PRIVACY, CONFIDENTIALITY AND SECURITY POLICY

Effective Date: August 24, 2026
Last Updated: August 24, 2026

This Privacy, Confidentiality and Security Policy explains how [LEGAL ENTITY NAME], doing business as Seedcore (“Seedcore,” “we,” “us,” or “our”), collects, uses, protects, retains, and discloses information in connection with [WEBSITE URL], our client portal, onboarding systems, Seedcore Intelligence, advisory engagements, Guided Implementation, communications, and related services.

This Policy also establishes Seedcore’s commitments concerning the confidentiality and protection of client ideas, projects, business information, and early-company information.

1. SCOPE

This Policy applies when you:

1.1. Visit or interact with our website.

1.2. Contact Seedcore.

1.3. Submit an inquiry, application, onboarding questionnaire, or other form.

1.4. Purchase or use a Seedcore service.

1.5. Create or access a client portal account.

1.6. Participate in a call, meeting, support exchange, or advisory engagement.

1.7. Use Seedcore Intelligence or another project-aware Seedcore system.

1.8. Submit documents, files, messages, business information, or other materials.

1.9. Otherwise interact with Seedcore.

This Policy does not govern independent third-party websites, products, or services that Seedcore does not control.

2. DEFINITIONS

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.

“Client Project Information” means nonpublic information concerning a client’s idea, planned business, existing business, product, service, market, customers, research, operations, finances, pricing, strategy, technology, designs, experiments, constraints, plans, decisions, or results.

“Services” means Seedcore’s website, advisory engagements, client portal, Seedcore Intelligence, Guided Implementation, post-delivery advisory, communications, Deliverables, and related products or services.

Client Project Information may include Personal Information, but much of it may instead constitute confidential business information. Seedcore protects Client Project Information under this Policy regardless of whether it legally qualifies as Personal Information.

3. INFORMATION WE COLLECT

3.1. Contact and identity information

We may collect your name, business name, email address, telephone number, mailing address, professional title, account identifier, and similar contact information.

We use this information to communicate with you, administer your account, provide Services, process transactions, maintain records, and respond to questions.

3.2. Account and authentication information

We may collect or process login identifiers, authentication status, account permissions, password hashes maintained by an authentication provider, security settings, and information relating to account access.

We use this information to authenticate users, secure accounts, prevent unauthorized access, and maintain the client portal.

Seedcore does not intentionally store your ordinary account password in readable form.

3.3. Purchase and transaction information

We may collect information about Services purchased, Order history, invoice information, billing status, payment status, refunds, disputes, and transaction history.

Payment-card information is generally processed directly by an independent payment processor. Seedcore may receive limited information such as the card type, last four digits, billing address, transaction identifier, and payment status.

Seedcore does not intentionally collect or store complete payment-card numbers through its ordinary website, portal, onboarding forms, or communications.

3.4. Founder and professional information

We may collect information about your role, skills, experience, education, work history, goals, available time, capital, resources, relationships, capabilities, personal constraints, professional constraints, and operating circumstances.

We use this information to understand the founder behind the business and personalize the scope, analysis, recommendations, resources, and implementation guidance.

3.5. Business and project information

We may collect information concerning:

(a) business and product ideas;

(b) planned or existing companies;

(c) products and services;

(d) business models;

(e) offers and pricing;

(f) customers and prospective customers;

(g) markets and competitors;

(h) research and evidence;

(i) validation attempts and experiments;

(j) sales and revenue;

(k) financial assumptions;

(l) product plans and feature priorities;

(m) technology and operational systems;

(n) branding, positioning, and communications;

(o) intellectual property;

(p) internal documents and files;

(q) strategic questions and decisions;

(r) current problems and constraints; and

(s) other information submitted for an engagement.

We use this information only to evaluate, scope, administer, personalize, and provide the Services, maintain authorized project context, protect the Services, comply with law, or perform another use expressly authorized by you.

3.6. Communications

We may collect emails, portal messages, support requests, questions, feedback, meeting notes, and other communications exchanged with Seedcore.

We use communications to provide the Services, preserve relevant project context, respond to requests, clarify information, maintain records, improve service quality, and resolve disputes.

3.7. Calls and meetings

We may collect meeting dates, participant information, scheduling details, notes, and action items.

