Privacy Policy

Seeral is an AI-powered short-form video editor developed and operated by Posy SPA, a company incorporated in Chile. When we say "Seeral", "we", "us" or "our", we refer to Posy SPA in relation to the service offered at seeral.co.

This policy describes what personal information we collect, how we use it, who we share it with, and what rights you have over it. If you have questions, email legal@seeral.co.

We collect information you provide directly, information generated by your use of the service, and information we receive from third parties when you connect external accounts.

2.1. Account information

• Email, password (stored as a hash), name.
• If you sign up via an external provider (Google, etc.), we receive your email and name from that provider.
• Workspace you belong to and your role within it (Owner, Admin, Editor, Viewer).

2.2. Content you upload

• Videos you upload to the platform (MP4 or other compatible formats).
• Voice scripts (text) you write or generate with AI.
• Audio generated by TTS (text-to-speech) from your scripts.
• Logos, colors, fonts and other brand assets (Brand Kits).
• URLs of inspiration videos (YouTube, TikTok, Instagram, etc.) you import for analysis.
• Publishing metadata: titles, descriptions, hashtags.

2.3. Credentials for connected platforms

When you connect a YouTube, Facebook, Instagram or TikTok account so Seeral can publish on your behalf, we store the corresponding OAuth tokens encrypted with AES-256-GCM using a server-only encryption key. These tokens are opaque — we never see or store your password for those platforms.

2.4. Usage information

• Technical logs: IP, browser, operating system, timestamps.
• Usage metrics: which features you use, how many projects you create, errors that occur.
• Cookies strictly necessary to keep your session active.

We use collected data exclusively to:

• Provide the service: edit your video, generate captions, run transcription and speech synthesis, render the final output, schedule publications.
• Publish content on your behalf on the platforms you explicitly connected, using the tokens you authorized.
• Generate content with AI: we send fragments of your scripts, captions and descriptions to third-party AI models (see section 5) to generate rewrites, hashtags, translations, B-roll queries, etc.
• Improve the product: aggregated and anonymous usage analysis to understand which features to improve.
• Communicate with you: notifications about your account, service updates, technical support when you request it.
• Meet legal obligations when applicable.

We do not sell your personal information to third parties. We do not use it for targeted advertising outside Seeral.

We process your data under the following legal bases:

• Contract performance: we use your data to provide the service you contract by creating an account.
• Consent: when you explicitly connect a social media account or upload content.
• Legitimate interest: to improve the service, prevent fraud, maintain security.
• Legal obligation: when the law requires us to retain or disclose information.

Seeral uses external providers for infrastructure and specific features. Each has its own privacy policy and limited access only to the data strictly necessary for its function:

5.1. Infrastructure

We use cloud infrastructure providers in the United States and Europe for hosting, database, file storage (videos, audio, thumbnails) and compute processing for video rendering. These providers receive only the data strictly necessary to host and serve the application, and operate under data processing agreements (DPAs) that comply with international standards (GDPR, SOC 2).

5.2. AI and content-processing services

We use external AI providers for:

• Assisted text generation: fragments of your scripts, captions and descriptions are processed to generate rewrites, hashtags, translations and B-roll search queries.
• Audio transcription: the audio of your videos is transcribed to text to generate captions.
• Speech synthesis (TTS): your scripts are converted to audio when you request it.
• Stock footage and images: we index catalogs from external stock providers for B-roll.

These providers receive only the specific fragments necessary for their function, are not permitted to use your content to train their models without your explicit consent, and operate under our data processing agreements.

5.3. Publishing to social platforms

When you connect an account on the following platforms, Seeral uses each platform's official API to publish content you authorize. We do not access your content on those platforms beyond what is necessary to confirm the connection:

• Google / YouTube — YouTube Data API v3 (scopes: youtube.upload, youtube.readonly).
• Meta (Facebook + Instagram) — Graph API (scopes: pages_show_list, pages_manage_posts, instagram_basic, instagram_content_publish, business_management).
• TikTok — TikTok for Developers API (scopes: user.info.basic, video.publish, video.upload).

5.4. Payment processing

Subscription payments are processed through Polar.sh, which acts as Merchant of Record. When you subscribe to a paid plan, Polar receives and processes:

• Your billing name and email
• Payment method data (card) — processed via Stripe under PCI-DSS. Seeral never receives or stores the full card number, CVV or expiration date
• Billing address and country (needed for tax calculation)
• Tax identification (RUT / VAT / CUIT, optional for B2B)

From Polar, Seeral only receives: customer identifier, subscription identifier, subscription status (active, cancelled, expired) and current period end date. We do not have access to your financial information.

Polar and Stripe operate under their own privacy policies as independent controllers for the financial data they process. See Polar's policy and Stripe's policy for more detail.

We do not share your personal information with third parties outside the providers listed in section 5, except:

• With your explicit consent: for example, when you publish content to your connected social media.
• For legal requirements: if a competent authority requires information via a court order.
• In case of corporate change: if Posy SPA is acquired, merged or reorganized, information may be transferred under the same obligations as this policy.

As the owner of your data, you have the right to:

• Access: know what data we have about you and request a copy.
• Rectification: correct inaccurate or outdated data.
• Deletion: delete your account and all associated content. Do it from Settings → Account → Delete account, or write to legal@seeral.co.
• Portability: receive your data in a structured, machine-readable format.
• Objection: limit or withdraw your consent to data processing at any time.
• Disconnect external accounts: from Settings → Connected accounts, you can revoke Seeral's access to your YouTube / Meta / TikTok accounts whenever you want. This also revokes the tokens on the source platform.

• Account data: while your account is active. When deleted, removed within 30 days.
• Content (videos, scripts, audio): until you delete it or delete your account.
• Connected-platform tokens: until you disconnect the account in question.
• Technical logs: up to 90 days for debugging and security.
• Legally required data: when applicable (billing, tax), retained for the period Chilean law requires.

We implement reasonable technical and organizational measures to protect your data:

• Encryption in transit (TLS / HTTPS) for all connections.
• Encryption at rest for OAuth tokens and sensitive credentials.
• Per-user access and authorization controls across every data layer, ensuring you only access your own resources.
• Log auditing and continuous security monitoring.
• Restricted production-data access limited to strictly necessary personnel.

No measure is 100% infallible. If you find a vulnerability, email security@seeral.co.

Our infrastructure providers are in the United States and Europe. By using Seeral, you accept that your data may be processed outside your country of residence, subject to the protections of this policy.

Seeral is not directed at children under 13. We do not knowingly collect information from people under 13. If we become aware that we received data from a minor without parental consent, we delete it.

We may update this policy periodically. The "Last updated" date above reflects the current version. Material changes are communicated by email or by a prominent notification in the application at least 30 days before they take effect.

For questions, complaints or to exercise any of your rights:

• Legal email: legal@seeral.co
• Security email: security@seeral.co
• Company: Posy SPA, a company incorporated in Chile.