Privacy Policy

1. Who we are

Sea True provides automated underwater photo enhancement and is the controller of personal data used to operate that service. This Policy applies when you visit the website, sign in, upload a batch, buy processing, receive service emails or contact us.

Paddle independently controls payment and checkout data as merchant of record. Its processing is explained in Paddle’s Privacy Notice.

2. Data we collect

Account and communication data

Your email address, account identifier, login-link records, preview eligibility, and messages you send us.

Photos and batch data

The JPEG files you choose, filenames, file sizes and types, enhanced images, thumbnails, download archives, processing status and batch timestamps. Photos may contain personal data, including people, location clues or embedded metadata present in the file you provide.

Purchase data

Paddle transaction identifiers, order status, price, currency and payment timestamps. Paddle collects your payment method and billing details; Sea True does not receive or store full card details.

Technical data

Session and device-cookie identifiers, IP address, request and security logs, browser information, and diagnostic data needed to deliver and protect the service.

3. How and why we use data

• Provide the service: authenticate you, receive and enhance photos, show progress, unlock paid batches, create downloads and send completion emails. This is necessary to perform our contract with you.
• Free preview: remember whether an account or browser has used its preview. This supports our legitimate interest in offering a fair trial and preventing abuse.
• Service messages: send login links, processing updates and an unpaid-batch deletion reminder. These messages are part of the service, not marketing.
• Security and reliability: detect misuse, troubleshoot faults, protect accounts and keep audit records. We rely on legitimate interests and, where relevant, legal obligations.
• Payments and records: reconcile Paddle transactions, handle support and keep records required for tax, accounting, fraud prevention and legal claims.

We do not use your photos to train an AI model, sell personal data, or build advertising profiles.

4. The photo lifecycle

Your browser uploads photos directly to protected object storage using short-lived upload links. Automated workers read them to create enhanced images and thumbnails. When a batch completes successfully, Sea True deletes the uploaded originals. If an unpaid batch is still awaiting payment, we send a reminder after about 24 hours and delete its photos after about 48 hours.

Enhanced photos and temporary download archives are kept while they are needed to provide your downloads and support the service. You should download and back up results you want to keep.

5. Essential cookies

Sea True currently uses essential first-party cookies only. They do not follow you across unrelated websites.

These cookies are necessary for account security, saved navigation and preview eligibility. Blocking them may prevent login, upload or preview features from working.

6. Who receives data

We disclose only what is needed to run Sea True:

• Cloud hosting and storage providers that host the application, database, photo storage and processing jobs;
• Email delivery providers that send login links and batch notifications;
• Paddle for checkout, tax, fraud prevention, receipts, buyer support and refunds;
• Professional advisers and authorities where reasonably necessary to protect rights, comply with law or respond to valid legal requests; and
• A successor operator if Sea True is reorganised, sold or transferred, subject to appropriate confidentiality and notice.

Some providers may process data outside your country. Where required, we use recognised transfer safeguards, such as adequacy decisions or approved contractual clauses.

7. How long we keep data

We keep each category only as long as needed for the purposes above:

• login links expire after 15 minutes; session cookies after up to 30 days; and preview device cookies after up to one year;
• original and unpaid photo files follow the deletion timings in section 4;
• enhanced results and related batch records remain while downloads and customer support are provided, unless you ask for earlier deletion where available;
• account, transaction, security and support records are retained for the period reasonably needed for the account, legal obligations, fraud prevention and legal claims.

Deletion from active systems may be followed by a limited period in protected backups before those copies cycle out.

8. Security

We use measures designed to protect personal data, including passwordless login, hashed login and device tokens, access controls, protected storage, short-lived file links, encrypted transport and verified payment notifications. No online service can guarantee absolute security.

9. Your privacy rights

Depending on where you live, you may ask to access, correct, delete or receive a copy of your personal data; restrict or object to certain processing; or withdraw consent where consent is the basis. You may also complain to your local data-protection authority.

We may need to verify your identity before completing a request. Some information may be retained where the law requires it or where it is needed to establish, exercise or defend legal claims. We do not make decisions about you that produce legal or similarly significant effects using solely automated processing.

Sea True is not intended for children under 16, and we do not knowingly collect their data. A parent or guardian who believes a child has provided data should contact us.

10. Contact and changes

For privacy questions or to exercise a right, email support@seatrue.app. For payment-data questions, contact Paddle through paddle.net.

We may update this Policy as Sea True changes. We will post the new version here, update the effective date and provide additional notice where a change materially affects your rights.