Privacy Policy

Effective 10 August 2026

This policy explains what personal information SEAD Nomads — "we" and "us" below — collects when you use seadnomads.com or the membership platform, why we hold it, who else handles it, and what you can ask us to do with it.

1. What we collect

What you give us

Your email address. Required to hold an account. It is also how you sign in: access is granted by a one-time link sent to that address, so there is no password for us to store and we will never ask you for one.
Your name, only if you join a bootcamp waitlist. The membership platform itself does not ask for a name.
What you post. The text of posts and replies you write in the members' community, and when you wrote them.

What Gumroad passes to us

Payments are taken by Gumroad, not by us. When a purchase, renewal, refund or cancellation happens, Gumroad notifies us of the buyer's email address, the plan bought, and a sale reference. We use that to open, maintain or close access.

We never receive or store your card number, bank details or billing address. Those stay with Gumroad.

What is collected automatically

A session cookie once you sign in, described in section 4.
Server logs — IP address, browser user agent, the page requested and a timestamp — kept by our host for delivery, security and abuse prevention. The rate limits on sign-in and on form submissions rely on this.

We do not buy personal information about you from anyone, and we do not run advertising trackers.

2. How we use it

To give you access — matching your sign-in address to an active membership, and issuing the sign-in links themselves.
To deliver what you paid for — the Skills Library, the Guides, Templates and Meetups.
To run the community — showing your posts to other members, and moderating where the conduct rules in our Terms require it. Members see each other by founding mark and member number; your email address is never shown to another member.
To handle purchases — opening access on a sale, closing it on a refund or cancellation, and answering billing questions.
To answer you when you write to us.
To keep the platform up and safe — diagnosing faults, blocking abuse, and meeting our legal obligations.

We do not use your information to make automated decisions with a legal or similarly significant effect, and we do not sell it.

3. Who else handles it

We keep the list of processors short and name all of them:

Supabase — the database and authentication service. Your account record, your posts and your sign-in tokens are stored there.
Gumroad — takes payment, and is the controller of your payment details in its own right. Its privacy policy governs what it does with them.
Vercel — hosts and serves the site, and produces the server logs described above.

Each is bound to process the data only on our instructions. Beyond these, we disclose personal information only where the law requires it, or where it is necessary to establish or defend a legal claim.

4. Cookies

We use cookies for one purpose: keeping you signed in. When you follow a sign-in link, an authentication cookie is set so that each page you open recognises your session. It is strictly necessary — refusing it means you cannot sign in — and it is cleared when you sign out.

We do not currently run analytics, advertising or social media cookies on this site. If that changes, this section will be updated and, where consent is required, we will ask for it before setting anything.

5. How long we keep it

Account records — for as long as your membership is active, and afterwards while your membership can be reinstated. Ask us to delete it and we will.
Community posts — until you or a moderator delete them.
Bootcamp waitlist entries — until that bootcamp has run, or until you ask us to remove you.
Server logs — for the short retention window our host applies to them.
Payment records — held by Gumroad under its own retention obligations, which typically run to several years for tax and accounting purposes.

6. Your rights

Depending on where you live, you can ask us to:

give you a copy of what we hold about you;
correct anything inaccurate;
delete your data, subject to records we must keep by law;
export what you gave us in a portable form;
restrict or object to a particular use;
withdraw consent, where the use rests on consent.

Email us and we will act within one month. We verify requests by replying to the address on the account — which is why we cannot action a request for an account you cannot receive mail for. Exercising any of these rights costs nothing and we will not treat you differently for it.

If you are in a jurisdiction with a data protection authority, you also have the right to complain to it. We would rather you came to us first.

7. International transfers

The services in section 3 operate in data centres outside Southeast Asia, so your information may be processed in countries other than your own. Where the law requires a transfer safeguard, we rely on the terms those providers offer for that purpose.

8. Children

The platform is not intended for anyone under 16, and we do not knowingly hold their information. If you believe a child has given us data, write to us and we will remove it.

9. Changes

If this policy changes materially, we will update the effective date at the top and — where the change affects how we use data you have already given us — tell active members by email.

10. Contact

Privacy questions, requests and complaints go to support@seadnomads.com, addressed to SEAD Nomads. Local data protection law in the Philippines applies to how we handle them.