Privacy Policy

This explains what Sealed does with personal information, both for the people who build celebrations and for the guests they invite.

Two different roles

Sealed handles two kinds of information, and our responsibility is different for each.

• Hosts. If you open an account, we decide how your information is used, so we are the controller of it.
• Guests. If you received an invitation, your details were given to us by the host who invited you. They decide what goes in their guest list; we only process it on their instructions. If you want your details changed or removed, the quickest route is to ask the host directly, but you can also write to us at sealedinvites@gmail.com and we will help.

What we hold about hosts

• your email address and password, handled by our authentication provider;
• the content of your celebration: names, dates, places, wording, photographs, music;
• your plan, and billing records from Stripe. We never see your card number.

What we hold about guests

Supplied by the host:

• name, and email address where the host has one;
• household grouping, and any postal address or note the host added;
• dietary notes, where the host or the guest has provided them.

Created when a guest uses their invitation:

• RSVP replies, meal choices, song requests and transport needs;
• photographs, video, guestbook messages and messages to the host;
• seating and, if the host uses it, arrival check-in.

What we record about opening an invitation

We want to be straightforward about this, because it is the part guests are least likely to expect. When an invitation is opened we record that it was opened, when it was last viewed, how many times, and which sections were looked at. This is linked to the household the link was sent to, so the host can see who has and has not opened their invitation and who still needs a nudge. We do not track guests across other websites, we run no advertising trackers, and we do not build profiles for marketing.

Cookies and visitor numbers

We use a small number of strictly necessary cookies to keep hosts signed in and to keep the service secure. We use no advertising cookies and no advertising trackers, which is why Sealed does not show you a cookie banner asking for consent it does not need.

We do count visits to our own public pages, so we know whether anyone is finding us. That counting sets no cookie and does not identify you: it records the page, where you came from, your country, and the kind of device and browser, and nothing that could be traced back to a person. It does not run on invitations, so a guest opening one is never counted this way.

Who else sees the data

We use a small number of service providers. Each is bound to use the data only to provide their service to us.

We do not sell personal information, and we never share a host's guest list with anyone other than the providers above.

Where data is held

We are based in the United States and so are our providers, so if you are outside the US your information will be processed there. If you are in a country that restricts sending personal data abroad, such as anywhere in the UK or the European Economic Area, our providers carry the standard safeguards used for that, including the European Commission's standard contractual clauses. We rely on those rather than claiming to keep your data in your own country, because we do not.

How long we keep it

• Celebration content and guest lists are kept while the account is active. Heirloom celebrations are kept online for as long as we operate Sealed.
• If you close your account we delete your celebrations and guest data, other than anything we must keep by law.
• Billing records are kept for as long as tax law requires.
• A host can delete an individual guest, photograph or message at any time, which removes it from our database and our file storage.

How we protect it

Traffic is encrypted in transit. Every table in our database is protected by row-level security, so one host cannot reach another host's data. Uploaded photographs and video sit in private storage and are served through short-lived signed links rather than public URLs. Each household's invitation link contains a 128-bit random token, which is not guessable and cannot be listed.

An invitation link is a key: anyone who has the link can open that household's invitation. Please treat it the way you would treat a paper invitation, and let the host know if it is forwarded more widely than intended.

Your rights

Data protection law differs by country and by US state, so the rights you have depend on where you live. In most places that includes the right to see what we hold about you, to have it corrected or deleted, to object to how we use it, and to receive a copy in a portable form. Rather than work out which set applies to you, we will honour all of those for anyone who asks, wherever they are.

Write to sealedinvites@gmail.com and we will respond within 30 days. We chose 30 because it is at least as quick as every deadline we are aware of being held to, so you never have to check which one covers you. If a request is complicated and we need longer, we will tell you inside those 30 days and explain why. If you are a guest, we may need to pass your request to the host whose celebration it concerns, and we will tell you if we do.

If you are unhappy with our response, you can complain to whichever regulator covers you: a data protection authority if your country has one, or your state attorney general in the United States. Ours is the Colorado Attorney General.

Children

Sealed is not intended for children to sign up to. A host may include children in a guest list, in which case the host is responsible for that information, and we hold only a name and any dietary note.

Changes

If we change this policy in a way that matters we will tell hosts by email. See also our Terms of Service.

Contact

Choudhry Enterprise LLC, 10639 E Briarwood Ave, Centennial, CO 80112. sealedinvites@gmail.com