Privacy policy

Draft — to be reviewed by counsel before publication.

Data we collect

• Your Microsoft sign-in identifier, name and email address.
• Your subscription, number of machines and licence keys (stored encrypted).
• Billing data (address, VAT number, payment method), held by our payment provider, not by us.
• For licence validation: the licence key and the requesting IP address, used for abuse prevention.

Where your data is hosted

All data hosted by Sealforge, including backups, is stored in the European Union (Germany).

Processors

• Stripe — payments, invoices and VAT calculation.
• Hetzner — hosting of the site, the licence service, the hosted services (Anonymizer API and LLM proxy) and their backups (Germany).
• Microsoft — sign-in to the administration area (Microsoft Entra ID), storage of our encryption keys and secrets (Azure Key Vault) and technical monitoring (Azure Application Insights, EU region), without customer content.
• Resend — email delivery.

Hosted services

The hosted Anonymizer API and the hosted LLM proxy process the text you send on Sealforge's server at Hetzner in Germany, to replace personal data with tokens, and keep nothing after the answer.

Through the hosted LLM proxy, you reach the AI provider of your choice (Anthropic or OpenAI) with your own key and account, under your own agreement with that provider, which acts as your processor, not Sealforge's; it receives your text with personal data replaced by tokens.

Retention

Your personal data and licence keys are deleted 12 months after your subscription ends. Invoices are kept for the period required by law. To enforce the one-trial rule, we permanently keep a pseudonymous marker of your account and the fingerprint of the card used for the trial; these do not identify you directly.

Your rights

You can export your data and request its deletion from your account page. You also have the right to access, rectify and object, and to lodge a complaint with your supervisory authority (in France, the CNIL).