Privacy Policy
Effective date: April 7, 2026
1. Overview
SeaweedBar ("we", "us", or "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights over it.
2. Information We Collect
Account information: When you sign up, we collect your name, email address, phone number, and password (stored as a secure hash).
CRM data: All deals, contacts, organizations, and activities you create within the app are stored in our database and are exclusively yours.
Usage data: We collect server logs including IP addresses, browser type, pages visited, and timestamps. This data is used for security monitoring and service improvement.
Payment information: If you subscribe, payment is processed by Stripe. We do not store your full card number — only a Stripe customer ID.
3. How We Use Your Information
- To provide, maintain, and improve the service
- To process subscription payments
- To send service-related emails (account confirmations, billing notifications)
- To respond to support requests
- To detect and prevent fraud or security incidents
We do not sell your personal data to third parties. We do not use your CRM data for advertising.
4. Data Storage and Security
Your data is stored in a PostgreSQL database hosted on secure, encrypted infrastructure. We use industry-standard practices including:
- Bcrypt password hashing
- HTTPS encryption in transit
- Session tokens stored securely in HTTP-only cookies
- Data isolated per user — no user can access another's data
5. Data Sharing
We share your data only with:
- Stripe — for payment processing (subject to Stripe's Privacy Policy)
- Replit — our hosting provider (infrastructure only, not application data)
- Law enforcement — only when required by law
6. Cookies
We use a single session cookie (swb_sid) to keep you logged in. This cookie is HTTP-only and not accessible to JavaScript. It is not used for tracking or advertising.
7. Your Rights
You have the right to:
- Access all data we hold about you
- Correct inaccurate data via Account Settings
- Delete your account and all associated data by contacting us
- Export your CRM data upon request
To exercise these rights, email us at support@seaweedbar.com.
8. Data Retention
We retain your data while your account is active. If you cancel, your data is retained for 30 days before deletion, allowing time for export. Server logs are retained for 90 days.
9. Children's Privacy
Our service is not directed to anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this policy periodically. We will notify registered users by email of significant changes at least 14 days in advance. The "effective date" at the top reflects the latest revision.
11. Contact Us
For privacy questions or data requests: support@seaweedbar.com