Privacy Policy
This explains what Sealed does with personal information, both for the people who build celebrations and for the guests they invite.
Two different roles
Sealed handles two kinds of information, and our responsibility is different for each.
- Hosts. If you open an account, we decide how your information is used, so we are the controller of it.
- Guests. If you received an invitation, your details were given to us by the host who invited you. They decide what goes in their guest list; we only process it on their instructions. If you want your details changed or removed, the quickest route is to ask the host directly, but you can also write to us at danialsaleemm1995@gmail.com and we will help.
What we hold about hosts
- your email address and password, handled by our authentication provider;
- the content of your celebration: names, dates, places, wording, photographs, music;
- your plan, and billing records from Stripe. We never see your card number.
What we hold about guests
Supplied by the host:
- name, and email address where the host has one;
- household grouping, and any postal address or note the host added;
- dietary notes, where the host or the guest has provided them.
Created when a guest uses their invitation:
- RSVP replies, meal choices, song requests and transport needs;
- photographs, video, guestbook messages and messages to the host;
- seating and, if the host uses it, arrival check-in.
What we record about opening an invitation
We want to be straightforward about this, because it is the part guests are least likely to expect. When an invitation is opened we record that it was opened, when it was last viewed, how many times, and which sections were looked at. This is linked to the household the link was sent to, so the host can see who has and has not opened their invitation and who still needs a nudge. We do not track guests across other websites, we run no advertising trackers, and we do not build profiles for marketing.
Cookies
We use a small number of strictly necessary cookies to keep hosts signed in and to keep the service secure. We do not use advertising or third-party analytics cookies, which is why Sealed does not show you a cookie banner asking for consent it does not need.
Who else sees the data
We use a small number of service providers. Each is bound to use the data only to provide their service to us.
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, authentication and file storage | See Supabase project region |
| Vercel | Application hosting and content delivery | Global edge network |
| Stripe | Payment processing and subscription billing | United States and Ireland |
| Resend | Sending invitation and reminder emails | United States |
| Anthropic | Optional AI wording suggestions, only when a host uses the writing assistant | United States |
We do not sell personal information, and we never share a host's guest list with anyone other than the providers above.
Where data is held
Our providers operate internationally, so information may be processed outside your country, including in the United States. Where that happens we rely on the safeguards those providers offer, such as standard contractual clauses.
How long we keep it
- Celebration content and guest lists are kept while the account is active. Heirloom celebrations are kept online for five years from purchase.
- If you close your account we delete your celebrations and guest data, other than anything we must keep by law.
- Billing records are kept for as long as tax law requires.
- A host can delete an individual guest, photograph or message at any time, which removes it from our database and our file storage.
How we protect it
Traffic is encrypted in transit. Every table in our database is protected by row-level security, so one host cannot reach another host's data. Uploaded photographs and video sit in private storage and are served through short-lived signed links rather than public URLs. Each household's invitation link contains a 128-bit random token, which is not guessable and cannot be listed.
An invitation link is a key: anyone who has the link can open that household's invitation. Please treat it the way you would treat a paper invitation, and let the host know if it is forwarded more widely than intended.
Your rights
Depending on where you live, you may have the right to see the information we hold about you, to have it corrected or deleted, to object to how we use it, and to receive a copy in a portable form. Write to danialsaleemm1995@gmail.com and we will respond within one month. If you are a guest, we may need to pass your request to the host whose celebration it concerns, and we will tell you if we do.
If you are unhappy with our response you may complain to your local data protection authority.
Children
Sealed is not intended for children to sign up to. A host may include children in a guest list, in which case the host is responsible for that information, and we hold only a name and any dietary note.
Changes
If we change this policy in a way that matters we will tell hosts by email. See also our Terms of Service.
Contact
Choudhry Enterprise LLC, 10639 E Briarwood Ave, Centennial, CO 80112. danialsaleemm1995@gmail.com