Privacy Policy

Seeniq LLP (“we,” “us,” or “our”), a Limited Liability Partnership registered in India, operates the Seeniq platform at getseeniq.com (the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

1. Scope

This policy applies to all users of the Seeniq website, free audit tool, paid subscription service, and any related APIs or communications. It covers data collected from website visitors, free audit users, and paying customers.

2. Information We Collect

2.1. Information You Provide

• Account Information: Email address, name, and password when you create an account.
• Billing Information: Payment details processed and stored by Paddle (our Merchant of Record). We do not store credit card numbers on our servers. Paddle collects your billing address for tax purposes.
• Practice Details: Practice name, address, phone number, website URL, and Google Place ID when you submit an audit or set up monitoring.
• Communications: Emails, support requests, and feedback you send us.

2.2. Information We Collect Automatically

• Usage Data: Pages visited, features used, audit frequency, and interaction patterns within the dashboard.
• Device and Browser Data: IP address, browser type, operating system, device type, and screen resolution.
• Cookies and Tracking: See our Cookie Policy for details.

2.3. Information We Collect from Public Sources

This is the core of how the Service works. We collect publicly available data about dental practices:

• AI Engine Responses: Text responses from ChatGPT, Gemini, Perplexity, and Google AI Overview generated in response to dental-related queries.
• Google Places Data: Practice name, address, phone, hours, rating, review count, website, and categories.
• Professional Registry Data: Provider names, credentials, taxonomy, and practice associations from public professional registries.
• Website Data: Structured data markup, page performance metrics, and technology stack.
• SEO Data: Keyword rankings, website authority, organic traffic estimates, and competitor analysis.
• Review Data: Publicly posted Google review text, ratings, and dates.
• Business Listing Data: Directory listings, NAP (Name, Address, Phone) consistency data.

2.4. What We Do NOT Collect

• Protected Health Information (PHI). We do not access, collect, store, or process any patient data, medical records, appointment information, treatment details, or any data protected under HIPAA.
• Patient Identities. We have no access to your patient lists, appointment schedules, or any information that identifies individual patients.
• Private Practice Systems. We do not connect to or access Electronic Health Records (EHR), Practice Management Software, or any internal systems.

3. How We Use Your Information

To Provide the Service

• Running AI engine audits and generating visibility and accuracy scores
• Comparing AI responses against verified ground truth data
• Generating PDF audit reports and dashboard analytics
• Enriching practice profiles with public SEO, review, and authority data
• Detecting factual errors and providing correction guidance
• Tracking competitors you’ve selected for benchmarking

To Process Payments

• Managing subscriptions and billing through Paddle (Merchant of Record)
• Sending invoices and payment receipts (via Paddle)

To Communicate with You

• Sending audit reports, alert notifications, and monitoring summaries
• Responding to support requests
• Sending product updates and service announcements (you can opt out)

To Improve the Service

• Analyzing usage patterns to improve features and user experience
• Debugging errors and optimizing performance
• Developing new features based on aggregated usage trends

4. Legal Bases for Processing

4.1. GDPR (EU/EEA Users)

• Contract Performance: Processing necessary to deliver the Service you subscribed to.
• Legitimate Interest: Usage analytics, service improvement, fraud prevention.
• Consent: Marketing emails, optional analytics cookies.
• Legal Obligation: Tax records, legal compliance.

4.2. India — IT Act 2000 & DPDP Act 2023

As an Indian entity, Seeniq LLP is a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). We process personal data based on:

• Consent: We obtain your consent at the time of account creation and data collection.
• Legitimate Uses: Processing for purposes that a reasonable person would expect in the context of the Service.

Under the IT Act, 2000 (Section 43A) and its rules, we implement reasonable security practices and procedures for the protection of sensitive personal data. We comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

5. Data Sharing

We share data with the following categories of third parties, solely to provide and improve the Service:

5.1. Service Providers (Data Processors)

5.2. We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5.3. Legal and Safety Disclosures

We may disclose information if required by law, court order, or government request (including requests from Indian authorities under the IT Act), or if we believe disclosure is necessary to protect rights, safety, or property.

5.4. Business Transfers

If Seeniq LLP is acquired, merges, or transfers assets, your data may be transferred to the successor entity. We will notify you via email before your data is subject to a different privacy policy.

6. Data Storage and Security

6.1. Location.Your data is stored in the US East (us-east-2) region hosted on AWS via Supabase. Application hosting is on Vercel’s global edge network.

6.2. Encryption. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

6.3. Access Control. Database access is restricted via Row Level Security policies, service role keys, and connection pooling with authentication.

6.4. Security Standards. We implement reasonable security practices as required under Section 43A of the IT Act, 2000, aligned with IS/ISO 27001 standards.

6.5. No Guarantee. While we implement industry-standard security measures, no system is 100% secure.

7. Data Retention

After account deletion, we purge all identifiable customer data within 30 days. Backups are purged within 90 days.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data. We will comply within 30 days.
• Portability: Request your data in a structured, machine-readable format (JSON export).
• Withdraw Consent: Withdraw consent for data processing or marketing emails at any time.
• Grievance Redressal (India): Under the DPDP Act, you may raise a grievance with our Grievance Officer (see Section 13).
• Nominate (India): Under the DPDP Act, you may nominate another person to exercise your data rights on your behalf.

To exercise any of these rights, email privacy@getseeniq.com. We will respond within 30 days.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident:

• Right to Know:You can request the categories and specific pieces of personal information we’ve collected.
• Right to Delete: You can request deletion of your personal information.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

Categories of Personal Information Collected, Disclosed, and Sold (Last 12 Months)

We do not sell or share (as defined by the CCPA) any categories of personal information. We do not collect sensitive personal information as defined under the CPRA.

To make a request, email privacy@getseeniq.com with “CCPA Request” in the subject line. We will acknowledge your request within 10 business days and respond substantively within 45 calendar days.

10. Children’s Privacy

The Service is not intended for individuals under 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us at privacy@getseeniq.com and we will delete it promptly.

11. International Data Transfers

Seeniq LLP is based in India. Your data is stored and processed in the United States (via Supabase/AWS). By using the Service, you acknowledge that your data will be transferred to and processed in the US.

For EU/EEA users, transfers are conducted under Standard Contractual Clauses (SCCs) where required. For Indian users, cross-border transfers comply with the DPDP Act, 2023 and any restrictions notified by the Central Government regarding approved jurisdictions.

12. HIPAA Disclaimer

Seeniq is NOT a HIPAA-covered entity and is NOT a Business Associate. The Service monitors publicly available AI responses about dental practices. It does not access, transmit, or store Protected Health Information (PHI). No Business Associate Agreement (BAA) is required or offered.

13. Grievance Officer (India)

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the Grievance Officer for Seeniq LLP can be contacted at:

• Email: grievance@getseeniq.com
• Response Time: We will acknowledge your grievance within 48 hours and resolve it within 30 days.

If you are not satisfied with our resolution, you may file a complaint with the Data Protection Board of India (once constituted under the DPDP Act).

14. Third-Party Links

The Service may contain links to third-party websites (e.g., Google Business Profile, dental directories). We are not responsible for the privacy practices of these external sites.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 30 days before they take effect.

16. Contact

For privacy questions, data requests, or complaints:

• Privacy Email: privacy@getseeniq.com
• Grievance Officer: grievance@getseeniq.com
• General Support: support@getseeniq.com
• Website: getseeniq.com