Legal · Draft
Privacy Policy
Version 0.4 · Last revised October 10, 2026 · Pending attorney review. Bracketed items remain placeholders. This policy explains how Fixed Seed LLC collects and uses personal information across fixedseed.com, the developer console, the Fixed Seed API, and Fixed Seed apps such as Rare Spawn (rarespawn.ai). We collect what is needed to run these products and do not sell personal information or train models on customer content. The one advertising tool we use is Meta ad measurement on fixedseed.com's public pages, described below.
What we collect
- Account: verified email, name, provider identifier and birthday, and a profile photo if you upload one. We don't keep or show the photo from your sign-in provider.
- Credentials: one-way API-key, session and app-token hashes.
- Jobs and creations: prompts, parameters, uploaded and reference images, palettes, generated images, 3D models and other outputs, status, timing, and errors.
- Gallery submissions: the work you submit, the display name you choose, and your optional note to reviewers.
- Delivery: webhook target and bounded attempt status; payloads omit inputs and outputs.
- Usage and billing: metering, credit balances and ledgers, and purchases; card details go directly to Stripe.
- Product analytics: first-party page views, feature events and error reports that Fixed Seed products record on their own servers to run and improve them. Apart from Meta ad measurement, no third-party trackers; browser Do Not Track is honored where a product supports it.
- Logs and cookies: IP, user agent, timestamps, essential session and sign-in-state cookies, and Meta's
_fbp and _fbc cookies where ad measurement is on.
Ad measurement
fixedseed.com uses Meta's pixel and Conversions API to learn which of our ads lead to visits and Echo purchases. On public pages (not the Playground, your account, the developer console, the docs or the Lattice pages), and never for an account whose birthday makes its owner under 18, the pixel sets Meta's cookies and tells Meta which page you viewed and when you view Echo or start checkout. When you buy Echo, our server reports the purchase to Meta with a one-way hash of your email, your IP address, your browser's user agent and the ad-click ID, so Meta can match it to an ad. Meta handles this data under its own terms. Prompts, creations and account content are never sent.
fixedseed.com uses X's pixel and Conversions API the same way, on the same pages and under the same choice, but only while you're signed in to an account whose birthday makes you 18 or older: the pixel sets X's cookies and tells X which page you viewed and when you view Echo or start checkout, and when you buy Echo our server reports the purchase to X with a one-way hash of your email, your IP address, your browser's user agent and the X ad-click ID. X handles this data under its own terms.
Visitors in Europe are asked first, and nothing loads unless they allow it. Browsers that send Global Privacy Control or Do Not Track are never measured. Everyone else can turn it off for their browser here.
How we use it
We use data to operate and secure the Service, settle usage, review gallery submissions, provide support, prevent abuse, comply with law, maintain financial records, and send service communications. Your birthday sets up your account for your age and is never shown publicly.
Processors
| Railway | Application hosting and PostgreSQL. |
|---|
| Railway and Tigris | Object storage for uploads and generated media. |
|---|
| Modal | GPU compute where jobs execute. |
|---|
| AI model providers | Image, 3D and language models that fulfil specific generation features; they receive the prompts and reference media needed for that request (see Model providers). |
|---|
| Stripe | Payments, tax calculation, and receipts. |
|---|
| Google | Sign-in identity. |
|---|
| Meta | Ad measurement on fixedseed.com's public pages, where allowed. |
|---|
Retention
Lattice Remote: when you choose to share a desktop control panel, we relay its layout, current values and your control changes to browsers signed into the same Fixed Seed account. Panel contents and control messages stay transient. We keep account-bound session and device authorization metadata, and remove expired remote-session records seven days after their expiry. You can stop sharing or disconnect a device from Lattice.
Signed input and output URLs expire. Development does not yet run an automated object-deletion sweep. Job, creation and usage records remain while the account is active and as needed for billing and security; ledger and purchase records remain as law requires. Featured gallery work stays public until removed. If a birthday shows an account belongs to someone under 13, we close it at once and delete its account data; we keep one-way hashes of its sign-in identity and email until their 13th birthday, only to stop a new sign-up. Verified deletion requests exclude records we must retain.
Security and rights
We use TLS, one-way credential hashes, account-bound uploads, expiring signed URLs, signed SSRF-safe webhooks, managed secrets, two-factor authentication for administrators, and least privilege. Depending on jurisdiction, you may have access, correction, deletion, portability, or complaint rights. We do not sell personal information. Contact: support@fixedseed.com · Fixed Seed LLC, [MAILING ADDRESS].
Children and changes
The Service is not for anyone under 18. We will announce material policy changes by email or Service notice.