Privacy Policy

Effective Date: November 1, 2025
Last Updated: August 30, 2026 Version: 1.3

Introduction

SeedVR2 | Independent AI Upscaling Workspace respects your privacy. This Privacy Policy explains what information we collect when you interact with our website at https://seedvr2, how we use that information, and the choices you have. By using the Service, you agree to the practices described here.

For account, billing, support, security, and website operations, we process personal data as a controller under applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the UK GDPR. When a business customer submits client media solely for an agreed managed project, that customer remains responsible for its instructions and source rights, and SeedVR2 | Independent AI Upscaling Workspace acts as its processor or service provider for that media. A project requiring a data processing agreement or custom processor terms is not accepted until those terms are executed; confidential upload remains disabled in the meantime.

Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

Information You Provide

• Account details. Name or display name, email address, password credentials managed by our authentication service, and account settings.
• Purchases. Billing address, transaction amount, and limited payment metadata provided by our payment processor. We never store full payment card numbers.
• Support requests. Messages, project or job references, and files or screenshots you deliberately attach. Do not send source media, passwords, payment credentials, private keys, or confidential client content through ordinary email.
• Media and project content. Uploaded images or videos, outputs, prompts when a tool uses them, studio project metadata, approval choices, source diagnosis, quote details, and delivery records saved to your account.

Information Collected Automatically

• Usage analytics. IP address, device type, browser, operating system, language preference, referral URLs, pages viewed, and time spent on the Service.
• Log information. System logs, error reports, and diagnostic data used for debugging.
• Cookies and similar technologies. Small data files stored on your device to maintain sessions, remember preferences, and measure performance. You can control cookies through your browser settings.

Information from Third Parties

• Payment processors. Stripe and Creem provide transaction, invoice, refund, dispute, card-type, and limited account information needed to settle purchases.
• Email providers. Resend or ZeptoMail may provide delivery, bounce, complaint, and opening status for transactional email.
• Storage, hosting, analytics, and inference providers. Our hosting and storage infrastructure, analytics services, and the external AI provider selected for a workflow may return technical logs, task status, input/output URLs, or processing metadata.

How We Use Your Information

We process personal data for the following purposes:

1. Provide, operate, secure, and maintain the Service.
2. Process orders, subscriptions, credit purchases, and managed studio quotes.
3. Store and deliver uploaded media, samples, generated outputs, private project assets, and account workspaces.
4. Diagnose source limitations, track customer approvals, and complete the managed studio workflow requested by the customer.
5. Respond to support inquiries and send transactional communications.
6. Improve reliability using aggregate event counts, performance data, and error metadata that do not contain uploaded media content.
7. Protect against abuse, fraud, rights violations, and security threats, including screening prompts and related text before processing.
8. Comply with tax, accounting, legal, dispute, and policy-enforcement obligations.
9. With your consent, send product updates or newsletters; you may unsubscribe at any time.

No model training by SeedVR2

SeedVR2 | Independent AI Upscaling Workspace does not use uploaded media, private studio assets, or generated outputs to train or tune models. We may analyze de-identified operational metadata that does not contain the media itself, such as task type, duration band, status, latency, error code, and aggregate usage.

External AI inference providers process the inputs needed to run the selected workflow under their own terms, retention controls, and privacy practices. Public provider terms do not always offer a service-wide no-training or fixed-retention promise. We therefore disclose the processor boundary before a managed project is accepted and keep confidential or unreleased studio uploads disabled until written processor terms are recorded for that pilot.

Legal Bases for Processing (EEA/UK Users)

When required, we rely on the following legal bases:

• Performance of a contract (providing the Service you requested).
• Legitimate interests (improving the Service, preventing fraud).
• Compliance with legal obligations (financial record keeping, responding to lawful requests).
• Consent (marketing communications, optional cookies).