Seedcore will not intentionally record or automatically transcribe a private call without appropriate notice or consent. If a call is recorded or transcribed, the recording or transcript will be used only for the disclosed purpose.

3.8. Website and device information

When you use the website or portal, we and our service providers may automatically receive:

(a) IP address;

(b) browser type;

(c) operating system;

(d) device type;

(e) referring page;

(f) pages viewed;

(g) links selected;

(h) timestamps;

(i) session activity;

(j) cookie identifiers;

(k) error information; and

(l) approximate location derived from an IP address.

We use this information to operate the website, maintain security, prevent fraud, diagnose errors, understand aggregate usage, and improve usability.

3.9. Marketing information

We may collect your subscription status, communication preferences, referral source, campaign interactions, and related marketing information.

We use this information to send permitted communications, measure their effectiveness, and honor opt-out requests.

3.10. Inferences and advisory conclusions

Seedcore may derive conclusions about your business stage, priorities, customers, risks, opportunities, constraints, or recommended direction from the information available to us.

These inferences are used to personalize advisory work and are generally retained as part of the relevant project context.

3.11. Publicly available information

Where relevant to an engagement, Seedcore may collect information from lawful public sources, including company websites, public professional profiles, public databases, public reviews, government records, published research, public communities, and other publicly available materials.

4. INFORMATION WE DO NOT INTENTIONALLY REQUEST

Do not submit unnecessary:

4.1. Social Security numbers or personal tax identification numbers.

4.2. Government-issued identification documents.

4.3. Complete payment-card numbers through ordinary forms or messages.

4.4. Personal banking credentials.

4.5. Passwords for personal or business accounts.

4.6. Protected health information.

4.7. Biometric templates or genetic information.

4.8. Precise geolocation information.

4.9. Information about children.

4.10. Information restricted by another person’s confidentiality rights.

4.11. Regulated customer information that Seedcore has not expressly agreed in writing to process.

If unnecessary sensitive information is incidentally submitted, Seedcore may remove, redact, restrict, return, or delete it.

5. SOURCES OF INFORMATION

Seedcore may obtain information:

5.1. Directly from you.

5.2. From another person you authorize.

5.3. Through onboarding forms, calls, messages, documents, and project materials.

5.4. Automatically from your device or use of the Services.

5.5. From payment, authentication, hosting, communication, analytics, and security providers.

5.6. From lawful public business and research sources.

5.7. From a referral source that lawfully provides your contact information.

6. HOW WE USE INFORMATION

Seedcore may use information to:

6.1. Operate, maintain, secure, and improve the Services.

6.2. Process inquiries, purchases, payments, refunds, and accounts.

6.3. Conduct onboarding and define the appropriate scope of work.

6.4. Research, analyze, organize, and understand a business or project.

6.5. Personalize Deliverables, recommendations, resources, education, and implementation guidance.

6.6. Configure and operate Seedcore Intelligence.

6.7. Answer questions and maintain project continuity.

6.8. Communicate about an engagement, account, purchase, deadline, update, or security issue.

6.9. Authenticate users and prevent fraud, misuse, and unauthorized access.

6.10. Diagnose technical problems and maintain service reliability.

6.11. Comply with contractual, accounting, tax, regulatory, and legal obligations.

6.12. Establish, exercise, or defend legal rights.

6.13. Send marketing communications where permitted and honor communication preferences.

6.14. Create operational statistics that do not identify a person, reveal a business, or expose Client Project Information.

6.15. Perform another purpose disclosed when information is collected or expressly authorized by you.

Seedcore will not materially change how previously collected Client Project Information is used without appropriate notice and consent where required.

7. IDEA, PROJECT, AND BUSINESS CONFIDENTIALITY

7.1. Core confidentiality commitment

Seedcore treats nonpublic ideas, projects, and early-company information as confidential regardless of whether the information:

(a) is formally marked confidential;

(b) is legally considered a trade secret;

(c) is fully developed;

(d) currently has measurable monetary value;

(e) has been formally protected through intellectual-property registration; or

(f) contains Personal Information.

