Skip to content
IInseed

Legal

Privacy Policy

The short version: we collect the minimum needed to do our work, we do not sell your data, and we use a small number of well-known third-party services to operate the site and respond to inquiries.

Effective date: 2026-05-21 Last updated: 2026-05-21

This Privacy Policy describes how Inseed ("Inseed", "we", "our", or "us") collects, uses, and shares information when you visit inseed.dev, fill out a contact form, subscribe to our newsletter, book a call, or otherwise interact with us through this website.

Inseed is based in Kathmandu, Nepal. This policy is written to comply with Nepal's Privacy Act, 2075 (2018) and supporting Privacy Regulations, the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA) as amended by the CPRA.

If you are looking for the short version: we collect the minimum needed to do our work, we do not sell your data, and we use a small number of well-known third-party services to operate the site and respond to inquiries.

1. Information we collect

1.1 Information you give us directly

  • Contact form submissions. Name, email, country, optional company or project URL, optional budget range, optional timeline, optional project type, and an optional message field. You provide these by submitting the form at /contact or any embedded variant.
  • Booking information. When you book a call through our Calendly integration, Calendly collects your name, email, and any answers to scheduling questions. We receive this information when the booking confirms.
  • Newsletter signup. If you subscribe to our newsletter, we collect your email address.
  • Direct correspondence. If you email or message us, we keep a record of the exchange.

1.2 Information collected automatically

  • Product analytics (PostHog). We use PostHog in cookieless mode to understand how visitors use the site. PostHog does not set persistent identification cookies under this configuration. It records page views, button clicks, scroll depth, and other interaction events without persistent identifiers tied to you personally.
  • Web analytics (Google Analytics 4). GA4 is only loaded after you explicitly opt in via our consent mechanism in the footer. If you do not opt in, GA4 is not loaded and no data is sent to Google.
  • Server logs. Our hosting provider (Vercel) keeps standard request logs including IP address, user agent, and timestamps. These are used for security and operational purposes and are retained per Vercel's default retention policy.

1.3 Information we do not collect

  • We do not collect sensitive personal information (health data, financial account details, government-issued IDs) through this website.
  • We do not run third-party advertising or retargeting trackers.
  • We do not sell, rent, or trade your personal information to third parties.

2. How we use information

We use the information we collect to:

  • Respond to your inquiries, schedule calls, and deliver work to clients
  • Send the newsletter you subscribed to (and only to the extent you have subscribed)
  • Operate, secure, and improve the website
  • Comply with legal obligations

We do not use your information to train AI models, profile you, or make automated decisions that have legal or similarly significant effect on you (GDPR Article 22).

3. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases under Article 6:

Processing activity Legal basis
Responding to contact form submissions Article 6(1)(b) performance of a contract or steps prior to entering a contract
Sending newsletters you subscribed to Article 6(1)(a) consent
Loading GA4 web analytics after opt-in Article 6(1)(a) consent
Running cookieless PostHog analytics Article 6(1)(f) legitimate interest in understanding aggregate site usage
Operating server logs and security Article 6(1)(f) legitimate interest in site integrity and security
Meeting tax, accounting, and legal obligations Article 6(1)(c) legal obligation

You can withdraw any consent at any time without affecting the lawfulness of processing before withdrawal.

4. Cookies and similar technologies

Our default analytics setup is cookieless. PostHog runs without setting identification cookies. Google Analytics 4 is loaded only after explicit opt-in via the consent mechanism in our footer. Calendly may set its own cookies when you interact with the booking embed; their cookie behavior is governed by Calendly's privacy policy.

You can opt out of GA4 at any time by changing your selection in the consent settings, accessible from the footer.

