Privacy policy

This policy explains what personal data SealInvite collects, why, who helps us process it, and your rights under the EU General Data Protection Regulation (GDPR).

Who is responsible

The data controller is Elia Arngrimson, Denmark. Contact: hello@[your-domain].

What we collect and why

• Your account: email address and password (stored only in scrambled, "hashed" form). Needed to give you an account (contract).
• Your designs: the text you type into invitations (for example names, dates, venues and RSVP details) and your adjustments. Needed to save and export your designs (contract). Please only add other people's details that they are happy to have on an invitation.
• Purchases and downloads: which plan you bought, when it runs out, and when you downloaded files. Needed to give you access and to apply our refund rules (contract, and bookkeeping law).
• Technical data: IP address, browser type and error reports, kept briefly to keep the service secure and working (legitimate interest).
• Usage statistics: which pages are visited and which features are used, measured without cookies and without identifying you, to improve SealInvite (legitimate interest).

We never sell your data, and we don't use it for advertising.

Payments

Paddle.com handles all payments as our reseller. Your card details go straight to Paddle; we never see them. Paddle processes your name, email, country and payment details as an independent controller under its own privacy policy.

Who helps us (processors)

• Supabase: database, accounts and file storage, hosted in the EU (Frankfurt, Germany).
• Vercel: hosting the website.
• Resend: sending account and service emails.
• PostHog (EU): cookie-free usage statistics.
• Sentry: error reports so we can fix problems.

Each works under a data processing agreement. Where data leaves the EU/EEA, it is protected by the EU's standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

• Account and designs: until you delete your account.
• Purchase records: 5 years, as required by Danish bookkeeping law.
• Technical logs and error reports: up to 90 days.

Your rights

You can ask to see, correct, download or delete your data, object to how we use it, or restrict it. Email hello@[your-domain] and we'll answer within one month. If you're unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet) or the authority in your own country.

Cookies

See our Cookie notice.