7.2. Restricted use

Seedcore will use Client Project Information only to:

(a) evaluate, scope, administer, and provide the Services;

(b) create and maintain the Client’s project context;

(c) communicate with the Client;

(d) secure, troubleshoot, or support the Client’s account or engagement;

(e) comply with applicable law;

(f) enforce an applicable agreement; or

(g) perform another use expressly authorized by the Client in writing.

7.3. Prohibited disclosures

Seedcore will not sell, rent, publish, license, reveal, distribute, or provide Client Project Information to:

(a) other clients;

(b) other founders;

(c) investors or prospective investors;

(d) prospective customers;

(e) media organizations;

(f) public audiences;

(g) marketing audiences;

(h) public databases; or

(i) unrelated third parties.

7.4. Prohibited public and commercial uses

Without prior written opt-in consent, Seedcore will not use Client Project Information in:

(a) case studies;

(b) testimonials;

(c) portfolios;

(d) public examples;

(e) social-media content;

(f) presentations;

(g) product demonstrations;

(h) marketing or sales materials;

(i) generalized research;

(j) industry reports;

(k) shared resource libraries;

(l) benchmarking datasets; or

(m) artificial-intelligence training datasets.

7.5. No assumed publicity permission

Purchasing a Service, submitting onboarding information, receiving a Deliverable, providing feedback, or achieving a business result does not give Seedcore permission to publicly identify the Client or discuss the Client’s project.

Public use requires prior written opt-in consent identifying what Seedcore may use and how it may be used.

7.6. Internal access

Access to Client Project Information is limited to Seedcore personnel and contractors with a legitimate need to provide, administer, secure, or support the engagement.

Seedcore does not authorize personnel to inspect Client Project Information out of curiosity or use it for unrelated personal, professional, or commercial purposes.

7.7. No residual-use right

Seedcore does not obtain a right to use a Client’s specific confidential idea, strategy, method, product direction, customer information, or business information merely because Seedcore personnel remember it.

General professional knowledge and skills may continue to be used only where doing so does not reveal, reproduce, depend upon, or improperly benefit from Client Project Information.

7.8. Service-provider access

Certain infrastructure providers may technically process or store information on Seedcore’s behalf. These providers may include website-hosting, cloud-storage, authentication, payment-processing, email, scheduling, communications, client-portal, analytics, security, AI-infrastructure, legal, and accounting providers.

Provider access is limited to the information reasonably necessary to perform the contracted service.

Seedcore does not authorize these providers to independently sell, publish, market with, disclose, or commercialize Client Project Information.

7.9. Legally required disclosure

Seedcore may disclose information when legally required by a valid subpoena, court order, regulatory demand, or other binding legal process.

To the extent legally permitted, Seedcore will:

(a) notify the affected Client promptly;

(b) disclose only the minimum information legally required; and

(c) reasonably cooperate with an effort to obtain confidential treatment or protective relief.

7.10. Corporate transactions

In connection with a bona fide merger, acquisition, financing, restructuring, or sale of assets:

(a) access during due diligence will be limited and subject to confidentiality restrictions;

(b) substantive Client Project Information will not be disclosed more broadly than reasonably necessary;

(c) transferred information will remain subject to protections at least as restrictive as this Policy unless legally sufficient notice is provided; and

(d) Seedcore will not authorize a materially different use of Client Project Information merely because ownership changes.

7.11. Confidentiality exclusions

The confidentiality commitment does not apply to information Seedcore can document:

(a) was lawfully known without restriction before the Client disclosed it;

(b) becomes public through no violation by Seedcore;

(c) is lawfully received from another source without a confidentiality obligation;

(d) is independently developed without use of Client Project Information; or

(e) is expressly authorized for disclosure by the Client.

7.12. Duration

Seedcore’s confidentiality obligations continue after the engagement or account ends for as long as the information remains nonpublic through no breach by Seedcore.

Trade-secret obligations continue for as long as the information remains legally protected as a trade secret.

8. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

8.1. Seedcore may use artificial intelligence, retrieval systems, search tools, databases, and automation to assist with research, organization, analysis, comparison, drafting, quality control, and service delivery.

8.2. Core advisory Deliverables are human-led and subject to human review.

8.3. Interactive responses produced through Seedcore Intelligence may be generated automatically and may not receive advance human review.

8.4. Seedcore will not intentionally use Client Project Information to train or improve a public, shared, or generalized artificial-intelligence model.