5. Third-party services we use

Service Purpose Data sent
Vercel Hosting IP address, user agent, request data
PostHog Cookieless product analytics Anonymous event data
Google Analytics 4 Web analytics (consent-gated) Standard GA4 telemetry, only if you opt in
Resend Transactional email Email address, message content
Notion Form submission storage Form content
Slack Internal notifications Form content (to our private channel)
Calendly Call booking Name, email, scheduling answers
Mux Video testimonial playback Viewer playback telemetry

Each of these services has its own privacy policy. We have configured them to minimize data shared and to keep data retention aligned with this policy.

6. Data retention

  • Contact form submissions and inquiry correspondence: retained for the duration of any ongoing or potential engagement, plus 24 months thereafter, then deleted or anonymized.
  • Newsletter subscriber email addresses: retained until you unsubscribe; then deleted within 30 days.
  • Cookieless analytics event data (PostHog): retained for 12 months, then aggregated and anonymized.
  • Server logs (Vercel): retained per Vercel's default retention.

7. Your rights

Your rights depend on where you live. We honor all of the following for anyone who asks, regardless of jurisdiction, except where specific legal exemptions apply.

7.1 Rights under Nepal's Privacy Act, 2075 (2018)

If you are a resident of Nepal, you have the right to:

  • Know what personal information we hold about you and how we are using it
  • Ask for correction of inaccurate information
  • Ask for deletion of information we no longer need
  • Withdraw consent for any processing you previously consented to
  • Complain to the National Information Commission of Nepal if you believe your rights have been violated

7.2 Rights under the GDPR and UK GDPR

If you are in the European Economic Area, the United Kingdom, or another GDPR-aligned jurisdiction, you have the right to:

  • Access (Article 15): Ask us what information we hold about you
  • Rectification (Article 16): Ask us to fix information that is wrong
  • Erasure (Article 17): Ask us to delete information we hold about you, subject to legal retention obligations
  • Restriction (Article 18): Ask us to stop or limit certain processing
  • Portability (Article 20): Ask us to send you a copy of information you provided in a machine-readable format
  • Objection (Article 21): Object to processing based on legitimate interest
  • Withdraw consent for processing that relies on consent
  • Lodge a complaint with your local data protection authority

7.3 Rights under the CCPA (California Residents)

If you are a California resident, you have the right to:

  • Know what categories of personal information we have collected about you, the sources of that information, the purposes of collection, and the third parties with whom we share it
  • Access the specific pieces of personal information we have collected about you in the prior 12 months
  • Delete personal information we have collected from you, subject to legal exemptions
  • Correct inaccurate personal information we maintain about you
  • Opt-out of sale or sharing. We do not sell or share personal information as those terms are defined under the CCPA. You do not need to opt out, but you have the right.
  • Non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.

California residents may also designate an authorized agent to make a request on their behalf, subject to verification.

7.4 How to exercise any of these rights

Email privacy@inseed.dev with your request. We will respond within 30 days of receipt. We may ask for additional information to verify your identity before fulfilling the request, in proportion to the sensitivity of the data involved.

8. International transfers

Inseed is based in Kathmandu, Nepal. Some of the third-party services listed above process data in the United States, the European Union, or other jurisdictions. Where required by law, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent mechanisms to govern those transfers.

9. Children's privacy

This website is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe a child has provided us with personal information, contact privacy@inseed.dev and we will delete it. We also comply with the U.S. Children's Online Privacy Protection Act (COPPA) for children under 13.

10. Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, accidental loss, and misuse. These include encryption in transit (HTTPS), access controls on internal systems, and minimization of stored data. No system is perfectly secure; if you believe your data has been exposed through an Inseed system, email security@inseed.dev.

11. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, notify subscribers by email. The current version is always the one published at inseed.dev/privacy.

12. Contact

Privacy questions and rights requests: privacy@inseed.dev General contact: contact@inseed.dev Security disclosures: security@inseed.dev

Inseed Kathmandu, Nepal

This policy was drafted with AI assistance and reflects Inseed's current data practices, jurisdictions of operation, and the third-party services in use. For specific concerns, contact privacy@inseed.dev.