Privacy Policy

Introduction

Seedling Systems LLC ("we," "our," or "us") operates the Seedling platform and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business management platform and related services.

By using Seedling, you agree to the collection and use of information in accordance with this policy. We do not sell, trade, or rent your personal information to third parties for marketing purposes.

This Privacy Policy applies to your use of Seedling on the web and in our mobile or installable application (including any version distributed through an app store, such as the Google Play Store). It does not replace privacy policies of other websites or products you may access separately (for example, our company site at https://seedlingsystemsllc.com).

Data Controller

For personal information processed in connection with the Seedling Service, the data controller is Seedling Systems LLC, organized in Hawaii, United States. See Legal Information for how to contact us without publishing direct email or street addresses on this product site.

Information We Collect

Personal Information

• Name and contact information (email address, phone number)
• Organization details and business information
• Payment and billing information (processed securely by Stripe; we do not store full card numbers)
• Profile information and preferences
• Communication history with our support team

Usage Information

• Log data (IP address, browser type, access times, pages viewed)
• Device information and technical specifications
• Usage patterns and feature interactions
• Error reports and performance data

Business Data

• Customer information and contact details
• Invoice and financial transaction data
• Project and task management information
• Expense records and categories
• Team member information and roles

How We Use Your Information

• Provide and maintain our services
• Process payments and manage subscriptions
• Send important service updates and notifications
• Provide customer support and respond to inquiries
• Improve our platform and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations
• Analyze usage patterns to enhance user experience

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties for advertising or marketing purposes. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party services that help us operate our platform (e.g. payment processing, hosting, email, support tools). See "Third-Party Services" below for key providers.
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent for specific purposes

Third-Party Services

We use the following third-party services. Their handling of data is governed by their own privacy policies:

• Stripe. We use Stripe for payment processing. Payment data you submit is processed by Stripe in accordance with Stripe's Privacy Policy and Stripe's Terms.
• Google reCAPTCHA. We may use Google reCAPTCHA to help prevent abuse and spam. Use of reCAPTCHA is subject to Google's Privacy Policy and Google's Terms of Service. reCAPTCHA may collect information such as IP address and interaction data.

Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure data centers and infrastructure
• Employee training on data protection

Cookies and Tracking

We use functional cookies and similar technologies to:

• Maintain your session and preferences
• Remember your login status
• Improve website functionality and performance
• Analyze usage patterns to enhance our services

We do not use tracking cookies for advertising purposes or sell user data to advertisers. You can control cookie settings through your browser preferences. Where required by law (e.g. in the EEA/UK), we will obtain your consent for any non-essential cookies before they are placed.

Legal Basis for Processing (EEA/UK)

For users in the European Economic Area and United Kingdom, we process personal data based on: (a) contract—to provide the Service and perform our agreement with you; (b) legal obligation—where required by law (e.g. tax, fraud); (c) legitimate interests—to operate, secure, and improve our Service, and to prevent fraud; and (d) consent—where we ask for your consent (e.g. optional communications). You may withdraw consent at any time where it applies.

Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Export your data in a machine-readable format
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent where applicable

To exercise any of these rights, contact us using the options in the Contact Us section below. We will respond within the time required by applicable law (for example, within 30 days where required). You may also have the right to lodge a complaint with a supervisory authority in your country.

US State Privacy Rights (California and Others)

Residents of California and certain other US states may have additional rights, such as the right to know, delete, correct, or limit use of personal information, and the right to non-discrimination for exercising these rights.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. To exercise your state privacy rights, contact us using the options in the Contact Us section below.

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we will delete or anonymize your personal information, except where retention is required for legal, security, or business purposes.

When you delete an organization you own, we remove that organization and associated business records from our primary application database without a built-in “undo” or 30-day trash window in the product. Standard database backups and infrastructure logs may retain copies for a limited period consistent with our security and operations practices; those copies are not exposed as a self-service restore for deleted organizations.

We recommend exporting any invoices, reports, or other records you need before deletion. If you require assistance after deletion (for example, legal or tax holds), contact support; we cannot guarantee recovery of data once removed from production systems.

Children's Privacy

Seedling is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, want to exercise privacy rights, or need to reach Seedling Systems LLC about the Seedling Service: