Privacy Policy

Last updated: 12 July 2026

1. Introduction

The Seemor Intelligence Platform is operated by Larracos Labs LTD (Company No. 16781423), registered in England and Wales. This privacy policy explains how we collect, use, store, and protect your personal information when you use our API, MCP tools, and developer console.

We are committed to protecting your privacy and ensuring transparency about how we handle your data. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Larracos Labs LTD

Company Number: 16781423

Registered Office: Suite 62, 28 Old Brompton Road, London SW7 3SS, United Kingdom

Email: hello@larracoslabs.com

3. Information We Collect

3.1 Developer Account Information

  • Email Address: When you create a developer account or request API access
  • Organization Details: Company name and contact information if provided
  • Billing Information: Payment details processed through our payment provider (we do not store full card numbers)

3.2 API Usage Data

  • Request Logs: API endpoints called, timestamps, response codes, and latency metrics
  • Rate Limit Data: Request volumes and patterns for throttling and billing
  • Query Parameters: Search queries and filter parameters sent to our API (used to improve result quality)

3.3 Information We Do Not Collect

We do not collect personal information about your end users through the API. API responses contain only restaurant data. If you pass end-user identifiers in API requests, we do not store or process them beyond the immediate request lifecycle.

4. How We Use Your Information

  • Service Delivery: To authenticate your requests, enforce rate limits, and provide API access
  • Billing: To calculate usage, generate invoices, and process payments
  • Platform Improvement: To analyze usage patterns, identify popular endpoints, and improve data quality
  • Communication: To send service updates, breaking change notices, and respond to support requests
  • Security: To detect and prevent abuse, unauthorized access, and fraudulent usage
  • Legal Compliance: To comply with legal obligations and protect our rights

5. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

  • Contract Performance: To provide Platform access per your developer agreement
  • Legitimate Interests: For analytics, security, fraud prevention, and service improvement
  • Legal Obligation: To comply with applicable laws, tax requirements, and regulations
  • Consent: For optional marketing communications (you can opt out at any time)

6. Third-Party Services

We use the following third-party services that may process your data:

Supabase

Database hosting, authentication, and API key management

Stripe

Payment processing and subscription management

Railway

Application hosting and infrastructure

Cloudflare

CDN, DDoS protection, and edge security

7. Data Storage and Security

Your data is stored securely using industry-standard encryption at rest and in transit (TLS 1.2+). API credentials are hashed and cannot be retrieved in plaintext after initial issuance.

While we implement appropriate security measures including network isolation, access controls, and audit logging, no system is 100% secure. We will notify you of any data breaches affecting your account as required by law.

8. Data Retention

  • Account Data: Until you delete your account or request data deletion
  • API Request Logs: Rolling 90-day retention for debugging and billing reconciliation
  • Billing Records: 7 years as required by UK tax law
  • Security Logs: 12 months for incident investigation

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent

To exercise any of these rights, contact us at hello@larracoslabs.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the United Kingdom (our infrastructure providers operate globally). We ensure appropriate safeguards including:

  • Standard Contractual Clauses approved by UK authorities
  • Adequacy decisions by the UK government
  • Service providers with appropriate data protection certifications

11. Cookies

The Platform website (platform.seemor.ai) uses essential cookies for authentication and session management. We use analytics cookies to understand how developers interact with our documentation and console. You can control cookies through your browser settings.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email to your registered developer account. Your continued use of the Platform after changes constitutes acceptance.

13. Contact Us

Larracos Labs LTD

Email: hello@larracoslabs.com

Address: Suite 62, 28 Old Brompton Road, London SW7 3SS, United Kingdom