Privacy Policy — SeldonFrame
Effective date: July 2, 2026. If we materially change how we collect or use data, we will update the date above and post a summary of the change on this page — where a change is significant, we will also try to notify active workspace owners by email.
1. Introduction
SeldonFrame ("we," "our," "us") is a business identity operating system that helps service professionals stand up a complete front office — website, booking, intake, CRM, and AI agents — in one conversation. This Privacy Policy explains, in plain language, what we collect, why, who we share it with, how long we keep it, and what control you have over it. It covers the SeldonFrame product at app.seldonframe.com and hosted workspace subdomains (‘*.app.seldonframe.com’), and it also covers SeldonFrame's tools when you use them through ChatGPT (see Section 8, which is written to match those tools' exact inputs and outputs).
2. Data We Collect
We collect three categories of data:
- Business information you provide. Business or account name, email address, business description, an existing website URL, city, state, and phone number. You give us this directly — through the onboarding/soul wizard, a settings form, or one of the ChatGPT tools described in Section 8 (which collect the same fields: business name, description, website URL, city, state, phone).
- Content generated for your workspace. The website copy, page layout choices, and starter agent configuration we generate from the business information above, plus anything you or your agents add afterward — client/contact records, notes, booking history, and messages sent through the platform.
- Minimal operational data. We keep this to what is actually needed to run the service: authentication session data (for signed-in accounts), and, for the free/no-signup workspace-creation path, the requesting IP address — checked transiently against a rate limit (max 3 workspaces/hour, 10/day per IP) and not retained as a profile. We do not run marketing analytics/ad-tracking scripts on the product surfaces described in this policy.
What we do not collect through these tools and forms: we do not collect payment card numbers (Stripe handles checkout directly and we never see or store card data), protected health information, government-issued identification numbers, or authentication secrets/passwords via the ChatGPT tools or the workspace-creation forms described in this policy.
3. Why We Use It (Purposes)
- To generate and host your workspace — turning the business details you give us into a live public website, booking page, intake form, and starter AI agent, on a real subdomain.
- To provide the core service — running your CRM, booking, messaging, and agent features, and keeping your business identity ("soul") consistent across them.
- To operate and secure the platform — rate-limiting abuse, debugging errors, and keeping the service available.
- To support you — responding when you contact us with a question or a request about your data.
We do not use your business or client data to train AI models, and we do not use it for advertising or ad-targeting.
4. Who We Share It With (Recipients / Sub-processors)
We do not sell your personal data, and we do not share it for third-party advertising. We use a small set of infrastructure providers to run the service, each bound to process data only to provide their service to us:
- Vercel — application hosting and serving your public workspace pages.
- Neon (PostgreSQL) — our primary database, where workspace, contact, and business-record data is stored.
- Anthropic and/or OpenAI — process the business details you provide (name, description, location, phone, website) to generate website copy and starter agent configuration for your workspace. These providers do not receive your client/contact records.
- Stripe — payment processing for paid SeldonFrame plans and marketplace purchases. We never receive or store your card number; Stripe handles that directly.
- Twilio — sends SMS (e.g. booking confirmations, reminders) only for workspaces that enable text messaging.
- Resend — sends transactional email (e.g. booking confirmations, magic-link sign-in, welcome messages).
- Composio — only for workspaces that explicitly connect a third-party integration (e.g. a calendar), to broker that connection.
We only send each provider the minimum data it needs to do its job. We may also disclose data if required by law, or to protect the rights, safety, or property of SeldonFrame or our users.
5. Retention
- A workspace and its data persist for as long as the workspace is active.
- An unclaimed workspace — one created without signing up, including any workspace created through the ChatGPT tools in Section 8 — is reachable via a temporary management link that expires about 7 days after creation. Claiming the workspace (creating an account and linking it, via the claim link) removes that expiry and puts you in normal account-lifecycle retention.
- You can request deletion of a workspace and its data at any time — see Section 6. We remove the underlying records within a reasonable time after a verified request, except where we are required to keep certain records (e.g. billing records) for legal or accounting purposes.
6. Your Controls & Rights
- Claim, manage, or delete your workspace using the claim/admin link returned when the workspace was created (or, once claimed, from your account dashboard).
- You can export your data at any time.
- You can disconnect any optional integration (Google OAuth, Composio connections, etc.) at any time.
