SealBind← Back to site
Draft template. This document is a working draft generated for internal review and is not legal advice. It must be reviewed by a qualified adviser and finalised before launch.

Privacy Policy

Effective date: [EFFECTIVE DATE — set at launch]

1. Who we are

[LEGAL ENTITY NAME], [registered address], United Kingdom (“SealBind”, “we”) is the data controller for personal data processed about our account holders. This policy explains what we collect, why, and your rights under the UK GDPR and Data Protection Act 2018.

2. Data we collect

  • Account data: name, email address, and hashed authentication credentials.
  • Billing data: plan, subscription status, and billing metadata. Card details are handled directly by Stripe and are not stored on our servers.
  • Service data: products, licenses, activations, device fingerprints, API keys (stored hashed), and validation event logs that you create through the Service.
  • Technical data: IP address, request logs, and error diagnostics used to operate and secure the Service.

3. Why we process it (lawful bases)

  • Contract: to provide the Service, manage your account, and process your subscription.
  • Legitimate interests: to secure the Service, prevent abuse, debug errors, and improve the product.
  • Legal obligation: to keep records required for tax and accounting.
  • Consent: for non-essential analytics or marketing, where applicable, which you may withdraw at any time.

4. Sub-processors

We share data with service providers who process it on our behalf under contract, including our hosting provider (Vercel), our database host (Postgres provider), our payment processor (Stripe), and our transactional email provider. A current list is available on request.

5. International transfers

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

6. Retention

We keep account and service data for as long as your account is active, and for a limited period afterwards to meet legal and accounting obligations, after which it is deleted or anonymised.

7. Your rights and data export

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. You can export your account data at any time from the dashboard. To exercise any right, contact us using the details below. You may also complain to the UK Information Commissioner’s Office (ICO).

8. Security

We apply appropriate technical and organisational measures, including encryption of sensitive secrets at rest, hashing of credentials and API keys, and access controls. No system is perfectly secure, but we take reasonable steps to protect your data.

9. Contact

Privacy questions or requests: privacy@sealbind.io.