8.5. Seedcore will not intentionally submit Client Project Information to an AI provider under terms permitting that provider to use the information to train a public or generalized model.

8.6. Seedcore may use restricted AI or technology providers to process information solely for an authorized service purpose when the provider is subject to appropriate use, privacy, and confidentiality restrictions.

8.7. Seedcore does not use solely automated processing to make decisions producing legal or similarly significant effects concerning an individual.

8.8. AI-assisted responses may contain errors, omissions, outdated information, or unsupported inferences. They do not constitute legal, tax, financial, medical, regulatory, or other licensed professional advice.

9. WHEN INFORMATION MAY BE DISCLOSED

Seedcore may disclose limited information to:

9.1. Hosting, cloud-storage, content-delivery, and backup providers.

9.2. Authentication, fraud-prevention, monitoring, and security providers.

9.3. Payment processors and financial institutions.

9.4. Email, scheduling, meeting, communication, and collaboration providers.

9.5. Client-portal and project-management providers.

9.6. Analytics and error-monitoring providers used for limited operational purposes.

9.7. Restricted AI and automation providers used to provide the Services.

9.8. Attorneys, accountants, insurers, and professional advisers subject to professional or contractual obligations.

9.9. Government authorities or litigants when disclosure is legally required.

9.10. A successor in a qualifying corporate transaction, subject to the restrictions in this Policy.

These recipients may use information only for the applicable authorized purpose. Seedcore does not authorize them to use Client Project Information for independent advertising, sale, publication, public AI-model training, or unrelated commercial activity.

10. SALE, SHARING, AND TARGETED ADVERTISING

10.1. Seedcore does not sell Personal Information for money.

10.2. Seedcore does not sell or share Client Project Information.

10.3. Seedcore does not share Personal Information for cross-context behavioral advertising or targeted advertising based on activity across unrelated businesses.

10.4. Seedcore does not provide Personal Information to third parties for their independent direct-marketing use.

10.5. Seedcore does not provide financial incentives in exchange for Personal Information.

10.6. Because Seedcore does not conduct these activities, Seedcore does not currently provide a “Do Not Sell or Share My Personal Information” link.

10.7. Seedcore will honor a legally recognized opt-out preference signal, including Global Privacy Control, where the signal applies to an activity Seedcore conducts.

11. COOKIES AND SIMILAR TECHNOLOGIES

Seedcore and its service providers may use cookies, local storage, pixels, logs, and similar technologies for:

11.1. Essential website operation.

11.2. Authentication and account security.

11.3. Remembering preferences.

11.4. Understanding aggregate website use.

11.5. Diagnosing technical errors.

11.6. Measuring permitted communications.

Seedcore does not use these technologies to sell Client Project Information or expose substantive project information to advertising networks.

You may control nonessential cookies through an available preference tool or through browser settings. Blocking essential cookies may prevent certain features from functioning.

Some browsers transmit “Do Not Track” signals. Because there is no uniform standard governing every such signal, Seedcore responds to legally required opt-out signals and otherwise follows the practices described in this Policy.

12. MARKETING COMMUNICATIONS

Seedcore may send marketing emails where permitted by law.

Marketing messages will include an appropriate unsubscribe method. You may unsubscribe through the link in a message or by contacting [PRIVACY EMAIL].

Unsubscribing from marketing does not prevent necessary transactional, billing, account, legal, security, or engagement communications.

Seedcore will not condition service delivery on consent to unrelated marketing unless clearly disclosed and legally permitted.

13. DATA RETENTION

Seedcore retains information only for as long as reasonably necessary for the purpose for which it was collected.

Retention decisions consider:

13.1. The duration of an active engagement, account, support period, or Seedcore Intelligence access period.

13.2. Whether continued retention is requested or reasonably expected for a continuation Service.

13.3. The sensitivity and volume of the information.

13.4. The need to preserve project continuity or answer later questions.

13.5. Accounting, tax, insurance, contractual, and legal requirements.

13.6. Security, fraud-prevention, backup, and disaster-recovery needs.

13.7. Applicable limitation periods and potential disputes.

13.8. A verified deletion request.

When information is no longer reasonably necessary, Seedcore will delete, deidentify, aggregate, or securely isolate it.

