Privacy Notice

1. Scope and operator

This Notice applies to myseena.com, SEENA's installable web experience, planned native applications, and related support. “SEENA,” “we,” and “us” refer to ORIZON SYSTEMS LLC, doing business as Talenvyre Studios where a public brand name is shown. A formal mailing address remains a public-launch legal-review gate and will be published here when counsel approves it.

2. Data we collect

• Account and identity: name, email, age eligibility confirmation, policy-acceptance version and time (or per-browser confirmation for the shared demo), sign-in provider, verification state, and a one-way password hash when password sign-in is used.
• Content you provide: chats, journals, memories, people, goals, projects, check-ins, uploaded files, feedback, support messages, and other information you choose to add.
• Twin and inferred data: traits, preferences, patterns, summaries, embeddings, relationship context, emotional signals, corrections, and learning state generated from your use. AI inferences may be wrong and remain controllable.
• Voice data: recordings, transcripts, consent state, ownership confirmation, voice settings, and—only after separate consent—a provider voice profile.
• Optional connected-service data: encrypted connection tokens and the limited Gmail or Calendar metadata/content needed for a feature you authorize.
• Optional notification data: when you enable browser notifications, SEENA stores an encrypted push endpoint and device-generated delivery keys, a non-reversible lookup hash, a limited device/browser description, delivery or failure timestamps, and your reminder choices. Lock-screen notification text is generic. You can turn notifications off for that device at any time.
• Billing: plan, entitlement, transaction, and subscription identifiers. Stripe, Apple, or Google—not SEENA—processes full payment-card details.
• Technical and activity data: essential cookies, IP-derived security signals, device/browser information, coarse feature events, request timing, provider token/cost totals, error codes, and abuse-prevention records.

Journals, conversations, voice, financial notes, health-adjacent reflections, relationship details, and uploaded documents may contain sensitive information. Please add only what you are comfortable processing under this Notice.

3. Why we use data

We process data to:

• create and secure accounts, authenticate users, and prevent fraud or abuse;
• deliver requested conversation, memory, Twin, journaling, search, voice, upload, connection, optional reminder, export, deletion, and support features;
• personalize the experience according to your settings and corrections;
• operate subscriptions and enforce plan entitlements;
• diagnose failures, measure aggregate reliability and feature use, and improve safety without enabling browser session replay;
• comply with law, respond to valid legal process, and protect users or the service.

Where law requires a legal basis, processing may rely on performing the service contract, your consent for optional features, legitimate interests in security and improvement, or legal obligations. You may withdraw optional consent without affecting earlier lawful processing.

4. AI and automated processing

When you request an AI feature, SEENA sends only the content needed for that request to OpenAI for conversation, structured extraction, embeddings, transcription, or preset speech. Registration asks for explicit authorization before this optional provider processing. Chat-completion storage is disabled in SEENA's API requests, but provider abuse-monitoring or endpoint-specific retention may still apply.

AI may produce inaccurate output or infer traits and emotions incorrectly. SEENA does not use those inferences to make legal or similarly significant decisions about you. You can inspect, correct, reject, or delete available Twin and memory data. Production does not invent a synthetic response when its real AI provider is unavailable.

5. Personal Voice and biometric-data policy

Personal Voice is off by default and requires separate informed consent, recording, ownership confirmation, and activation. If you enroll, consented samples are sent to ElevenLabs to create and speak with your personal voice; those cloning samples are not eligible for the provider's zero-retention mode. You can pause, revoke, re-record, or delete My Voice. SEENA must not be used to clone or impersonate another person.

Voice recordings, a derived voice profile, and related identifiers may be treated as biometric information or a voiceprint in some jurisdictions. SEENA uses this data only to enroll, maintain, improve, secure, and play the Personal Voice you request. It is not used to authenticate your identity, make eligibility decisions, advertise to you, or train a general SEENA model.

SEENA does not sell, lease, trade, or otherwise profit from Personal Voice data itself. It discloses that data to ElevenLabs only to provide the separately consented feature, at your direction, for safety and legal compliance, or as otherwise allowed by applicable law. SEENA applies at least the same protection used for other confidential and sensitive account information.

Retention and destruction schedule: SEENA keeps active Personal Voice samples and the derived provider profile only while needed for the purpose you approved. You may request deletion at any time. Unless a shorter period is required, SEENA will permanently delete or initiate provider deletion when that purpose is satisfied, consent is revoked and deletion is requested, the account is deleted, or no later than three years after your last interaction with SEENA, whichever occurs first. Limited consent, deletion, security, backup, and legal records may remain only for their documented lawful periods.

