Who is responsible for your data
Seated is operated by Paulina Westermann, a sole proprietor based in the United States, trading as "Seated". For the personal data described here, we act as the data controller — we decide why and how it is processed. Questions, requests, or complaints go to paulinalwestermann@gmail.com.
For the guest information you upload, you are the controller and we act as your processor: we handle it only to provide Seated to you and on your instructions.
What we collect and why
- Account data — your name, email address, and login credentials (or the identifier from Google or Apple if you sign in that way). Used to create and secure your account. Legal basis: performance of our contract with you.
- Event and guest data — event names, dates, venues, guest names, RSVP status, companies, roles, relationships, notes, and the voice briefs and documents you provide. Used to build and store your seating charts. Legal basis: performance of our contract with you.
- AI prompt data — when you use an AI feature, the relevant event and guest context is sent to our AI provider to generate a suggestion. Legal basis: performance of our contract with you.
- Usage and technical data — device and browser information, IP address, pages viewed, error reports, and counts of AI requests used against your plan limits. Used to keep the service secure, prevent abuse, enforce plan limits, and improve the product. Legal basis: our legitimate interest in a secure, working service.
- Support messages — what you send us when you get in touch. Used to answer you. Legal basis: legitimate interest.
We do not ask for or store your card details. Payment data is collected directly by Paddle, our Merchant of Record.
Who we share data with
- Hosting and infrastructure providers who run the application, database, and authentication on our behalf.
- Our AI provider, which processes the prompts generated by AI features. Prompts are not used to train models.
- Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance, and invoicing.
- Professional advisers (legal, accounting) and authorities where we are legally required to disclose.
We never sell your personal data or your guests' personal data.
International transfers
Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
How long we keep it
We keep your account, event, and guest data for as long as your account is active. If you delete an event, it is removed from our systems. If you close your account, we delete or anonymise your data within 30 days, except where we must keep records for legal, tax, or accounting reasons. Technical logs are kept for a short period for security purposes.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing based on legitimate interests, and to withdraw consent. Residents of California and other US states with privacy laws may also request details of the categories of data we collect and disclose, and may not be discriminated against for exercising these rights. Residents of the UK and EEA may lodge a complaint with their supervisory authority. Email paulinalwestermann@gmail.com and we will respond within one month.
Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, and access controls that ensure each account can only reach its own events and guests. No system is perfectly secure, but we work to keep yours safe.
Cookies
We use only essential cookies and similar browser storage — they keep you signed in and remember your session. We do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser settings, though signing in will not work without them.
Children
Seated is not intended for children under 16, and we do not knowingly collect their personal data.
Changes
If we make material changes to this notice, we will update the date above and, where appropriate, notify you by email.