Privacy Policy

Last updated: November 3, 2026

This policy explains what personal data Seencel processes, why, who it is shared with, where it is stored, for how long, and how you can exercise your rights. It applies to seencel.com, the application, and the public pages its users generate (shared links, public profiles and walkthroughs).

The essentials

  • We do not sell your data or use it for advertising. We do not use third-party analytics or advertising tools.
  • Your organization's data is stored on servers in São Paulo (Brazil), and each organization only sees its own.
  • The artificial intelligence features send OpenAI what you ask them to read (text, photos, drawings, audio). OpenAI does not train its models on that data.
  • Data your organization loads about third parties (clients, suppliers, staff) belongs to your organization: Seencel processes it on its behalf.
  • You can request access, correction, deletion or a copy of your data by writing to contacto@seencel.com.

1. Who is responsible

The controller of the data of accounts, billing and use of the service is Seencel ("Seencel"), the service offered at seencel.com. You can write to us about any privacy matter at contacto@seencel.com. Once Seencel is incorporated as a company, this policy will state its legal name, tax ID and registered address.

Seencel plays two different roles, and it is worth telling them apart:

  • As controller: we process the data of the people who use Seencel (your account, your organization, your subscription, how you use the service) to provide it, charge for it and protect it.
  • As processor: when your organization loads data about other people (clients, suppliers, subcontractors, staff, contacts) or shares things with them, your organization is the controller. Seencel stores and processes that data only to provide the service, following its instructions, and does not use it for anything of its own.

If your organization uses Seencel to process third-party data, it must have a legal basis to do so and inform those people. If you are one of them, you can contact the organization or write to us and we will forward your request.

2. What data we process

Seencel does not access your device's location (GPS). The locations it stores are the addresses and coordinates you enter for a project or an organization.

Data you give us

  • Account: name, email, password (kept protected by our authentication provider; we never see it), photo, phone, date of birth if you provide it, country, language and preferences. If you sign in with Google, we receive your name, email and profile picture.
  • Organization: name, logo, contact details, address, and members with their roles.
  • Billing: legal name, tax ID, billing address and, if you pay by bank transfer, the receipt you upload. We do not store card data: Mercado Pago or PayPal handle it.
  • Content: projects and their location, drawings, models, photos, documents, quotes, money movements, tasks, site logs and everything you load or create in the application.
  • Communications: messages to support, conversations with the artificial intelligence, comments, forum and chat messages, and your participation in courses (enrollments, progress, grades and certificates).

Data generated when you use Seencel

  • Sessions and security: a device identifier stored in your browser, device type, operating system, browser, IP address and the country derived from it. We use them to limit devices per account and to warn about unusual sign-ins.
  • Use of the service: which screens you open, when and for how long, and a periodic activity signal while the application is open. It is used to operate and improve the service and for support; it is not shared with third parties.
  • Sign-up source: the page you arrived on, the referring site and the campaign parameters in the address (UTM).
  • Time zone and country, derived from your connection to show dates and currencies.
  • Notifications: if you turn them on, your browser's subscription to receive them.
  • Use of artificial intelligence: which feature you used, how many credits it consumed and its cost.

3. Why we use it and on what basis

We do not use your data or your organization's content to train artificial intelligence models, and we do not sell or transfer it for commercial purposes.

  • To provide the service you signed up for: create your account, store and show your content, calculate, generate documents, send the emails the application sends on your behalf, and give you support. Basis: performance of the contract.
  • To charge the subscription and issue receipts. Basis: the contract and tax and accounting obligations.
  • To protect accounts and the service: limit devices, detect unusual sign-ins, prevent fraud and abuse, and keep security logs. Basis: our legitimate interest in a secure service and, where applicable, legal obligations.
  • To improve Seencel with aggregated usage data (which features are used, where there are errors or delays). Basis: legitimate interest. We do not build advertising profiles.
  • To send you product news, course announcements and offers related to your subscription. Basis: legitimate interest regarding people who already use Seencel, or your consent where the law of your country requires it. Every email includes an unsubscribe link.
  • To comply with the law and respond to valid requests from authorities. Basis: legal obligation.

