Seamside Privacy Notice

Thanks for your early interest in Seamside. Seamside is a project of Small Craft, Inc., a Delaware corporation, and this Privacy Notice outlines how we use personal information.

Seamside is currently beta software, and you can expect this document to change as we continue to add functionality. You should continue to review this notice from time to time if you are using or are interested in our software and services.

Use of Seamside is always subject to our Terms of Service and End-User License Agreement (the "Terms"). Note that some important terms — including "Spaces," "Frames," and "Your Content" — are explained and defined in the Terms.

We last updated this notice on July 23, 2026.

Privacy on Seamside

Seamside doesn't want your data. We're engineered to touch as little of your information — personal or otherwise — as possible. For a typical user, Seamside is hosted locally on the user's own device. This means that Your Content and Messages stay on your device and/or the device of a connected peer. Information sent by Seamside is encrypted in transit, and Seamside databases are encrypted at rest. While we provide infrastructure to help route Seamside information and connect Seamside users, we cannot see or access Your Content and Messages, and do not collect them.

We do need to collect a limited amount of personal information to provide and support our software and services. This document outlines these practices in detail.

Is Seamside GDPR Compliant?

Our aim is to fully comply with the data protection obligations of any jurisdiction that we serve. We are built from the ground up with GDPR and comprehensive data privacy in mind. However, please note that we are a US-based business and are still finalizing a transfer mechanism to lawfully import personal data from the United Kingdom and the European Economic Area. We will update this notice as soon as possible with details.

How and Why We Collect and Use Personal Information

We only collect and process personal information when we have a legal basis to do so. We collect personal information:

• With your express consent. We process personal information where you have provided us with informed, clear, and freely given consent.
• To establish and fulfill a contract with you. For example, we contract with you to provide our software and services, which require processing a minimal amount of your personal information. Please read our Terms of Service for more information.
• To conduct our business and pursue our legitimate interests. We provide more information on this below.
• To comply with applicable laws and to protect our legal rights. We may use personal information in connection with legal claims, compliance, regulatory, and investigative purposes, and may have the legal obligation to disclose some such information in connection with legal process or litigation.

As noted above, we may sometimes process personal information on the basis of our legitimate interests. This means that we have given careful consideration to your privacy and data protection interests and concluded that certain limited uses of personal data are consistent with them. At this time, these interests include:

• providing you the services you have requested from us;
• responding to any communications, comments, or complaints you send us;
• monitoring the use of our website and services to maintain legal compliance, security, and quality of service, and to prevent fraud; and
• informing you about changes in our services and directly marketing our services to you.

You can withdraw your consent to receive direct marketing at any time, and we provide the ability to do so in any marketing communications we send you.

We Do Not Sell Personal Information

We use the personal information we collect only for the purposes described in this notice. We do not sell personal information, and we do not share personal information for the purpose of facilitating cross-context behavioral advertising.

These are not policies we plan to ever change; however, if we ever did, you would receive advance notice and have the right to opt out.

The Information We Collect

Our first privacy priority is to limit the personal information we collect. The table below outlines the personal information we collect from or about our users. Note that personal information is only collected when you use Seamside online or otherwise choose to send it to us.

Description	Categories	Purpose	Source
Seamside user-created profile	Identifiers, geolocation data	A profile is required in Seamside for the purpose of identifying yourself and your devices to others; your profile includes information you choose such as your user name, device names, avatar image, location, and free-form profile text	You
Seamside automatic profile	Identifiers, internet or other network activity information	Seamside creates a unique user ID for each profile, as well as public keys, device IDs, and related timestamps	Automatically generated by Seamside
IP addresses	Identifiers, geolocation data, internet or other network activity information	IP addresses allow us to assist with routing Seamside information online and allow us to serve our website to you	Automatically collected by Seamside and our website
Email address	Identifiers	To communicate with you and answer support queries	You
Routing metadata and logs, including call metadata	Internet or other network activity information	We collect a small amount of network activity metadata to route and support Seamside traffic and to provide and support our website	Automatically collected by Seamside and our website

We also collect whatever personal information you voluntarily send us, such as when you send us a support query.

