Privacy Policy

This Privacy Policy explains how Seaglass collects, uses, discloses, and protects personal information when you visit our websites, contact us, or use Seaglass products and services.

For content submitted to Seaglass by or on behalf of an enterprise customer, Seaglass generally acts as a processor or service provider for that customer. The customer determines what content is submitted and how authorized users may use Seaglass. If your organization has a written agreement, data processing addendum, or other privacy terms with Seaglass, those terms control where they conflict with this Privacy Policy.

This Privacy Policy does not apply to third-party websites, services, or applications that we do not own or control.

Account and contact information: We may collect your name, work email address, employer, role, team, authentication information, and related account or customer administration details.

Customer content: Seaglass processes content that customers and authorized users submit, upload, create, or connect to the service, including documents, notes, projects, prompts, chat messages, generated outputs, citations, feedback, attachments, and related metadata. Customer content may include personal information, confidential business information, financial information, or other sensitive information depending on what users choose to submit.

Usage and device information: We may collect information about how you access and use Seaglass, such as IP address, browser type, device identifiers, operating system, referring pages, pages viewed, feature usage, timestamps, log data, and performance or diagnostic information.

Communications and support information: If you contact us, request a demo, provide feedback, or interact with support, we may collect the information you choose to provide and records of those communications.

Integrated sources: If your organization enables integrations, email workflows, file uploads, or other connected features, we may process information from those sources as directed by your organization and authorized users.

We collect information directly from you, from your organization and other authorized users, from integrations or connected sources enabled by your organization, from service providers that support Seaglass, and from public or business contact sources where permitted by law.

If you submit personal information about another person to Seaglass, you are responsible for ensuring you have the authority to do so and that the information may be processed as described in this Privacy Policy and any applicable customer agreement.

We use personal information and customer content to provide, operate, maintain, secure, and improve Seaglass, including to authenticate users, administer accounts, process uploaded content, retrieve relevant source material, generate requested AI outputs, provide citations, troubleshoot issues, and support customer workflows.

We also use information, including account-level or user-level usage, event, log, diagnostic, and analytics data, to communicate with you, respond to requests, manage customer relationships, analyze product performance, develop and improve features, detect and prevent fraud or abuse, enforce agreements, and comply with legal obligations.

We do not sell customer content. We do not use customer content for third-party advertising. Our AI model training commitment is described in Section 6.

We may also use aggregated or de-identified information to understand and improve Seaglass, measure product performance, and develop new capabilities. We do not attempt to re-identify information that we maintain in de-identified form except as permitted by law to test whether de-identification is effective.

Where laws such as the GDPR or UK GDPR apply, our legal bases for processing personal information may include performing a contract with you or your organization, pursuing legitimate interests such as providing and securing Seaglass, complying with legal obligations, and consent where required.

When Seaglass processes customer content as a processor or service provider, the customer is generally responsible for establishing the applicable legal basis for that content.

Seaglass uses AI systems to help customers parse documents, retrieve relevant knowledge, generate drafts and answers, extract structured information, and perform related workflow tasks. When necessary to provide these features, customer content, prompts, outputs, and metadata may be processed by AI model providers or other subprocessors acting on our behalf.

We do not use customer content to train general-purpose AI models unless your organization expressly directs or permits us to do so in writing.

We use administrative, contractual, and technical controls designed to limit provider access and use of customer content to the purposes of providing and securing the service. Your organization may have additional commitments in its customer agreement or data processing addendum.

Users are responsible for reviewing AI-generated outputs before relying on them, especially for legal, financial, investment, regulatory, or other high-impact decisions.

We use cookies and similar technologies to operate Seaglass, remember preferences, improve security, understand product usage, analyze website traffic, and improve our services. Analytics may include account-level or user-level events and logs about pages viewed, features used, interactions, timestamps, performance, and diagnostics. Some cookies are necessary for the service to function, while others help us understand performance and usage.

You can set your browser to block or delete cookies. Blocking certain cookies may affect website or product functionality. We do not currently respond to browser Do Not Track signals.

Service providers and subprocessors: We share information with vendors that help us provide Seaglass, such as cloud hosting, database and storage, authentication, security, AI model processing, document parsing, analytics, observability, email delivery, customer support, and business operations providers. These providers are authorized to use information only to perform services for us or as otherwise permitted by law.

Customer administrators and authorized users: Information in a customer workspace may be visible to the customer's administrators and other authorized users according to that customer's settings, permissions, and agreements.

Legal, safety, and compliance: We may disclose information if we believe it is necessary to comply with law, legal process, or governmental requests; protect the rights, property, or safety of Seaglass, our customers, users, or others; detect or prevent security incidents, fraud, or abuse; or enforce agreements.

Business transfers: If Seaglass is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

With your direction or consent: We may share information when you or your organization directs us to do so or gives us consent.

We use technical, administrative, and organizational safeguards designed to protect information, including access controls, encryption in transit and at rest where appropriate, monitoring, least-privilege practices, and security review processes.

No method of transmission or storage is completely secure. If you believe your account or information has been compromised, contact us promptly.

We retain personal information and customer content for as long as needed to provide Seaglass, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business needs.

Information is stored in cloud infrastructure, databases, backups, logs, and business systems operated by Seaglass and our service providers. These systems are primarily located in the United States, and information may also be processed in other jurisdictions where our service providers operate.

Customer content: We generally retain customer content for the duration of the customer's relationship with Seaglass unless deleted by authorized users, requested by the customer, or otherwise specified in the customer agreement. Deleted customer content may persist in backups for up to 90 days before being overwritten or purged through ordinary backup cycles, unless longer retention is required for security, legal, or compliance purposes.

Logs, security records, and business records: Application logs, audit logs, and security records are generally retained for up to 12 months unless needed longer to investigate security events, support customers, comply with law, or enforce agreements. Business, legal, tax, and account records may be retained for up to 7 years where required or appropriate.

Prospect, marketing, and support information: We retain this information while it remains relevant to our relationship with you, unless a longer retention period is required or permitted by law. You may request deletion or opt out of marketing communications as described in this Policy.

Seaglass is based in the United States, and information may be processed in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where required, we use appropriate safeguards for international transfers, such as contractual commitments or standard data protection clauses.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or portability of your personal information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; or to opt out of certain sharing or targeted advertising.

California and other U.S. state privacy laws may provide additional rights, including the right to know the categories of personal information we collect, use, disclose, or retain; the right to request correction or deletion; and the right to appeal certain decisions where required by law.

Seaglass does not sell personal information in the ordinary meaning of that term, and we do not share personal information for cross-context behavioral advertising.

If your personal information is contained in customer content controlled by your organization, we may refer your request to that organization or ask that you contact the organization directly. To make a privacy request, email privacy@withseaglass.com with the subject line "Privacy Request." We may need to verify your identity and authority before completing a request.

Seaglass is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to Seaglass, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, such as by updating this page, notifying customer administrators, or sending an email to the address associated with your account.

If you have questions about this Privacy Policy or want to exercise privacy rights, contact Seaglass at privacy@withseaglass.com.

If your organization has a Seaglass customer agreement, data processing addendum, or security documentation with more specific privacy or subprocessor terms, those documents may provide additional details about Seaglass's processing of customer content.

Please include enough detail for us to understand and respond to your request. For security, do not include passwords, secrets, or unnecessary sensitive information in your email.