Legal

Privacy Policy

How Sealsimple collects, uses, and protects your data.

Last updated: 2026-06-22

1. Who We Are

Sealsimple is the data controller for personal data processed through the service. Contact us at privacy@sealsimple.com for any privacy request.

2. Data We Collect

We collect: account data (name, email, password hash), documents you upload, recipient information you enter, signature data, IP address, browser metadata, and usage analytics necessary to operate the service.

3. How We Use It

We use your data to provide and improve the service, send transactional notifications (document sent, signed, reminders), bill you, prevent fraud, and meet legal obligations.

4. Legal Bases (GDPR)

We process data based on: contract performance (operating the service), legitimate interests (security, anti-fraud, product improvement), legal obligation (tax, audit logs), and consent (marketing emails — which you can withdraw anytime).

5. Sharing

We share data only with subprocessors required to run the service: Supabase (database & auth), Stripe (billing), Resend (email), and our cloud hosting provider. Each is bound by data-protection terms.

6. International Transfers

Some subprocessors are located outside the EEA. Transfers rely on the European Commission's Standard Contractual Clauses or adequacy decisions.

7. Retention

Account data is kept while your account is active and up to 90 days after closure. Signed documents and audit certificates are retained for the legally relevant period (default: seven years) to preserve evidentiary value, unless you delete them earlier.

8. Your Rights

You may access, correct, export, restrict, or delete your personal data, and object to processing. Email privacy@sealsimple.com — we respond within 30 days. You may also lodge a complaint with your national data-protection authority.

9. Cookies

We use strictly necessary cookies for authentication and a minimal first-party analytics cookie to count visits. No third-party advertising cookies.

10. Security

Encryption at rest and in transit, row-level access control, audited backups, principle of least privilege for staff access. See our Security page for details.

11. Changes

We may update this policy. We will notify you of material changes at least 14 days before they take effect.

Questions? Email legal@sealsimple.com.