Privacy Policy.

1. Who this policy covers

Andrew Lee Jenkins LLC operates Seedly. This policy covers information handled by the Seedly websites, customer portal, Learning Center, and demos we operate. Contact support@andrewleejenkins.com for privacy requests.

Customer-operated deployments are separate. The operator decides how its customers’ or members’ data is collected and used and must provide its own privacy information. Buying our code does not by itself send the deployment’s customer database to Seedly. If you provide data to Seedly for support or use a Seedly-hosted demo, that information falls within our own processing.

2. Information collected

Information you provide can include name, email, account details, purchase and license information, demo requests, learning progress, support messages, feedback, and files you choose to submit. Referral participation can require payout and tax details.

Payment-card details are handled by the payment processor. We receive the transaction information needed to fulfill orders, manage licenses, handle disputes, and keep financial records.

Technical information can include network address, browser and device details, security events, session identifiers, consent preferences, and request logs. Where enabled with consent, analytics can record page views and interactions. Attribution and referral identifiers can connect a visit to a signup or order.

3. Purposes and legal bases

We use information to provide requested services, authenticate accounts, deliver purchases, save learning progress, respond to support, send transactional messages, administer referrals, and maintain records. We also use proportionate information to protect the service and investigate abuse.

Where applicable, the legal basis is contract performance for requested services, legal obligations for required records, legitimate interests for security and administration, and consent for optional analytics or marketing where required. You can withdraw consent without affecting processing that was lawful before withdrawal.

4. Service providers and disclosures

Providers may handle information to host the service, store records, process payments, deliver email, prevent abuse, or provide a hosted demo. We may also disclose relevant information where required by law, to defend legal claims, or as part of a business transfer subject to applicable protections.

Vercel hosts the consolidated website and customer portal, and PlanetScale stores its account, purchase, license, referral, and learning records. Cloudflare provides site delivery, security features, and private package storage. Stripe processes storefront payments. An email delivery provider sends account and purchase messages.

During the migration, separate product portals and demo brokers continue to run on Railway. Their hosted demos can use Convex, Vercel, PostHog, Sentry, and integrations configured for the relevant product. Those existing portals use SendGrid for transactional email. Google Analytics and Microsoft Clarity on the older storefront are subject to consent; the consolidated website does not load either tool at publication.

We do not sell personal information. Any change involving advertising-related sharing must be assessed and disclosed before implementation.

5. Cookies and similar storage

Essential storage supports authentication, security, saved choices, and requested functions. Optional analytics storage is subject to the consent choices offered by the site. The Cookie Policy describes the categories and controls.

Learning progress saved only in your browser remains on that device unless an account or synchronization feature sends it to our service. Deleting browser storage can remove locally saved progress.

6. Retention

Purchase and license records are retained without a fixed expiry to support continuing access to licensed products, payment disputes, and legal obligations. Account, referral, support, and learning records are kept for as long as needed for their stated purposes, subject to applicable retention requirements. Separate hosted-product services may have their own retention terms; the existing hosted CRM policy provides a 30-day deletion period after account termination and 12 months for its audit logs.

We evaluate deletion requests against continuing obligations for taxes, disputes, fraud prevention, and delivery of purchased licenses. Backup copies and provider records may take additional time to expire under their applicable retention schedules.

7. Security

We use access controls and technical safeguards appropriate to the service. No system can promise absolute security. Protect your login, do not submit credentials through ordinary support messages, and contact us if you suspect unauthorized access.

Safeguards vary by service and provider. We do not represent that every customer-operated deployment uses the safeguards of a Seedly-operated service.

8. Your choices and rights

You can unsubscribe from marketing using the message link and request access, correction, deletion, or a copy of your information by contacting support@andrewleejenkins.com. Transactional messages needed to deliver a purchase or protect an account may still be sent.

Depending on your location and applicable law, additional rights can include restricting or objecting to processing, portability, withdrawing consent, appealing a denied request, or complaining to a regulator. We may verify your identity and respond within the applicable legal timeframe. We will not discriminate against you for exercising protected rights.

For data in a customer-operated Seedly deployment, contact that operator. We cannot delete or export a database that we do not control.

9. International processing and children

Information may be processed in the United States and other countries where our providers operate. Contact us for information about safeguards applicable to a particular international transfer.

Our storefront and accounts are intended for adults aged 18 or older. We do not knowingly collect children’s personal information. Contact us if you believe a child has submitted personal data.

10. Updates to this policy

We will identify revisions with a date and provide additional notice or obtain consent where required. A change to this notice does not authorize a new use of existing data that requires separate consent.