HelloSeal Privacy Policy

1. Information we collect

We collect only the information we need to provide, secure and improve HelloSeal:

Account information

Your name, email address, username and profile picture. If you sign in with Google, Microsoft or GitHub, we receive these from that provider. If you sign up with email, we store your password only as a secure hash.

Content you provide

The messages and prompts you send, files you attach, agents and teams you create, and the results HelloSeal produces for you (for example slides, documents, apps and images).

Connected app data

When you choose to connect an app such as Gmail, Google Calendar, Google Drive, Google Docs or Google Meet, the information HelloSeal reads from or writes to that app to complete the tasks you ask for. See "Information from Google" below.

Posts you share

Content you choose to share to HelloSeal Explore, which is public.

Payment information

If you buy a plan or credits, our payment processor Stripe collects your payment details. We receive only limited details, such as your billing name, the last four digits of your card and your billing history. We never see or store your full card number.

Usage and technical information

How you use HelloSeal (for example features used and credits consumed), and technical data such as IP address, browser and device type, time zone, and log and diagnostic data.

Cookies and similar technologies

Cookies that keep you signed in and secure your session, and analytics cookies that help us understand how HelloSeal is used. See "Cookies" below.

2. How we use your information

We use your information to:

• Provide HelloSeal: create your account, sign you in, run your requests, and produce, store and show your results.
• Act in connected apps only when and how you ask, for example reading an email you point to, drafting a document or adding a calendar event.
• Process payments, manage your plan and credits, and send receipts and account notices.
• Keep HelloSeal safe: prevent fraud, abuse and spam (including with Google reCAPTCHA), and enforce our Terms of Service.
• Understand and improve how HelloSeal works, using aggregated usage information.
• Respond to your questions and support requests.
• Comply with legal obligations.

We do not sell your personal information, and we do not use the content of your chats or files for advertising.

3. Information from Google

Sign in with Google: if you sign in with Google, HelloSeal requests only your basic profile information and email address (the "email" and "profile" permissions) to create and identify your account.

Connected Google apps: if you choose to connect Gmail, Google Calendar, Google Drive, Google Docs or Google Meet, Google shows you exactly which permissions HelloSeal is asking for before you agree. HelloSeal uses that access only to perform the tasks you request in HelloSeal, for example finding or summarizing an email, drafting or updating a document, or scheduling a meeting. Access tokens for connected apps are stored encrypted and are used only for this purpose.

We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it unless you ask us to (for example in a support request), it is needed for security purposes such as investigating abuse, or it is required by law.

We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models. When a task requires it, the relevant content is sent to the AI model provider that runs your request, only to produce your result, under terms that do not allow that provider to train its models on it.

HelloSeal's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

You can disconnect a Google app at any time in HelloSeal under Settings, Connected apps, or remove HelloSeal's access in your Google Account at https://myaccount.google.com/permissions. When you disconnect, we stop accessing that app and delete the stored access tokens.

4. How we share information

We share information only as described here:

AI model providers

To run your requests, the relevant prompts, content and files are sent to the AI model providers that power HelloSeal (for example OpenAI, Anthropic, Google and ElevenLabs for voice). They process it to produce your result and are not permitted to use it to train their models.

Service providers

Companies that help us operate HelloSeal under contracts that require them to protect your information: cloud hosting and storage (Amazon Web Services), payment processing (Stripe), email delivery, security (Google reCAPTCHA) and analytics (Google Analytics, PostHog).

Your workspace

If you join a shared workspace, its administrators and members can see content shared within that workspace.

Public posts

Anything you choose to share to Explore is visible to everyone.

Legal and safety reasons

When required by law, or to protect the rights, safety and property of our users, the public or AXIOM STUDIO.

Business transfers

If AXIOM STUDIO is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

5. How long we keep information

We keep your information for as long as your account is active and as needed to provide HelloSeal. You can delete chats and results you no longer want. When you delete your account, or ask us to, we delete or anonymize your personal information, except where we must keep some of it for legal, tax, accounting or security reasons, and then only for as long as required.

Connected app access tokens are deleted when you disconnect the app or delete your account.

6. Security

We protect your information with measures such as encryption in transit (HTTPS) and at rest for sensitive data, access controls that limit access to people who need it, and monitoring for misuse. No method of transmission or storage is completely secure, but we work to protect your information and to respond quickly to any incident.

7. Cookies

HelloSeal uses essential cookies to keep you signed in and to protect your account, and analytics cookies (Google Analytics and PostHog) to understand how HelloSeal is used so we can improve it. You can control cookies in your browser settings. Blocking essential cookies will prevent you from signing in.

8. Your choices and rights

Depending on where you live, you may have the right to access, correct, download or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update your account details in Settings, disconnect apps at any time, and contact us to exercise any of these rights. We will not discriminate against you for exercising them.

9. Children

HelloSeal is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

10. International transfers

AXIOM STUDIO is based in the United States, and your information may be processed in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for these transfers.

11. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date and, for significant changes, notify you in HelloSeal or by email.

12. Contact us

If you have questions about this policy or your information, contact AXIOM STUDIO AI Inc. at [email protected] or through https://helloseal.ai/support.