How We Retain Information

We do not retain any personal information after it is no longer reasonably required for the purpose for which it was collected, unless we are subject to a countervailing legal obligation. In particular, routing information and call metadata are stored only while corresponding activities are ongoing, and are deleted as soon as possible after. Profile data is maintained while you are actively using Seamside, and will be retained for at least 30 days after your Seamside activity ceases.

The Information We Disclose

We only disclose personal information in a limited set of circumstances:

• To route your Seamside traffic and connect you with peers. Your profile information is available to anyone with your user ID. Similarly, certain routing information, including IP address information, is available to anyone with your device endpoint ID.
• To our service providers. We depend on carefully selected third-party service providers to operate Seamside, and the personal information we collect will generally be hosted on third-party infrastructure. We use third parties to support us with email, hosting, security, cloud storage and computing, analytics, and performance monitoring. Our service providers are contractually restricted as data processors in how they can access and use Seamside data.
• In connection with business transactions. We may disclose and/or transfer personal information in connection with a merger, acquisition, sale of some or all of our assets or business, bankruptcy, dissolution, reorganization, restructuring, or similar transaction or proceeding.
• To government authorities, law enforcement, and for legal compliance. We may disclose personal information to government authorities, law enforcement officials, courts, regulatory bodies, or other parties when required by law, legal process, or court order, or when necessary to protect our legitimate business interests in compliance with applicable laws. Wherever possible and lawful, we will attempt to contact you before any mandatory disclosure of your personal information.

Your Privacy Rights

The law applicable where you live very likely entitles you to certain privacy rights, and nothing in this Privacy Notice is intended to limit or restrict the rights provided to you by law. As a general matter, our users enjoy the following rights:

• the right to know about the personal information we collect about you;
• the right to request a copy of the personal information we have collected about you;
• the right to correct inaccurate personal information about you;
• the right to delete the personal information we have collected about you;
• the right to data portability;
• the right to lodge a complaint with a supervisory or regulatory authority;
• the right to opt out of the sale of your personal information;
• the right to opt out of our sharing your personal information for the purposes of cross-context behavioral advertising; and
• the right not to receive discriminatory treatment for the exercise of your rights.

If you are eligible for rights provided under the GDPR or UK GDPR, you also have:

• the right to object when our processing of your personal information is based on our legitimate interests; and
• the right to restrict the processing of your personal information.

If you need privacy assistance, or if you wish to exercise a privacy right not listed here, we can support your requests at privacy@seamside.com. You may also send us privacy requests by way of an authorized agent. In all cases, we reserve the right to verify privacy requests as allowed or required by law.

Please note that we always provide the rights above subject to certain legal exceptions based in applicable law. If we are unable to process a privacy request because of one of these exceptions, we will let you know in our response to your request.

Do Not Track and Opt-Out Preference Signals

Your browser may offer you a "Do Not Track" (DNT) option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and across different websites. Our website does not support DNT requests at this time.

Your browser may also offer opt-out preference signals, for example a "Global Privacy Control" (GPC) option, to allow you to exercise opt-out rights. Because we do not use personal information in a manner subject to opt-out rights, we do not currently support opt-out preference signals.

Information Security

We work hard to provide high-quality information security to protect the limited amount of personal information that we hold. Nevertheless, no software or online service is completely secure, and we cannot promise that we can prevent unauthorized access, use, disclosure, or destruction of the information that we process.

Because Your Content lives on your device, the security of Your Content will be dependent on your own security practices. We recommend that you take care to employ security precautions appropriate for the sensitivity of Your Content.

Data Location and Transfer

We're a Delaware corporation, and all of our personnel and offices are in the United States. At this time, all of our personal information processing occurs in the United States. The data privacy laws of the United States may not necessarily provide equivalent legal protection to the laws of the jurisdiction where you reside.

Contacting Us

For privacy concerns, questions, or requests, please email us at privacy@seamside.com.