Privacy Policy

1. Who we are and what this covers

Seiku Labs, Inc., 131 Continental Drive, Suite 305, Newark, Delaware 19713 (“Seiku Labs,” “we,” “us”) makes Setline, software that consolidates an institution's policies and procedures into one governed version. This policy covers:

• seikulabs.com, our company site;
• gosetline.com and setline.seikulabs.com, Setline's site, contact form and hosted demo;
• emails, calls and meetings with prospective customers, design partners and investors;
• Setline sandboxes we run for design partners (section 4).

Setline is in early access, not a generally available product. This policy will change as it grows.

2. Information we collect

What you give us

• Contact and walkthrough requests: your name, work email and organization, and if you choose, your role, the topics you're interested in, and a message.
• Emails, calls and meetings: what you tell us, such as your title and your organization's needs, and notes we take.
• Design partner program: the names, roles and work email addresses of the people your institution asks us to give access to, and the agreements we sign with you.

What we collect automatically

• seikulabs.com uses Google Analytics, only if you accept it. It collects your IP address, device and browser details, the pages you view and how you arrived, using cookies (section 6).
• Setline's site and demo run no analytics. Our server logs each request's route, status and timing. Those logs don't include your IP address, the full address you visited, or anything you typed.
• Our hosting and network providers (Render and Cloudflare) process IP addresses to deliver the service and block abuse. We use IP addresses to rate-limit abusive traffic.
• Spam filtering on the contact form uses a timing check and a hidden field. It doesn't record your IP address or browser.

What we don't want

Setline works on internal policy and procedure documents. Please don't send us customer or consumer personal data, account numbers, transaction records, health information or payment details. Nothing in Setline needs them.

3. How we use it

We use your information only for the purposes below. If you're in the EEA or UK, the last column is our legal basis.

We don't sell personal information. We don't share it for cross-context behavioral advertising. We don't use it to train AI models.

4. Design partner sandboxes

What your institution puts in a Setline sandbox belongs to your institution. We process it only to provide the sandbox, under the non-disclosure and data processing agreements we sign before it's set up. Where those agreements differ from this policy, they control.

• Your own instance. Each institution gets its own server and disk, hosted by Render in Oregon, USA. No other customer's data is on it.
• Files aren't kept. Setline reads an uploaded file's text, then discards the file. The text stays until you remove it or we delete the instance.
• Nothing leaves by default. No document text leaves your instance. An optional AI-assisted mode sends document text to Anthropic's API, and we turn it on only if you ask in writing.
• Never pooled, never trained on. Your content and your team's decisions are never combined with another institution's or used to train any model.
• Limited access. Only named Seiku Labs staff can reach your instance, through an account protected by two-factor authentication.
• Deletion. On written request, or when the partnership ends, we delete your instance and its disk within 30 days. Our host's encrypted daily backups expire within 7 days after that.
• Incidents. We tell you within 72 hours of confirming a security incident that affects your instance.

5. Who we share it with

We share personal information only with the service providers below, who may use it only to provide their service to us.

We may also disclose information:

• when the law, a court order or a regulator requires it;
• to protect the rights, safety or security of Seiku Labs, our users or others;
• in a merger, acquisition, financing or sale of assets, under confidentiality terms, with this policy continuing to apply;
• with your consent.

6. Cookies and analytics

• seikulabs.com sets Google Analytics cookies (_ga and _ga_<ID>) to count visits and see how people find us. They last up to 2 years. We set them only after you agree in the cookie banner, which you can reopen from Cookies in the home page's footer to change your choice. You can also block them in your browser settings or with Google's opt-out add-on.
• Setline's site and demo set one cookie, only when you sign in. It keeps you signed in, expires after 12 hours, and can't be read by scripts on the page.

We use no advertising or cross-site tracking cookies. This page sets no cookies at all.

7. How long we keep it

We keep information only as long as we need it for the purposes in section 3.

8. Security

Our sites are served only over HTTPS. Stored data and its backups are encrypted at rest by our host. Each design partner has a separate instance, sign-in tokens are stored only as hashes, and our administrative accounts use two-factor authentication. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

9. Your choices and rights

• Marketing email. Use the unsubscribe link, or reply “unsubscribe.” We'll still answer anything you send us.
• Your information. Email hello@seikulabs.com to see, correct, delete or get a copy of your information, or to object to or limit how we use it. We reply within 30 days, or 45 where US state law allows. We may need to confirm your identity first. We won't treat you differently for asking.
• EEA and UK. You can withdraw consent at any time, and complain to your data protection authority.
• US states (including California, Colorado, Connecticut, Virginia and others with privacy laws). You can ask to know, delete or correct your information, and to opt out of its sale, sharing or use for targeted ads. We don't do any of those three. An authorized agent may ask for you. If we turn a request down, reply to appeal.
• Sandbox content. For content in a design partner sandbox, send requests through your institution. We act on its instructions.

10. Other things to know

• International transfers. We're based in the United States and store information there. If you're outside the US, your information is transferred to the US. Where the law requires it, we use safeguards such as the EU Standard Contractual Clauses.
• Children. Our sites and Setline are for businesses and aren't directed at anyone under 16. We don't knowingly collect children's information.
• Changes. When we update this policy, we change the effective date at the top. We email design partners before a material change takes effect.
• Contact. Seiku Labs, Inc., 131 Continental Drive, Suite 305, Newark, Delaware 19713, hello@seikulabs.com.