Privacy Policy

We collect:

• Account details from your sign-in provider (Google display name, email, profile photo, unique account ID)
• Country (auto-detected from your IP at sign-in, editable on Profile)
• Preferred language (auto-detected from your browser, editable)
• Files and notes you upload to your catalogues, including extracted text and document embeddings derived from them
• Questions asked through a Knowledge Widget, the Slack bot or a connected tool, and the answers to them
• Chats, pricings and other runs you made here before the AI agents moved to Plugent, kept until you delete them
• Usage and billing logs for the token-credit system

We do not sell your personal data. To provide our core functionalities — document extraction, embedding, and AI question answering — we share necessary data with the following enterprise providers, who act strictly as Data Processors under our control:

• Google's Gemini API: processes your documents and questions to extract content, transcribe audio, match materials lists to your price lists, and generate AI answers
• OpenAI (via the Vercel AI Gateway): writes the answers of Knowledge Widgets and the Slack bot. It receives the question and the retrieved passages needed to produce that answer
• Voyage AI: turns text into the embeddings used for search, and re-ranks results to improve answer accuracy. It receives document text at upload, and your queries plus candidate passages at search time
• Firebase (Google Cloud): hosts the database, file storage, and authentication infrastructure
• Vercel: hosts the website and application edge, and operates the AI Gateway that routes some model calls to their providers
• Stripe:processes token top-up payments. Stripe receives only the data required to complete the transaction — your card details are entered on Stripe's own hosted page and never reach our servers
• Google Vertex AI Discovery Engine (optional, secondary): an alternate re-ranker used only where it is configured
• Slack (only if you use the integration): your question and its answer pass through your Slack workspace

We act as the Data Controller. Our processors operate under strict data-protection agreements.

Plugent (plugent.app) is our AI agents product: chat, troubleshooting, specifications, quotations and pricing. You sign in to it with your Sebtember account, and its runs are paid from your Sebtember token balance. Plugent never reads our database directly. While you use it, it asks Sebtember, for you only, for:

• the catalogues you can open in Sebtember, except the ones you pause, and the passages from them that each run needs. You can pause a catalogue on Plugent's Knowledge page or at sebtember.app/connect/plugent
• your token balance, which its runs are charged to
• your preferred language and the persona you wrote

Plugent keeps its own record of your runs (your questions, the photos you add, and the results, with the sources they used) in its own database on Google Cloud in the European Union. Its agents use the AI providers listed above, through the Vercel AI Gateway. A pricing run, including the file you upload for it, goes through Sebtember's own pricing engine and is stored in your Sebtember account.

Deleting your Sebtember account (Profile › Delete account) also deletes your Plugent records: your runs, the answers you shared publicly, and your feedback.

We understand the sensitivity of your corporate documents. In accordance with enterprise privacy standards and the EU AI Act:

• The files, text chunks, and queries you upload to Sebtember.app are never used to train, fine-tune, or improve public foundational AI models.
• All AI processing is conducted within secure, commercial environments on paid business tiers. Once the AI generates the required output, the data sent to the provider is not retained by them beyond the limited period their terms allow for abuse monitoring and service operation — it is never added to a training corpus.

We use only essential cookies and local storage required to keep you signed in and run the platform:

• A secure HTTP-only session cookie set after Google sign-in
• Your Firebase authentication token in browser local storage

We do not use analytics cookies, advertising pixels, behavioral tracking, or third-party marketing trackers. We do not profile users, build behavioral audiences, or share usage data with any advertiser.

When you complete a payment, Stripe sets its own essential cookies on Stripe's hosted Checkout page (on stripe.com, not on Sebtember.app) to process the transaction.

We collect anonymous Core Web Vitals metrics (page load time, interaction responsiveness, layout stability) via Vercel Speed Insights. This data:

• Uses no cookies and no local storage.
• Cannot be tied back to your identity or session.
• Records only the route path (e.g. /blog), the timing measurement, and your browser's general device class (mobile / desktop).
• Is aggregated by Vercel into a performance dashboard we use to fix slow pages.

We use this telemetry instead of conventional analytics (Google Analytics, Mixpanel, etc.) precisely because it can't identify or profile you. If you'd prefer to opt out entirely, blocking vitals.vercel-insights.com in your browser stops the beacons; nothing on Sebtember breaks.

You have the right to access, correct, or request the deletion of your personal data at any time. You can deactivate your account from your profile settings. Contact hello@sebtember.app for any data-related request.