Sharing Your Information

We share personal data only as needed with:

• Hosting and storage providers. The production hosting platform and Cloudflare R2 or another configured S3-compatible store operate application and media infrastructure. Studio pilot assets use a bucket separate from the public media bucket and are accessed through short-lived signed URLs.
• AI inference providers. Depending on the selected tool, providers such as WaveSpeed AI, fal.ai, Replicate, or Kie.ai may process input and output media. The applicable workflow or studio proposal identifies the material provider boundary.
• Payment processors. Stripe and Creem process payments, invoices, taxes, refunds, and disputes.
• Email and support providers. Resend or ZeptoMail deliver account and project communications.
• Analytics providers. Google Analytics and Plausible may process page and event metadata according to the consent and configuration in effect.
• Professional advisors, authorities, and successors. We disclose information to legal or accounting advisors, lawful authorities, or a successor in a merger or sale only when necessary and subject to applicable safeguards.

We do not sell personal data. We do not publish studio pilot assets through the site's public media domain.

Data Retention

We keep personal data only as long as necessary for the purposes described above:

• Account information is retained while your account is active and for up to three years after closure, unless law requires longer retention.
• Billing records are retained for tax, accounting, refund, and dispute periods, usually seven years.
• Support tickets and diagnostic logs are deleted or anonymized within 18 months unless needed for an active investigation.
• Ordinary generated content can be deleted from your dashboard. Disaster-recovery backups may retain a copy for up to 30 days.
• Unverified studio upload reservations expire after 24 hours. Verified studio project assets remain available while the project is active, then receive a deletion deadline no later than 30 days after delivery, cancellation, or rejection. Deletion failures are retried and remain visible to operators until confirmed. Account deletion first attempts to remove every active private studio object; if that cleanup cannot be confirmed, account deletion is blocked rather than reported as complete.

Inactive accounts that have never paid

Starting with schedules created under this policy, a verified account may be scheduled for deletion when it was created more than 30 days ago, we have recorded no sign-in, session, or other account activity for at least 30 consecutive days, and it has never completed a payment. Accounts with an active subscription, payment history, refund, chargeback, payment dispute, or a legal/accounting retention requirement are excluded.

We schedule deletion 30 days in advance and send an account-status notice to the verified email address, followed by another reminder approximately 7 days before deletion. Signing in or using the confirmation page linked from the notice cancels the schedule. Merely opening an email does not cancel it.

Unused free, trial, referral, or promotional credits do not prevent deletion and expire when the account is deleted. Before deletion we recheck activity and payment status. After deletion, we may retain a minimal non-reversible email hash, delivery/suppression record, or other record required to document deletion, prevent unwanted future mail, resolve abuse, or comply with law. We do not use retained records to recreate the account.

International Transfers

Our servers and service providers may be located in the United States and other countries. When transferring personal data across borders, we rely on approved safeguards such as Standard Contractual Clauses or the service provider’s certification mechanisms.

Your Rights

Depending on your location, you may have the right to:

• Access and obtain a copy of your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data when it is no longer needed.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent for marketing communications at any time.

Submit requests by emailing email. We may need to verify your identity before fulfilling a request. If you are unsatisfied with our response, you may contact your local data protection authority.

Security

We use HTTPS, access controls, short-lived signed URLs for private studio media, a storage bucket separate from public assets, audit events, bounded infrastructure retries, and routine monitoring appropriate to the processing risk. Confidential studio uploads remain disabled until written external-processor terms are recorded. No online service is perfectly secure, and you remain responsible for protecting login credentials and sharing project access only with authorized people.

Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us and we will take prompt action to delete it.

Links to Other Websites

Our Service may contain links to third-party sites. We are not responsible for the content or privacy practices of those sites. We encourage you to review their policies before providing personal data.

Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will post the revised document with an updated "Last Updated" date and, when appropriate, notify you via email or in-app message. Continued use of the Service after an update constitutes acceptance of the revised Policy.

Contact Us

If you have questions or concerns about privacy, please contact us at email. For EEA or UK residents, you also have the right to lodge a complaint with your local supervisory authority.