6. Providers and disclosures

SEENA currently uses:

• Vercel for hosting, functions, and edge delivery;
• Neon for the PostgreSQL database;
• Cloudflare for DNS, proxying, and private object storage;
• Upstash for rate limits and operational locks;
• OpenAI for requested AI, transcription, embeddings, and preset voice;
• ElevenLabs for separately consented Personal Voice;
• Resend for transactional email and Zoho Mail for support email;
• Sentry for scrubbed error monitoring;
• Google, Apple, and Facebook for optional sign-in, where enabled;
• Google for optional Gmail and Calendar connections;
• the browser and operating-system push service selected by your device for optional notifications you enable;
• Stripe, Apple, and Google for billing when used.

Providers receive data only for the applicable purpose and process it under their own service terms and privacy commitments. SEENA may also disclose information with your direction, during a genuine business transaction subject to appropriate safeguards, to protect rights and safety, or when required by valid legal process.

SEENA does not sell personal data, rent it to data brokers, or disclose account content for targeted advertising. We do not knowingly share personal data in a manner treated as “selling” or “sharing” for cross-context behavioral advertising under California law.

7. Security and encryption limits

Connections use HTTPS. Account and content records are stored in encrypted-at-rest PostgreSQL at Neon. New private files, Vault objects, and Personal Voice samples are wrapped with authenticated AES-256-GCM encryption before private Cloudflare R2 storage and backup. Passwords are hashed, sessions are signed and protected, sensitive connector tokens and push subscriptions are encrypted, access is limited by user identity, and destructive controls require confirmation.

Some older private objects remain provider-encrypted while a controlled app-layer migration is audited. SEENA does not claim universal end-to-end or zero-knowledge encryption. No system is completely secure; report suspected unauthorized access to [email protected].

8. Monitoring and minimization

SEENA does not enable browser session replay. Its Sentry boundary removes user identity, content, request bodies, cookies, arbitrary extras, and detailed breadcrumbs. Product analytics may store coarse feature events and provider-reported token, timing, and cost totals, but not prompts, replies, transcripts, or chat identifiers. A displayed crisis referral adds only an account-free, content-free aggregate count—never the message, user, chat, session, or crisis category. Authentication, connector, and provider failures use content-free codes.

9. Cookies and similar storage

SEENA uses essential cookies or local storage for sign-in, security, consent handoff, release controls, and requested preferences. These are needed to operate the service. If non-essential advertising or broader analytics technology is introduced, this Notice and any legally required consent controls must be updated first.

10. Retention and deletion

• Account content generally remains until you delete it, clear its category, or close the account, unless a shorter feature-specific control applies.
• Policy acceptance and limited security records may be retained to document compliance.
• In-app error reports default to 30 days.
• Personal Voice follows the public retention and destruction schedule in Section 5, including the three-year outer limit after the user's last interaction.
• Encrypted backups and provider-held data may persist for documented recovery, security, legal, fraud-prevention, or deletion-processing windows before being overwritten.
• Demo data may be reset periodically.

Account deletion removes or initiates deletion of active account data and asks applicable providers to remove controlled data. It cannot erase information another person exported, legal records we must retain, or data already aggregated so it no longer identifies you.

11. Your controls and privacy rights

From Settings, you can access and correct profile information, inspect or correct memories and Twin traits, export account data as JSON, clear categories, disconnect providers, turn off a device's optional notifications, revoke Personal Voice, and delete the account. Turning off a device deletes its active push subscription from SEENA. Use the external account deletion page if you cannot sign in.

Depending on where you live, law may also provide rights to know, access, correct, delete, restrict or object to processing, withdraw consent, receive portable data, appeal a denied request, or complain to a regulator. Send a request to [email protected]. We may need to verify identity and may deny or limit a request only where law permits. Authorized agents must provide legally sufficient authority.

Because SEENA does not sell personal data or use it for cross-context behavioral advertising, there is currently no sale or targeted-advertising opt-out to exercise. We do not discriminate against a user for exercising an applicable privacy right.

12. International processing

SEENA and its providers may process data in the United States and other countries where they operate. Those locations may have different privacy laws. Required cross-border transfer terms and launch-region restrictions remain part of qualified legal and subprocessor review before broad international launch.

13. Adults only

SEENA is currently intended only for people age 18 or older. It does not knowingly offer accounts for children or ask users to submit a child's information. Contact [email protected] if you believe a minor created an account so it can be reviewed and deleted as appropriate.

14. Changes and contact

We may update this Notice as features, providers, or law change. The current version and effective date will remain posted. We will provide reasonable notice and request renewed consent when a material change requires it.

Privacy, security, or rights requests: [email protected]. The operator is ORIZON SYSTEMS LLC. A formal mailing address, region-specific supplemental notices, and regulator contact details remain public-launch legal-review gates.