Information may temporarily remain in encrypted or access-restricted backups until the applicable backup cycle expires. Information subject to a legal hold may be retained until the hold ends.

Seedcore does not retain Personal Information or Client Project Information indefinitely merely because continued storage is technically possible.

14. SECURITY PROGRAM

Seedcore maintains administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of information.

Safeguards may include:

14.1. Restricting access according to job responsibilities and legitimate need.

14.2. Using unique credentials and multifactor authentication for sensitive administrative access where supported.

14.3. Protecting information in transit through current transport-security protocols.

14.4. Using reputable infrastructure providers that support encryption at rest.

14.5. Maintaining device, software, and account-security practices.

14.6. Reviewing access and removing access when no longer required.

14.7. Applying confidentiality obligations to personnel and contractors.

14.8. Evaluating material service providers based on the information they process.

14.9. Maintaining backups and reasonable recovery procedures.

14.10. Monitoring for suspicious access, vulnerabilities, or operational failures where reasonably available.

14.11. Maintaining a security-incident assessment and response process.

14.12. Limiting retention and securely disposing of information no longer needed.

14.13. Reviewing safeguards as Seedcore, its systems, and relevant risks change.

No method of electronic storage, internet transmission, cloud processing, or security is completely invulnerable. Seedcore cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

15. SECURITY INCIDENTS

Seedcore investigates suspected unauthorized access, acquisition, use, loss, or disclosure appropriate to the nature of the incident.

Seedcore may respond by:

15.1. Restricting or terminating access.

15.2. Changing credentials or requiring password resets.

15.3. Isolating affected systems.

15.4. Preserving relevant evidence.

15.5. Contacting affected providers.

15.6. Engaging appropriate technical, legal, or security specialists.

15.7. Notifying relevant authorities.

15.8. Notifying affected individuals where required.

If an incident qualifies for notification under applicable law, Seedcore will provide notice within the legally required period. A notice may describe the incident, affected information, remediation, protective measures, and relevant contact information.

16. YOUR SECURITY RESPONSIBILITIES

You are responsible for:

16.1. Using a strong and unique password.

16.2. Enabling multifactor authentication when available.

16.3. Protecting devices and email accounts used to access Seedcore.

16.4. Limiting account access to authorized individuals.

16.5. Avoiding the transmission of unnecessary highly sensitive information.

16.6. Verifying links, requests, and payment instructions before acting.

16.7. Promptly reporting suspected compromise.

16.8. Maintaining independent copies of information necessary to operate your business.

Seedcore is not responsible for a compromise caused by Client credential sharing, insecure Client devices, phishing, or another matter outside Seedcore’s reasonable control.

17. PRIVACY RIGHTS

Depending on applicable law, you may have the right to:

17.1. Confirm whether Seedcore processes your Personal Information.

17.2. Access categories or specific pieces of Personal Information.

17.3. Obtain a portable copy of qualifying information.

17.4. Correct inaccurate Personal Information.

17.5. Request deletion, subject to legal exceptions.

17.6. Restrict or limit certain processing of sensitive Personal Information.

17.7. Opt out of sale, sharing, targeted advertising, or qualifying profiling.

17.8. Withdraw consent where processing depends on consent.

17.9. Appeal the denial of a privacy request where applicable.

17.10. Receive equal service and avoid unlawful discrimination for exercising a privacy right.

Nothing in this Policy waives a right that applicable law makes nonwaivable.

18. EXERCISING YOUR PRIVACY RIGHTS

Submit a privacy request through:

Privacy email: [PRIVACY EMAIL]
Privacy request form: [PRIVACY REQUEST URL]
Mailing address: [MAILING ADDRESS]

A request should identify:

18.1. Your name and account email.

18.2. The right being exercised.

18.3. The relevant account, purchase, or interaction.

18.4. Information reasonably necessary to locate responsive records.

Seedcore may verify your identity by matching information already maintained, confirming account access, or requesting limited additional information. Verification information will be used only for verification and security.

An authorized agent may submit a request where permitted. Seedcore may require proof of authorization and direct identity confirmation.

Seedcore will respond within the period required by applicable law, generally within forty-five days where that period applies. Seedcore may use a legally permitted extension where reasonably necessary.

