Privacy policy

Policyseed is built to hold as little of your data as possible: the generator runs in your browser, the checkout is handled by Polar as merchant of record, and the AI tailoring is processed by Anthropic’s API and not stored by us. This page states exactly what happens to data at each step. Effective 2 September 2026.

1. Summary

• Policyseed has no user accounts and no database. We store nothing about you on our servers.
• The free generator never sends your answers to us.
• Purchases are processed by Polar, which is the merchant of record and the system of record for orders and license keys.
• Audit Kit tailoring requests are processed by Anthropic’s API; the outputs are returned to your browser and not retained by us.
• We set no cookies and run no analytics.

2. The free generator

The generator is a client-side application. The 23 intake answers (company name, product, stack, data types, the names and titles of your security owner and approver, an incident contact, scope and dates) are rendered into the 22 policies by code running in your browser. No request containing those answers is made to a Policyseed server.

To let you return to a half-finished intake, the answers are saved in your browser’s local storage under the key policyseed.intake.v1. If you use the share link, the answers are encoded into the URL fragment (the part after #), which browsers do not send to servers. Anyone you give that link to can read the answers, so treat it like the document itself.

3. Checkout and license keys (Polar)

When you buy the Audit Kit or an Agency licence, your browser sends the intake and the product you chose to our /api/checkout endpoint, which creates a checkout session with Polar and attaches the intake as checkout metadata. We do this so that the download page can rebuild your kit after payment without us storing anything. The endpoint does not log the intake.

Polar (Polar Software Inc.) is the merchant of record. On its checkout page it collects your email address, payment details (handled by its payment processor; we never see card numbers), billing country for tax, and any discount code. Polar issues the receipt, calculates and remits VAT or sales tax, and generates the license key that entitles you to tailoring runs. Polar’s privacy policy governs that data. Polar sends us webhook events for orders and benefit grants; our webhook handler verifies the signature and logs the event type and identifiers only. It keeps no state.

When you open the download page, our /api/session endpoint reads the checkout from Polar, returns your email, license key and intake to your browser, and discards them. Your browser may keep the key and intake in local storage so you can return to the page; clearing site data removes them.

4. AI tailoring (Anthropic)

Each Audit Kit tailoring run sends your license key, a policy ID and the intake to our /api/policy endpoint. The endpoint validates the key with Polar, then sends the intake and the policy context to Anthropic’s API to generate tailored policy statements and procedures, and returns the result to your browser. The Word documents, spreadsheets and calendar file are assembled in your browser; the finished ZIP never touches our server.

The intake contains business information (company and product names, tool names) and the names and titles of two or three people (security owner, approver, and possibly an incident contact). Anthropic processes this under its commercial terms of service, which state that data submitted through the API is not used to train Anthropic’s models. Anthropic’s privacy policy describes any short-term retention for safety and abuse monitoring. We do not log prompts or model outputs. A run is reserved on your license key with Polar before the model is called; a refused or failed run is refunded, so only successful runs count.

5. Hosting and request logs

The site is hosted on Vercel. Like any hosting provider, Vercel records standard request logs (IP address, requested path, user agent, timestamp, response status) and keeps them for a short period under its own retention policy. We do not export, enrich or analyse these logs, and they do not contain intake data, license keys or model outputs.

6. Cookies, analytics and tracking

None. Policyseed sets no cookies, first-party or third-party. We load no analytics, advertising, session replay, chat widget or social embed. There is no consent banner because there is nothing to consent to. The Polar checkout page is a separate site and uses cookies under Polar’s policy.

7. Open-source repository

The templates, renderer and CLI are published on GitHub. Using the CLI locally involves no network requests. Interactions on GitHub (issues, pull requests) are governed by GitHub’s privacy statement.

8. Your rights and requests

Because we hold no personal data, requests to access, correct or delete data about a purchase should be directed to Polar, which is the controller for order and billing data. If you email the support address shown on your Polar receipt, we will help route the request. Refunds are described on the refund page.

9. Children

Policyseed is a business tool and is not directed at children under 16. We do not knowingly collect data from them.

10. Changes

If this policy changes, the effective date at the top is updated and the change is visible in the site’s public repository history. Material changes to how purchase data is handled would be announced on this page before taking effect.

11. Contact

Questions about this policy: open an issue on the GitHub repository above, or email the support address on your Polar receipt. See also the terms of service and about page.