4. Artificial intelligence

Some Seencel features use OpenAI models: the assistant and the chat, voice dictation, reading photos, drawings, receipts and spreadsheets, creating furniture from photos or descriptions, and renders. When you use one of those features, we send OpenAI what that feature needs: your message and the conversation, the context of the screen (for example, project, client or money-movement data if you ask about it), and the images, audio or document text you attach or that the feature processes.

OpenAI acts as our provider. Under its business terms, it does not use the data it receives through its API to train its models and may keep it for up to 30 days to detect abuse before deleting it. Text may go through an automated check for inappropriate content.

Conversations with the assistant are saved in your account so you can pick them up again. Artificial intelligence answers can contain errors: the changes it proposes are applied only when you confirm them, and amounts are calculated by Seencel's own functions, not invented by the model.

5. Who we share it with

We use providers that process data on our behalf, only for what is stated:

  • Supabase (on Amazon Web Services, São Paulo, Brazil): database, authentication, files and scheduled tasks.
  • Vercel: hosting of the application and delivery of the website.
  • OpenAI (United States): artificial intelligence features (section 4).
  • Resend (United States): sending emails, both ours and those your organization sends from Seencel to its clients and suppliers (quotes, purchase orders, reminders, invitations).
  • Mercado Pago and PayPal: subscription payments. They receive the data needed for the payment (for example, your email); each one handles card data.
  • Google Maps Platform: address search, maps, satellite imagery and 3D views of a project's surroundings. Your browser connects to Google when you use those features.
  • Open mapping services (OpenStreetMap and Overpass, OpenFreeMap, Overture Maps and Amazon terrain data): they receive the coordinates of a project's area to return its surroundings, terrain and neighboring buildings. They do not receive your account data.
  • Vimeo and YouTube: they play the course and tutorial videos embedded in Seencel.
  • Your browser's notification services (Google, Apple or Mozilla), if you turn notifications on.
  • Cloudflare: bot protection in some forms.
  • Google (STUN servers): they help connect browsers directly in the voice calls of live walkthroughs; the audio does not go through our servers.

We also share data when the law requires it, to defend the rights of Seencel or third parties in a proceeding, or in case of a merger or sale of the company, with prior notice. The Seencel team may access an account or organization to provide support or investigate a problem; that access is logged.

6. What your organization publishes or shares

  • Shared links: whoever opens a document, drawing or quote shared by link is recorded with their IP address, browser, where they came from, what they looked at and for how long. The organization that shared the link sees those visits and may receive a notice.
  • Public profile: the organization chooses which projects, images and progress it publishes. That profile may appear in search engines. Its visits are recorded with the IP address, browser and referrer, and the organization sees how many it receives.
  • Live walkthroughs and virtual reality: participants are shown with the name and role they enter; voice travels directly between browsers. When a headset is linked, the IP address is recorded and the organization is notified.
  • Signatures and approvals: whoever signs or approves a document is recorded with their name, email, date, IP address and browser, as evidence.
  • Course certificates: they have a public verification page with the name, course and date; lookups are logged.

7. Where it is stored and international transfers

The database and files are hosted in São Paulo, Brazil. Some providers (OpenAI, Google, Resend, Vercel and PayPal) are in the United States or have servers in other countries, so your data may be transferred outside your country. We choose providers that offer data processing agreements with standard contractual clauses or other recognized safeguards, and we give them only what each feature needs.

If you live in a country that requires consent for international transfers, you give it by using the features that need it, and you can choose not to use them or withdraw it by writing to us.

8. How we protect it

No system is invulnerable. If an incident affects your data, we will notify you and notify the authorities when the law requires it.

  • Encrypted connections (HTTPS) and data encrypted at rest by our infrastructure provider.
  • Isolation by organization in the database itself: every query only returns what your organization and your role can see.
  • Roles and permissions per member, optional two-step verification and a device limit per account, with notice of unusual sign-ins.
  • Logging of sensitive actions and of access by the Seencel team.
  • Passwords we never see: the authentication system keeps them protected.

