Privacy Policy

Last updated: April 8, 2026

Who we are

Seaynic Labs LLC ("we", "us", "our") operates the store at store.seayniclabs.com. We sell digital products — configuration templates, MCP servers, and developer tools.

What we collect

We collect only what is necessary to process your purchase, deliver your product, and manage your license:

  • Email address — provided via Authentik sign-in. Used for account identification, license delivery, product update notifications, and security patch alerts.
  • Display name — provided by your identity provider. Shown in your account dashboard.
  • Payment information — processed entirely by Stripe. We never see or store your card number, CVV, or billing address.
  • Purchase and license data — order records, license keys (stored as SHA-256 hashes; an optional encrypted copy may be stored server-side only to show your key on the purchase success page and for superadmin support), subscription status, entitled version, and download history.
  • IP address — logged with downloads and update checks for abuse prevention. Not shared or sold.
  • Update check requests — when you use the --check-update flag in a product or visit your account downloads page, we receive your license key and current version to determine available updates. No other data is transmitted.
  • Identity provider attributes — your license entitlements (product, masked license key, entitled version, subscription status) are stored as custom attributes on your Authentik profile for account management purposes.
  • Privacy-focused analytics — page views and coarse traffic patterns via self-hosted Umami (script loaded from analytics.seaynicroute.com). No advertising pixels and no cross-site tracking.

What we do not collect

  • No advertising or behavioral tracking cookies
  • No session recordings or heatmaps
  • No browsing behavior sold to data brokers
  • No phone-home telemetry from products running on your infrastructure — products never contact our servers unless you explicitly run an update check
  • No data sold to third parties — ever

Third-party services

We use the following services to operate the store:

  • Stripe — payment processing and subscription billing (privacy policy)
  • Resend — transactional email: purchase confirmations, update notifications, security alerts (privacy policy)
  • Cloudflare — DNS, CDN, DDoS protection, and TLS termination (privacy policy)
  • Cloudflare R2 — object storage and delivery of product artifacts (downloads). Files are served through our domains; Cloudflare processes requests as described in its policy.
  • GitHub Container Registry (GHCR) — Docker image hosting for self-hosted products. Pull access is gated by short-lived tokens tied to your license.
  • Umami (self-hosted) — first-party analytics on store pages; aggregates traffic without advertising profiles.
  • Telegram — optional internal notifications to our operators when a purchase completes (product name and customer email for fulfillment awareness). Not used for marketing.
  • Authentik — self-hosted identity provider. Your credentials and license attributes stay on our infrastructure — they are not sent to any external identity vendor.

Data retention

  • Orders and payment-related records — retained for as long as required for tax, accounting, and chargeback rules (typically up to seven years where applicable), unless a shorter period is permitted by law and we anonymize where possible.
  • License and entitlement data — retained for the life of your account and a reasonable period after closure to honor revocations, disputes, and security investigations.
  • Download and update-check logs — retained for operational abuse prevention, generally on the order of months unless needed longer for an active investigation.
  • Audit and security logs — retained on a rolling basis (on the order of 90 days) unless extended for incident response.
  • Analytics — aggregated in Umami per that deployment’s configuration; we do not use it to build individual profiles.

You can request account deletion by emailing hello@seayniclabs.com. Some transaction records may be kept where law requires.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at hello@seayniclabs.com.

Enchapter (kids reading app)

Enchapter is sold and operated separately from this store. Its privacy policy and terms are at enchapter.kids/privacy and enchapter.kids/terms.

Contact

Questions about this policy? Email hello@seayniclabs.com.