Privacy Policy

Seedly (“Seedly”, “we”, “us”) is a multi-network social publishing tool: you write one post and publish it natively to the social networks you connect. Seedly is a product of WP Origami, a French société par actions simplifiée (SAS), which is the data controller responsible for the personal data described here. This policy explains what we collect, how we use it, and the choices you have. Questions? contact@seedly.social.

1. Information we collect

• Account: your email address and password (passwords are stored hashed by our authentication provider; we never see them).
• Workspace & content: the workspaces, posts, drafts, schedules, per-network instructions and brand details you create.
• Connected social accounts: when you connect a network, we receive and store (server-side only) an access token plus the public identifiers and names of the destinations you authorize (Pages, accounts, channels), so we can publish on your behalf.
• Usage data: basic technical logs needed to operate and secure the service.

2. Cookies and local storage on your device

Seedly stores and accesses information directly on your device, and needs it to operate. Specifically:

• Essential cookies: our authentication provider (Supabase) sets a session cookie so you stay signed in, and we set short-lived cookies during a network’s OAuth flow to protect it against cross-site request forgery. These are strictly necessary — without them you cannot sign in or connect an account.
• Local storage: we keep some of your working data and preferences in your browser’s local storage (for example a draft in progress, your selected networks, and per-network default settings) so the app stays fast and you don’t lose work.

We use these solely to provide the service. We do not use cookies or local storage for advertising, cross-site tracking or profiling, and we do not allow third parties to place tracking technologies through Seedly. You can clear this data at any time from your browser settings (doing so signs you out).

3. How we use your information

• To provide the service: composing, scheduling and publishing your posts to the networks you connect.
• To keep your account secure and the service reliable.
• We do not sell your personal information, and we do not use your content to train AI models.

4. Meta Platform Data (Facebook & Instagram)

When you connect a Facebook Page or an Instagram professional account, we use Meta’s APIs only to (a) read the list of Pages/accounts you manage and their basic info (id, name), and (b) publish the content you create to the destination you choose. We store the resulting access token securely on our servers and use it solely to perform the actions you request. We request only the permissions needed for this: pages_manage_posts, pages_read_engagement, instagram_business_basic, instagram_business_content_publish. You can revoke this access at any time (see Data deletion below, or your Facebook/Instagram settings).

5. YouTube API Services (Google)

Seedly lets you publish videos to your own YouTube channel. This feature uses YouTube API Services. By connecting YouTube, you agree to the YouTube Terms of Service, and Google’s Privacy Policy also applies. We use the youtube.upload scope solely to upload the videos you create, at your explicit request, and the youtube.readonlyscope solely to read your channel’s name to label the connection. We do not read, collect, aggregate or share any other YouTube data, and we neveruse YouTube data for advertising or to train AI/ML models. Access tokens are stored server-side only. You can revoke Seedly’s access to your Google account at any time at myaccount.google.com/permissions, or by disconnecting YouTube in Seedly, which immediately deletes the stored token.

6. How we store & share data

We run Seedly on trusted infrastructure providers, Supabase (database & authentication) and Vercel(hosting), which process data on our behalf under their own security commitments. We don’t share your data with anyone else except as required by law.

7. Data retention & deletion

We keep your data while your account is active. You can delete it at any time; see our Data deletion page. Disconnecting a network immediately removes its stored access token.

8. Security

Access tokens and secrets are stored server-side and are never exposed to the browser. We use industry-standard measures to protect your data.

9. Your rights

You can access, correct, export or delete your data. Contact us at contact@seedly.social.

10. Changes

We’ll update this page if our practices change and revise the date above.

11. Data controller and contact

The data controller is WP Origami, a French société par actions simplifiée (SAS), registered with the Paris Trade and Companies Register (RCS Paris) under SIREN 904 758 745 (SIRET 904 758 745 00015), with its registered office at 15 rue des Halles, 75001 Paris, France. Intra-EU VAT number: FR34904758745. You can reach us at contact@seedly.social.