1. Who we are
SeaOrb LLC, a limited liability company registered in the State of Oregon, United States, is the controller of personal data described in this policy. You can reach us at [email protected].
This policy covers the SeaOrb desktop application, the seaorb.io website, and our support and billing operations.
2. The short version
We collect the minimum we need to give you an account, take payment, and answer your messages. We do not sell personal data, we do not share it for advertising, and we do not run advertising or analytics trackers on this website. Your strategies are yours; we do not trade on them or pass them to anyone.
3. What we collect
Information you give us
- Account details — your email address and, if you provide one, your name.
- Billing details — handled by Stripe. We receive a customer reference, your plan and its status, the country and partial card details needed for tax and fraud checks, and invoices. We never receive or store your full card number.
- Messages you send us — what you write in the contact form or by email, including your name, email address, and any phone number or company name you choose to add, so that we can reply.
- Release-notification requests — if you ask to be told when the macOS build is available, your email address and optional name.
Information collected automatically
- Server and application logs — IP address, timestamps, pages or endpoints requested, and error diagnostics. These keep the Service running and secure and let us diagnose faults.
- Strictly necessary cookies and local storage — see section 6.
What stays on your machine
The strategies, watchlists, and workspace layout you create in the application are stored locally on your device and in the account data needed to run the Service. We do not inspect them for any purpose other than operating and supporting the Service, and we never share them with third parties.
4. Why we use it, and on what legal basis
- To provide the Service — creating your account, delivering the application, applying your plan. Basis: performance of a contract.
- To take payment — subscriptions, renewals, refunds, invoices, tax. Basis: performance of a contract, and legal obligation for tax and accounting records.
- To support you — answering your messages. Basis: performance of a contract, and our legitimate interest in responding to enquiries.
- To keep the Service secure and working — logging, fraud and abuse prevention, debugging. Basis: legitimate interests.
- To tell you about the release you asked about, or about material changes to the Service or these policies. Basis: consent for release notifications, which you can withdraw at any time; performance of a contract for service notices.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects.
5. Who processes data on our behalf
We keep the list of processors short and use each one only for what it is named for:
- Stripe — payment processing, subscription billing, and the related fraud and tax obligations.
- Resend — delivery of transactional email, including replies to your messages and release notifications.
- Microsoft Azure — hosting for this website.
- Apple — code signing and notarisation of the macOS application. Apple's own terms apply to any interaction you have with Apple directly.
Each is bound by contract to process data only on our instructions. We do not sell personal data, and we do not share it with advertisers or data brokers. We may disclose data where the law requires it, or to establish or defend legal claims.
6. Cookies and local storage
This website uses only what it needs to function. Interactive pages — the contact form and the download page — use a session cookie to keep your form working while you are on the page. The application stores your preferences and workspace layout locally on your own device.
We do not use advertising cookies, third-party analytics, tracking pixels, or cross-site profiling of any kind. There is nothing here to opt out of, because we did not put it here.
7. How long we keep it
- Account data — while your account exists, then deleted or anonymised within 90 days of closure, unless we must keep it longer by law.
- Billing and tax records — typically seven years, as US tax rules require.
- Support correspondence — up to two years, so we can follow up on an earlier conversation.
- Server logs — typically 30 to 90 days.
- Release-notification addresses — until the release is sent or you unsubscribe, whichever comes first.
8. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, export it in a portable format, object to or restrict certain processing, and withdraw consent you have given. If you are in the UK or the EEA, these rights come from the UK GDPR and the EU GDPR. If you are in California, the CCPA/CPRA gives you rights to know, delete, correct, and opt out of sale or sharing — we do not sell or share personal data as those terms are defined.
To exercise any of these, email [email protected]. We will respond within 30 days and will not treat you differently for asking. If you believe we have handled your data badly, you may complain to your local data protection authority — but we would rather you told us first.
9. International transfers
We operate from the United States, and our processors may handle data in the United States and elsewhere. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, or on our processors' certification under the EU–US Data Privacy Framework.
10. Security
Data is transmitted over TLS and held on infrastructure with access limited to what is necessary to run the Service. Card details never reach our systems. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authority as the law requires.
11. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
If we change this policy materially, we will give notice through the Service or by email before the change takes effect. The "last updated" date above always reflects the current version.
13. Contact
Privacy questions or requests: [email protected], or via our contact form.