Security, privacy & strict data protection.
Seminara is built on strict cryptographic isolation, zero foundation model data retention, and automated compliance. Below are our core technical safeguards and strict security policies.
Core architectural guarantees.
Zero model training guarantee
Your presentation slide decks, speaker notes, custom knowledge documents, and attendee voice transcripts are never used to train, retrain, or fine-tune external foundation models or voice synthesizers. API payloads are dispatched under strict zero-data-retention parameters.
- No customer data used for public LLM learning
- Zero-retention voice synthesis endpoints
Database tenant isolation (RLS)
All application data resides in Supabase PostgreSQL guarded by strict Row-Level Security (RLS) policies. Every database operation requires cryptographic authentication matching the verified host account (auth.uid() = host_id), preventing cross-tenant access.
- Cryptographic per-user row-level partitioning
- Scoped machine-to-machine API tokens
Encryption in transit & at rest
All HTTP REST requests, Server-Sent Events (SSE), and WebRTC audio streams are encrypted in transit using TLS 1.3. All database tables, slide assets, and vector embeddings are encrypted at rest using industry-standard AES-256 storage encryption.
- Strict TLS 1.3 transport enforcement
- AES-256 encrypted database and asset buckets
PCI-DSS Level 1 payment processing
All subscription transactions and billing checkouts are processed exclusively through Dodo Payments, a fully certified PCI-DSS Level 1 Merchant of Record. Zero payment card numbers or CVVs are ever collected, processed, or stored on Seminara servers.
- Zero credit card data touches Seminara servers
- PCI-DSS Level 1 hosted checkout compliance
Data ownership & privacy rights.
You retain full intellectual property ownership over all uploaded presentation slides, knowledge documents, scripts, and attendee interaction data. In accordance with GDPR and CCPA regulations:
Export full session transcripts, audio logs, and lead capture records at any time via dashboard or REST API.
Deleting a presentation session permanently purges all associated slides, scripts, and embeddings from our database.
Request a complete account wipe by contacting support or through dashboard settings for permanent deletion.
Responsible security disclosure.
If you believe you have discovered a security vulnerability in Seminara, please report it directly to our security team. We investigate all legitimate findings promptly.