Privacy notice

Seamward is the controller for website enquiries, early-access applications, account administration, marketing analytics, and optional product analytics. For integration evidence that a customer submits through the service, the customer normally decides why that data is processed and Seamward acts on the customer's instructions.

Contact Seamward at hello@seamward.com.

Early-access applications

When you request early access, we collect your email address, company, selected use case, and any optional context you provide. We also record the review status and related invitation details.

Account and workspace data

We process your name, email address, authentication records, session information, workspace membership, invitations, profile choices, and security audit history. Session records may include IP address and browser information used to protect accounts and investigate abuse.

Integration evidence

Seamward processes integration names, environments, contract fingerprints, status and timing metadata, redacted observation envelopes, incident evidence, replay results, and repair approval records. The collector is designed to redact or hash sensitive values before transmission. Customers control what they configure and submit to a workspace.

Connected services

If a workspace connects GitHub or another supported provider, we process installation identifiers, repository selections, delivery status, and the minimum credentials or tokens needed to provide that connection. Connected providers process data under their own terms and privacy notices.

Website and product analytics

Google Analytics may receive the page viewed, referral source, general device and browser information, and approximate location derived from the network connection. We configure page views and disable advertising personalization and Google signals. See the Cookie Policy for the storage technologies used.

If a signed-in user allows product analytics, PostHog receives opaque user and workspace identifiers, query-free page paths, general device and browser information, and a privacy-masked recording of product interactions. Seamward records ordinary interface text so recordings remain useful, while masking all inputs and marked sensitive text. It blocks code and secret regions, and disables console logs, network bodies, network headers, canvas capture, and cross-origin iframe capture.

• To review early-access applications and take steps you request before providing the service.
• To create accounts, authenticate users, operate workspaces, and provide requested product functions under our contract with you or your organisation.
• To secure the service, prevent abuse, troubleshoot faults, and maintain reliable operations in our legitimate interests.
• To meet legal obligations, establish or defend legal claims, and respond to lawful requests.
• To measure public marketing visits and understand page use.
• To diagnose product usability problems using privacy-masked session replay when a signed-in user has given consent.

We do not make solely automated decisions that produce legal or similarly significant effects. Repair suggestions remain proposals and require your team's approval.

We share data only where needed with hosting and infrastructure providers, email delivery providers, security and support suppliers, professional advisers, and connected services chosen by a workspace. Google receives marketing analytics data when its tag loads. PostHog receives optional product analytics only after a signed-in user gives consent. We may also disclose information when required by law or as part of a business reorganisation subject to appropriate protections.

We do not sell personal data.

Some providers may process data outside the United Kingdom. Where required, we use an applicable adequacy regulation, approved contractual safeguards, or another lawful transfer mechanism. You can contact us for information about the safeguards relevant to your data.

We keep personal data only for as long as it is needed for the purposes described here. Account and workspace records are generally retained while the account or workspace is active and for a limited period afterwards for security, backup, dispute, and legal purposes. Early-access applications are retained while they are reviewed and while follow-up remains relevant.

Workspace evidence follows the customer's service and deletion requirements, subject to backup and legal retention needs. Analytics data follows the configured Google Analytics and PostHog retention settings, and browser storage durations are listed in the Cookie Policy.

Seamward uses access controls, encrypted network connections, security logging, tenant separation, and data minimisation measures. Integration collection is observe-only and designed to avoid raw payloads and secrets by default. No online service can guarantee absolute security, so customers must also configure collectors and connected services carefully.

Depending on the circumstances, you may have rights to access, correct, erase, restrict, or receive your personal data, and to object to certain processing. Where processing depends on consent, you may withdraw it at any time without affecting earlier lawful processing.

To exercise a right, email hello@seamward.com. We may need to verify your identity. Signed-in users can withdraw optional product analytics consent under Account security. Browser controls for analytics storage are described in the Cookie Policy.

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office, the United Kingdom's data protection regulator.

Seamward is a business service and is not intended for anyone under 18. We do not knowingly collect children's personal data.

We may update this notice as the service, providers, or legal requirements change. Material changes will be highlighted on the website or communicated through the service where appropriate.