could type into that engine themselves. We do not add your brand name, your account details or your email address to it.

The text of the question is written by you. We do not ask for personal data in it, and the terms of service forbid putting personal data there: the question goes to another company’s system whole, and it cannot be recalled from it.

The answer comes back, and an AI engine can name people in it. We store the answer in full, because a quote is evidence, and we use it only to show you the answer in a report. A person named in a quote can ask for it to be removed by writing to [email protected]: a quote is not edited, it is deleted whole.

4. What we rely on

Performance of the contract with you — for the account, the paid service, billing and service messages
Your consent — for the free audit, and separately for product news and offers. Consent can be withdrawn at any time, and withdrawing it does not affect what was lawful before
Our legitimate interests — for keeping the service secure and investigating abuse; for the email address of an invited member, which we use only to send the invitation; and for storing an AI answer unchanged so that you can see what the engine actually said
Legal obligations — for accounting and tax records

5. Who else sees the data

We use a small number of suppliers to run the service. Each of them receives only what its job needs, processes it on our instructions, and is bound to keep it confidential.

Stripe — payments. Card details go to Stripe and never reach us
Resend — delivery of email: confirmations, invitations, reports and alerts
DigitalOcean — the servers and storage the service runs on
The AI engines and the providers that give access to them — the text of buyer questions, and nothing else

Beyond that, data can be disclosed to public authorities where the law requires it, and to a buyer if the business changes hands, in which case this policy continues to apply until you are told otherwise.

6. Where the data goes

The service is international, and so are its suppliers: they run in the United States and in the European Union, and some of the AI engines run elsewhere again. That means your data crosses borders. Where a transfer needs a legal safeguard, we rely on the standard contractual clauses and the transfer terms published by the supplier, and we keep to the same limit everywhere: only what the supplier needs for its job leaves us.

7. How long we keep it

The groups here are the groups from section 1, in the same order.

Free audit request — one year from the day the report was sent
Account data — while the account exists, and thirty days after it is closed. If payments were made on the account, the email address stays in the payment records, because it is part of an accounting document and lives for as long as that document
What you set up for measurement — while the account exists, and thirty days after it is closed
Payment records — for as long as accounting and tax law requires. The exact term will be named here once the operating entity is registered and its country is known
Measurement results together with stored AI answers — for the history depth your plan provides, and thirty days after the account is closed
Technical data — one year from the day it was recorded

The email address of an invited member is kept until the invitation is accepted, and if it is not accepted, thirty days from the day it was sent.

The public link to an audit report lives less than the data behind it: 7 days from the moment the report is ready, after which it stops opening.

An account is closed by writing to [email protected] from the address it is registered to. There is no delete button in the dashboard yet. Closing an account does not make every trace of a person disappear at once: action log entries and payment records remain, and they live by the terms above. Everything in them that is not required by law or by accounting is destroyed.

8. Cookies and browser storage

The service sets strictly necessary cookies: they hold your signed-in session, and without them the dashboard does not work. There are no advertising cookies and no tracking cookies on the site, and we run no third party analytics.

Besides cookies, the dashboard keeps five working notes in browser storage:

which organisation, workspace and brand are selected
that an audit has already been started, and for which website address
a one-time pass confirming that the audit was started from this browser. It is what makes the report reach the person who ordered it rather than a person the link was forwarded to
the number of an unfinished payment, to bring you back to it afterwards
an audit report that a person ordered but has not yet taken into an account. This is the only note that survives closing the browser

The rest live until the browser is closed and are erased when the action they belong to is finished. There is no advertising and no tracking in them.

9. Your rights

You can ask us to:

tell you what data about you we hold and how we process it
correct data that is wrong or out of date
delete data we no longer have a reason to keep
restrict processing, or object to processing based on our legitimate interests
hand your data over in a machine readable form, or send it to another provider
withdraw a consent you gave, including consent to product news
object to a decision taken about you by automated means alone, where it has legal effects for you

A request to correct a quote from an AI engine is carried out by deleting the quote whole, for the reason given in section 3.

Write to [email protected]. We answer within thirty days of receiving the request. You can also complain to the data protection authority of the country you live in, and doing that does not depend on writing to us first.

10. Security

We take organisational and technical measures to protect personal data from unlawful access, loss, alteration and disclosure. In practice that means separated access rights, encrypted connections, passwords stored as irreversible hashes, and logging of actions taken on data.

11. Age

The service is made for work, not for private affairs, and it is not intended for people under eighteen. We do not knowingly collect data about children. If such data reaches us anyway, it is deleted on request.

12. Changes to this policy

We can change this policy. The version in force is always on this page, and its date is at the top. When a change affects your rights, we write to the address on the account before it applies. The terms of the paid service are in the terms of service.