- You can request access to, correction of, or deletion of your personal data, or object to a particular use, by contacting us at the address in Section 10 — consistent with rights available under laws such as the GDPR and CCPA, regardless of where you are located. We will verify the request and respond within a reasonable time.
- For self-hosted deployments: your data never leaves your own infrastructure.
7. Data Storage and Security
- Data is stored on servers in the United States (Vercel, Neon PostgreSQL).
- All data is encrypted in transit (HTTPS/TLS).
- Sensitive credentials (API keys, integration tokens) are encrypted at rest.
- We use industry-standard security practices, and access to production data is limited to what is needed to operate the service.
8. Using SeldonFrame Through ChatGPT
SeldonFrame exposes three tools to ChatGPT (via the Model Context Protocol). No SeldonFrame account or API key is required to use them. This table lists exactly what each tool collects, what it returns, how that data is used, and how long it is kept:
| Tool | Collects (inputs) | Returns (outputs) | How it's used | Retention |
|---|---|---|---|---|
build_workspace | Business name (required), description, an existing website URL, city, state, phone — whatever you give ChatGPT to describe the business. | The new workspace's public URL, a workspaceToken, and a claimUrl. | Creates and hosts a public business website/workspace. The business details are sent to our LLM provider (Anthropic and/or OpenAI) to generate the site copy and a starter agent configuration. The workspaceToken is not an account credential or API key — it is a short-lived, single-workspace management handle scoped only to the one workspace it created, used so you can keep configuring that workspace later in the same chat or via the claim link. | Workspace persists while active. If never claimed, the workspaceToken / claimUrl expire after about 7 days. |
browse_marketplace | Free-text search query and/or a category (niche) filter. No business or personal data required. | A list of matching free agents: name, description, category, and slug. No prices are shown — every agent listed through ChatGPT is free. | Read-only lookup against our public agent catalog. Nothing is stored, and nothing you provide is used for any purpose beyond returning the search results. | Not retained — this tool does not write any data. |
deploy_agent | The workspace_token from build_workspace and the agent_slug of the chosen agent. | Whether the install succeeded, the agent's name, and a URL to manage it. | Installs a free agent configuration into the workspace identified by your token. This tool never takes payment or links out to a purchase flow — through ChatGPT, only free agents can be installed; an agent that is not free is simply not installed (the tool suggests choosing a free agent instead). | Follows the target workspace's retention (see Section 5) — the installed configuration lives with that workspace. |
None of these three tools collect payment-card data, protected health information, government identifiers, or passwords/API keys — there is nowhere in their inputs for that data to go. Rate-limiting on build_workspacechecks the request's IP address transiently against a counter (3/hour, 10/day) and does not build a profile from it.
9. Google OAuth
When you sign in with Google, we receive your name and email address from your Google account. We do not access your Google contacts, calendar, drive, or any other Google services unless you explicitly connect them in Settings. We use Google OAuth solely for authentication.
10. SMS / Text Messaging & Mobile Information
When you opt in to text messaging — by submitting a form, checking a consent box, or texting us — you agree to receive recurring automated messages at the mobile number you provide. We collect your mobile phone number and messaging consent so we (or the business operating on SeldonFrame) can send you SMS such as booking confirmations, appointment reminders, missed-call follow-ups, and review requests.
- We do not sell or share your mobile information, phone number, or SMS opt-in/consent data with third parties or affiliates for their own marketing or promotional purposes.
- We may share this information only with service providers who help us operate the messaging program (such as our SMS carrier, Twilio), and strictly to deliver the service.
- You can opt out at any time by replying STOP, or reply HELP for assistance.
- Message and data rates may apply; message frequency varies.
See our Terms of Service for the full SMS program disclosures (opt-out, HELP, message frequency, and rates).
11. Children's Privacy
SeldonFrame is a general-audience business tool intended for users aged 13 and older, and is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us at the address below and we will remove it.
12. Open Source
SeldonFrame is open source. The source code is available at github.com/seldonframe/seldonframe. Self-hosted users control their own data entirely — no data is sent to SeldonFrame servers.
13. Contact & Support
For privacy questions, or to request access to, correction of, export of, or deletion of your data: hello@seldonframe.com (general support is also reachable at support@seldonframe.com).
14. Changes to This Policy
We may update this policy as the product changes — including as we add or change what the ChatGPT tools in Section 8 collect and return. Changes are posted on this page with an updated effective date; for significant changes we will also try to notify active workspace owners by email.