This Privacy Policy explains how Seqoura ("Seqoura", "we", "us") collects, uses, and protects personal data when you use seqoura.app.
1. Data We Collect
- Account data from Google OAuth (name, email, avatar URL).
- Campaign, template, contact, and sending activity data.
- Billing metadata (Stripe customer/subscription identifiers).
- Product analytics and usage events when analytics consent is granted.
- Technical logs (IP, browser, access timestamps, error logs).
2. How We Use Data
- Operate and secure the Service.
- Send campaigns on your behalf.
- Process subscriptions and billing.
- Enforce plan limits and prevent abuse.
- Understand feature usage and improve product UX when analytics is enabled.
- Provide support and improve reliability.
We do not sell personal data and do not run advertising trackers.
3. Legal Bases (GDPR)
- Performance of contract: to provide Seqoura functionality.
- Legitimate interests: security, abuse prevention, product quality.
- Legal obligation: tax/accounting retention where required.
- Consent: where consent is explicitly requested.
4. Third-Party Processors
We use the following providers to operate the Service:
- OpenAI: AI generation and editing of campaign content (see section 5).
- Google: sign-in (OAuth) and, only with consent, Google Analytics.
- Stripe: subscriptions and payments.
- Resend: delivery of the campaign emails you send.
- Cloudinary: storage and delivery of campaign images.
- Pexels: stock image search (search terms only).
- Neon: PostgreSQL database hosting.
- Vercel: application hosting and aggregated web analytics.
- Upstash: rate limiting and scheduled-send queueing.
- Sentry: error monitoring.
- PostHog: product analytics, only with consent.
5. AI Processing of Campaign Content
Seqoura uses the OpenAI API to generate and edit campaigns. When you use an AI feature, the content needed for that request is sent to OpenAI: your prompt or chat message, the campaign content being generated or edited, your brand settings, and, if you ask Seqoura to analyse a website, text and design signals taken from that public website.
Your contacts are not sent to OpenAI. To support personalization, the AI may receive the names of your custom contact fields (for example "first name"), never their values or recipients' email addresses.
Under OpenAI's API terms, data submitted through the API is not used to train OpenAI's models, and OpenAI may retain it for a limited period for abuse monitoring. Seqoura does not use your campaign content to train AI models.
6. International Transfers
Some providers process data outside the EU/EEA. We rely on appropriate safeguards such as contractual protections where applicable.
7. Retention
Account data is retained while your account is active. After deletion requests, operational data is removed within a reasonable period, except where legal retention obligations apply.
8. Your Rights
Under GDPR, you may request access, correction, deletion, portability, or objection to processing by contacting hello@seqoura.app.
9. Cookies
We use essential cookies for authentication and security. Optional analytics storage is enabled only after consent, and you can change that choice at any time with the Cookie settings link in the site footer. See the Cookie Policy for details.
10. Security
We use reasonable technical and organizational safeguards, including encryption in transit and restricted production access.
11. Contact
Email: hello@seqoura.app
Website: https://seqoura.app