SEAMUS™ Privacy Policy

Seamus Solutions LLC — Last updated: April 5, 2026

1. Who We Are

Seamus Solutions LLC ("we," "us," "our") operates the SEAMUS external attack surface management platform and the website at seamus.app.

Contact: privacy@seamus.app

Mailing address: Seamus Solutions LLC, 4079 Governor Dr #202, San Diego, CA 92122, USA

2. Information We Collect

2.1 Website Visitors

• Email address — when you sign up for early access or trial via the signup form
• Approximate location — country and city derived from your IP address by Cloudflare at the time of signup (we do not store your IP address)

2.2 SEAMUS Product Users

• License identifier — a customer-provided field in your license file (typically an email address or company name)
• Product version — the version of SEAMUS you are running
• Timestamp — when the Console was started
• Approximate location — country, region, and city derived from your IP address by Cloudflare (we do not store your IP address)

This telemetry is transmitted as a single, non-blocking beacon when the SEAMUS Console starts. It is used solely for aggregate usage analytics (how many installations, geographic distribution, version adoption). SEAMUS does not contact our servers to validate your license or restrict functionality.

2.3 Information We Do NOT Collect

• We do not collect your scan results, vulnerability findings, or any data about your monitored domains
• We do not collect the contents of your configuration files
• We do not track your activity within the Console UI
• We do not use cookies for tracking on seamus.app (Cloudflare may set functional cookies for bot protection)

3. How We Use Your Information

• Email addresses — to contact you regarding SEAMUS, product updates, trial information, and marketing. You can unsubscribe at any time.
• Telemetry data — to understand product adoption, plan capacity, and prioritize development. We do not sell this data or share it with third parties for marketing.

4. Third-Party Processors

• Cloudflare (San Francisco, CA) — hosts our website and signup/telemetry API. Processes IP addresses for GeoIP lookup. Cloudflare Privacy Policy
• Anthropic (San Francisco, CA) — provides AI analysis within the SEAMUS Console. When you use AI features, your scan data is sent to Anthropic's API for processing. Per Anthropic's API data policies, API inputs and outputs are not used for model training. See Anthropic's privacy policy for current data handling details. Anthropic Privacy Policy
• GitHub (Microsoft) — hosts container images distributed to customers. GitHub Privacy Statement

5. Data Retention

• Signup emails — retained until you unsubscribe or request deletion
• Telemetry beacons — retained for 400 days, then automatically deleted
• Telemetry log entries — retained for 90 days

6. Your Rights

California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect and how we use it
• Delete your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights including access, rectification, erasure, restriction of processing, data portability, and the right to object. Our legal basis for processing is legitimate interest (usage analytics) and consent (email marketing).

Exercising Your Rights

To exercise any of these rights, contact us at privacy@seamus.app. We will respond within 30 days.

7. CAN-SPAM Compliance

We comply with the CAN-SPAM Act. All marketing emails include our physical mailing address and a clear unsubscribe mechanism. We honor unsubscribe requests within 10 business days.

8. Cookies

The seamus.app website does not use analytics cookies or tracking pixels. Cloudflare may set functional cookies (__cf_bm) for bot protection. These are strictly necessary cookies and are exempt from consent requirements under the ePrivacy Directive.

9. Children

SEAMUS is a business product. We do not knowingly collect information from children under 13. If you believe we have collected such information, contact us immediately.

10. Changes to This Policy

We may update this policy from time to time. We will notify existing customers of material changes via email. The "last updated" date at the top reflects the most recent revision.

11. Contact

For privacy questions or requests:

• Email: privacy@seamus.app
• Seamus Solutions LLC, 4079 Governor Dr #202, San Diego, CA 92122, USA