9. How long we keep it

  • Account data and your organization's content, while the account or the organization is active.
  • When you delete something in the application (a project, a movement, a conversation), it is first hidden and can be recovered; a deleted organization can be restored for 30 days.
  • Activity history is kept according to your plan (for example, 7, 90 or 365 days) and then deleted.
  • When you close your account, we delete or anonymize your data within 30 days, except what we must keep by law (for example, billing records for the tax periods) or to defend rights.
  • Backups are renewed periodically, and deleted data disappears from them when they are overwritten.

10. Your rights

Depending on the law of your country, you can request access to your data, its correction, its deletion, a copy in a commonly used format (portability), object to processing or ask for it to be restricted, and withdraw any consent you have given. You can see and correct much of your data yourself from your profile and the application.

For everything else, write to contacto@seencel.com from your account's email. We may ask you to confirm your identity. We will answer within the deadlines set by the law that applies to you (section 13). If an organization loaded the data, we will forward your request to it.

If you are not satisfied with the answer, you can file a complaint with the data protection authority of your country.

11. Cookies and browser storage

Seencel only uses the cookies and storage it needs to work. It does not use third-party advertising or analytics cookies, which is why we do not ask you to accept them.

  • Session: keep you signed in (authentication cookies).
  • Language: remembers the language you chose.
  • Sign-up and invitations: briefly remember where you came from (10 minutes), a pending invitation (24 hours) or a pending payment (1 hour).
  • Password-protected links: remember that you already entered the password of a shared link.
  • Local storage: your device identifier, theme, chosen currency, notices you dismissed and drafts so you do not lose work.
  • Third-party: Google maps and YouTube and Vimeo videos may set their own cookies when shown. They are governed by those companies' policies.

You can delete cookies from your browser; if you delete the session ones, you will have to sign in again.

12. Minors

Seencel is a professional service for people over 18. We do not knowingly collect data from minors; if we detect an account belonging to a minor, we will delete it.

13. Depending on where you live

Argentina

  • Law 25,326 on the Protection of Personal Data applies. We answer access requests within 10 calendar days and correction or deletion requests within 5 business days.
  • The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as provided in article 14, paragraph 3 of Law No. 25,326.
  • The Agency for Access to Public Information, as the Control Body of Law No. 25,326, has the power to handle the complaints and claims filed by those whose rights are affected by non-compliance with the rules on personal data protection.

Chile

  • Law 19,628 on the Protection of Private Life and its amendments apply, including Law 21,719 from its entry into force.
  • You can exercise your rights of access, correction, deletion, objection, portability and blocking, and file a complaint with the Personal Data Protection Agency once it is operating.

Mexico

  • The 2025 Federal Law on the Protection of Personal Data Held by Private Parties applies. This document serves as the comprehensive privacy notice.
  • You can exercise your rights of access, rectification, cancellation and objection (ARCO), revoke your consent and limit the use of your data by writing to contacto@seencel.com. We will answer within 20 business days at most.
  • The competent authority is the Secretariat of Anti-Corruption and Good Governance.

Peru

  • Law 29733 on Personal Data Protection and its regulation (Supreme Decree 016-2024-JUS) apply.
  • You can exercise your rights of access, rectification, cancellation, objection and portability, and file a complaint with the National Authority for Personal Data Protection of the Ministry of Justice and Human Rights.

Spain and the European Union

  • The General Data Protection Regulation (GDPR) and Organic Law 3/2018 (LOPDGDD) apply. The basis for each processing activity is in section 3.
  • We will answer your request within one month, extendable in the cases provided for in the GDPR.
  • You can file a complaint with the Spanish Data Protection Agency (aepd.es) or with the authority of your country of residence.

14. Changes and contact

If we change this policy, we will update the date above. If the change is significant, we will let you know by email or in the application before it takes effect.

For any privacy question or to exercise your rights: contacto@seencel.com.