A request may be denied or limited when:

(a) Seedcore cannot reasonably verify identity;

(b) a legal exception applies;

(c) disclosure would adversely affect another person;

(d) the request is manifestly unfounded or excessive;

(e) Seedcore must retain the information to comply with law or establish legal rights; or

(f) fulfillment is prohibited by law.

Seedcore will explain a denial where required.

An appeal may be submitted to [PRIVACY EMAIL] with the subject line “Privacy Request Appeal” within thirty days after the decision.

19. CALIFORNIA PRIVACY NOTICE

This Section supplements the remainder of this Policy for California residents where the California Consumer Privacy Act, as amended, applies.

During the preceding twelve months, Seedcore may have collected:

19.1. Identifiers and contact information.

19.2. Customer-record information.

19.3. Commercial and transaction information.

19.4. Internet or electronic-network activity.

19.5. Approximate location derived from IP address.

19.6. Audio, electronic, or similar communication information.

19.7. Professional or employment-related information.

19.8. Business-related inferences.

19.9. Limited sensitive Personal Information necessary for account authentication, payment processing, or private communications.

The sources, purposes, retention criteria, and recipient categories are described throughout this Policy.

During the preceding twelve months, Seedcore has not sold these categories of Personal Information or shared them for cross-context behavioral advertising.

Seedcore has not knowingly sold or shared Personal Information concerning individuals under sixteen.

Seedcore uses sensitive Personal Information only as reasonably necessary to provide requested Services, maintain security, process transactions, and perform other legally permitted purposes. Seedcore does not use sensitive Personal Information to infer unrelated personal characteristics.

California residents may exercise applicable rights to know, access, delete, correct, limit qualifying sensitive-information use, opt out of sale or sharing, and receive nondiscriminatory treatment through Section 18.

California residents may also request information concerning disclosures for third-party direct marketing. Seedcore does not disclose Personal Information to third parties for their independent direct-marketing use.

20. OTHER UNITED STATES PRIVACY RIGHTS

Residents of other states may have additional rights concerning access, correction, deletion, portability, targeted advertising, sale, profiling, consent, or appeals.

Seedcore will process verified requests under the law applicable to the requester and will not unlawfully discriminate because a person exercised a privacy right.

Nothing in this Policy limits a right granted by applicable law.

21. CHILDREN

The Services are intended for adults and business users.

Seedcore does not knowingly collect Personal Information online from a child under thirteen.

A person under eighteen may not independently purchase or use a Seedcore client Service.

If Seedcore learns that it collected information from a child contrary to this Policy, Seedcore will take appropriate steps to delete or restrict it.

A parent or legal guardian may contact [PRIVACY EMAIL] concerning suspected child information.

22. INTERNATIONAL USERS

Seedcore operates from the United States.

Information may be processed and stored in the United States and in other locations where restricted service providers operate.

Privacy and data-protection laws in those locations may differ from the laws in your jurisdiction.

Where an international privacy law applies, Seedcore will rely on an appropriate lawful basis, such as performing a contract, pursuing legitimate business interests, satisfying legal obligations, or obtaining consent. Required transfer safeguards will be used where applicable.

The Services are not marketed to jurisdictions where Seedcore cannot lawfully provide them.

23. THIRD-PARTY LINKS AND SERVICES

The website, portal, Deliverables, or resources may contain links to independent third-party services.

Seedcore does not control those services and is not responsible for their privacy, security, content, availability, pricing, or conduct.

Review the third party’s terms and privacy notice before providing information or purchasing a service.

24. CHANGES TO THIS POLICY

Seedcore may update this Policy to reflect legal, operational, technological, or security changes.

The “Last Updated” date identifies the current version.

Seedcore will provide appropriate notice of a material change where required.

Seedcore will not retroactively use previously collected Client Project Information for a materially different purpose without legally sufficient notice and consent where required.

A previous version of this Policy may be requested through [PRIVACY EMAIL].

25. CONTACT

Privacy inquiries: [PRIVACY EMAIL]
Security reports: [SECURITY EMAIL]
General support: [SUPPORT EMAIL]

[LEGAL ENTITY NAME]
Doing business as Seedcore
[MAILING ADDRESS]
[WEBSITE URL]