Privacy Policy

The short version.

We keep what we need to run your account, your builds and your payment record, and nothing for advertising.
The images you upload are used only to build your image. We don't read them, share them or use them for anything else, and we delete them as soon as they have been used.
We never sell your data. We don't share it with anyone for their own purposes. The only people who handle it are the providers that help us run the service, such as Stripe for payments, and only for that job.
Payments are handled by Stripe. We never see or store your card number.

1. Scope

This policy explains what information Nassau Technologies, LLC (“we”) handles when you visit this website, create an account, build an image or buy Premium. It applies to the SEYSOFT service and to this website only. The Data page goes into more detail on what is stored and when it is deleted, and the Terms of Service set out who is responsible for what.

2. What we collect

Account information: your name, your email address, a hashed (not readable) version of your password, and when you agreed to our Terms.
Your builds: for each build, the image reference you gave or the name and size of the file you uploaded; the Raspberry Pi model, hostname and options you chose; whether you included Wi-Fi settings (not the password; see below); the status, dates, and the build log; and the size and checksum of the finished image.
Files you upload and images we build: the container image you upload, and the disk image we make from it. These are kept only for the short times described in section 7.
Wi-Fi details, if you enter them: the network name and password are used once, to write the settings into your image. We do not save them in our database. They are held in encrypted form for at most one hour so the build can read them, and are deleted as soon as it does. They do end up inside the image you download.
Payment records: if you buy Premium, the order number, the amount and any tax, the dates, and reference numbers from Stripe. Stripe handles your card or payment details; we do not receive or store them.
Messages: what you send through the contact form, and our replies.
Technical information: like most websites, our servers record your IP address, browser type and the pages requested. While you are signed in, your session also records your IP address and browser type. We use these to keep the service working and secure, and to limit abuse.

3. What we do not do

We do not open, read or review the contents of your uploaded files or your images, except automatically and only as needed to build your image (unpacking its files and reading its start-up command), or where we in good faith believe it is necessary to protect the security of the service, to deal with abuse, or to meet a legal obligation.

We do not use your images, files or settings for advertising, profiling, analytics or to train any model, and we do not run the software inside your image on our servers.

4. How we use information

to create and run your account, build your images, and let you download them;
to take payment, give you Premium, and keep the records tax and accounting require;
to send you the email the service needs: password resets, confirmation of a purchase, and replies to your messages. We don't send marketing email unless you ask for it;
to answer your questions and give support;
to keep the service secure, prevent fraud and abuse, and fix problems; and
to meet our legal obligations and enforce our Terms.

We do not sell or rent your personal information, we do not share it with advertisers or data brokers, and we do not share it with anyone for their own purposes. Your images and files are never shared with anyone.

We share information only in these limited cases:

Service providers who help us run the service and may use the information only to do that work for us. They are: our payment processor (Stripe); our email provider, which delivers the messages we send; and the hosting and infrastructure providers that run our servers.
Legal reasons: where the law, a court order or a valid government request requires it, or to protect the rights, property or safety of us, our users or others.
A change of ownership: if we are involved in a merger, acquisition or sale of assets, in which case your information stays subject to this policy.

6. Cookies

We use only the cookies the site needs to work: one to keep you signed in and one to protect forms from forgery. We use no advertising or analytics cookies and no third-party trackers. Details are on the Cookie Policy.

7. How long we keep things

What	How long
A file you uploaded	Until its build ends, then deleted. If you never start a build with it, deleted after 24 hours.
The image we built	24 hours from when it finished, then deleted.
Build log	Deleted with the image, after 24 hours.
Wi-Fi network name and password	Never saved. Held encrypted for at most one hour, then deleted as soon as the build reads it.
Build record (what you asked for, status, dates, checksum)	Kept as your build history while your account is open.
Account information	While your account is open, and until you ask us to close it.
Payment records	As long as tax, accounting and legal rules require, even after an account is closed.
Messages to us	As long as they are useful to answer your request, then deleted.
Sign-in sessions	20 hours after you were last active.
Server logs	A limited time, for security and fixing problems.

Routine backups of our servers, if we keep them, are outside this schedule and are replaced on their own cycle.

8. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections, hashed passwords, and keeping uploaded files and images in private storage that is not reachable from the web. Downloads are available only to the account that made the build. No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong, unique password, and keep your image files private if they contain Wi-Fi details or secrets.

9. Your rights

Depending on where you live (for example the European Economic Area, the United Kingdom or California), you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a copy, to object to or restrict certain uses, and to withdraw consent where we rely on it. To use any of these rights, including to have your account closed and your personal information erased, email support@seysoft.co. We may need to verify your identity, and we will reply within a reasonable time, normally within 30 days. We may keep information we are required by law to keep, such as payment records. You can also complain to your local data protection authority.

10. International transfers

We and our service providers may process information in countries other than your own. Where the law requires, we rely on appropriate safeguards for those transfers.

11. Children

The service is for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

12. Changes

We may update this policy from time to time. We will post the new version here and change the effective date. If a change is significant, we will take reasonable steps to let you know.

13. Contact

Nassau Technologies, LLC
Email: support@seysoft.co
Or use the contact form.