Data processing addendum
For business customers whose briefs may contain personal data. This addendum forms part of the terms of service.
This addendum is an unreviewed template
It is placeholder wording to make the page real, not legal advice, and it has not been reviewed by a lawyer. Replace it with counsel-approved text before you launch or collect any personal data.
Roles
You are the controller of personal data you submit. Seedand is the processor, acting only on your documented instructions, which for normal use means operating the service as described.
Scope of processing
Subject matter: generating advertising copy from briefs you supply. Duration: for as long as your account is open. Categories of data subject: your personnel and anyone you choose to describe in a brief.
Briefs are not intended to hold special-category data, and you should not enter it.
Subprocessors
| Subprocessor | Purpose | Region |
|---|---|---|
| Google Firebase | Authentication | United States, EU |
| Hosting provider | Application hosting and storage | United States, EU |
| Payment processor | Billing for paid plans | United States |
| Email provider | Transactional email | United States |
International transfers
Where personal data moves outside the UK or EEA we rely on the standard contractual clauses, together with the UK addendum where it applies.
Security and breach notification
We maintain the measures described on our security page. If we become aware of a personal data breach affecting your data we will notify you without undue delay and share what we know.
Deletion and audit
On termination we delete personal data within 30 days unless retention is legally required. We will make available the information reasonably needed to demonstrate compliance with this addendum.
Signing a copy
Request a counter-signed copy from privacy@seedand.com.
Last updated 12 September 2026