Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. Principles

We only process personal data as far as it is required to provide Sealed Print. We use no analytics or tracking tools, no advertising and no social media plugins. The website loads no fonts, scripts or images from third parties.

All connections to Sealed Print are encrypted with TLS. Jobs printed through printer URLs are not end-to-end encrypted: Sealed Print has to process them to deliver them to the destination you choose.

3. Hosting

Sealed Print runs on the infrastructure of DigitalOcean, LLC, 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA, in its data center in Frankfurt am Main, Germany. This includes the application servers, the database and the storage for print documents. DigitalOcean processes the data on our behalf based on a data processing agreement (Art. 28 GDPR).

When you open the website or a device connects to Sealed Print, the servers process the data that is technically necessary for the connection: IP address, date and time, requested address, transferred data volume and the user agent of the browser or device. This is required to deliver the service and to keep it secure and stable (Art. 6 (1) (f) GDPR). Log data is only kept for a short time and is not combined with other data.

4. Cookies and local storage

We only use cookies and local storage that are strictly necessary to provide the service you requested (§ 25 (2) no. 2 TDDDG):

• A session cookie that keeps you signed in. It is set when you sign in and removed when you sign out or the session expires.
• A cookie that remembers the detected language of the website.
• An entry in the local storage of your browser that remembers the color mode (light or dark).
• When you install the web app, your browser registers a service worker. It does not store any content and only enables installing the app and sharing files to it.

5. Account and organization

When you register, we process your name, email address and password (stored only as a secure hash) as well as the organization you create or join. Within an organization we store members, roles and invitations, including the email address of invited people. For each session we store the IP address and the user agent to protect your account.

We process this data to provide the contract for using Sealed Print (Art. 6 (1) (b) GDPR). It is stored as long as your account exists. We send emails that are necessary for the service, such as invitations and password reset links.

When you accept the terms of service, we store the version and the time of your acceptance as evidence of the contract (Art. 6 (1) (b) and (f) GDPR) for as long as the contract exists and until claims from it are time-barred.

6. Print jobs

When a job reaches Sealed Print, through a printer URL, an upload, sharing from the web app or the REST API, we process the document and its metadata: name of the document, user name sent by the computer, format, number of pages, print settings, the source and the destination, as well as the status and timeline of the job.

Documents are converted to PDF and stored to be shown as a preview and delivered to the destination. They are deleted automatically 7 days after the job has finished. The job record without the document remains in the queue history of the organization.

Depending on the destination you choose, documents are transferred to the Sealed Print relay client of your organization, to a printer with IPP INFRA support or, with IPP push, to the printer address you entered. You decide on these recipients yourself.

7. Processing on behalf of business customers

If you use Sealed Print for a company or another organization, we process the print jobs, sources, destinations and member data of that organization on its behalf (Art. 28 GDPR). In this case, the organization is the controller for this data. Business customers can conclude a data processing agreement with us; please contact us at [email protected].

8. Relay client

The Sealed Print relay client connects printers in your network to Sealed Print. When it is paired and while it runs, it transmits the host name, operating system, version, the names and capabilities of the local printers and the status of print jobs. It only connects to the Sealed Print server, including for updates and tools it needs for printing. The Docker image of the relay client is provided through the GitHub Container Registry; when you download it, GitHub, Inc. processes your connection data under its own privacy policy.

9. API tokens and device credentials

Printer URLs, API tokens and device credentials are secrets. We only store hashes for lookups and, where a secret has to be shown again, an encrypted copy. API tokens are linked to the person who created them.

10. Emails

We send emails through Resend (Plus Five Five, Inc., San Francisco, USA), which processes the recipient address and the content of the email on our behalf (Art. 28 GDPR). If you contact us by email, we process your message and contact details to answer your request (Art. 6 (1) (b) or (f) GDPR) and delete them when they are no longer needed, unless retention periods require otherwise.

11. Payments

For paid plans we use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). Stripe processes the name, email address, billing address, VAT ID and payment details of the organization to collect payments and create invoices. Payment details such as card numbers are entered directly at Stripe; we do not receive or store them.

The legal basis is the contract (Art. 6 (1) (b) GDPR) and our statutory obligations to keep invoices and accounting records (Art. 6 (1) (c) GDPR, usually ten years). Stripe may transfer data to Stripe, Inc. in the USA; this is based on the EU-U.S. Data Privacy Framework and standard contractual clauses.

When you order a paid plan, we store your request that we begin immediately and send you a confirmation of the contract with the terms of service and the withdrawal policy by email (Art. 6 (1) (b) and (c) GDPR).

12. Cancellation form

If you cancel a contract on the page “Cancel contracts here”, we process the details you enter (type and reason of the cancellation, name, email address, organization and requested date) as well as the time of receipt and your IP address. We use them to process the cancellation, to send you the legally required confirmation by email and to protect the form against misuse (Art. 6 (1) (c) GDPR in conjunction with § 312k BGB, and Art. 6 (1) (f) GDPR). The IP address is only kept in a counter for at most one hour; the cancellation itself is kept until claims from the contract are time-barred.

13. Transfers to third countries

Some of our service providers are based in the USA. Transfers take place on the basis of the adequacy decision of the European Commission for the EU-U.S. Data Privacy Framework, where the provider is certified, and otherwise on the basis of standard contractual clauses (Art. 46 (2) (c) GDPR).

14. Storage period

We delete personal data as soon as it is no longer needed for the purposes stated above, unless statutory retention obligations (e.g. under commercial and tax law) require us to keep it longer. In that case, processing is restricted to fulfilling these obligations.

15. Your rights

You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). To exercise your rights, contact us at [email protected].

Right to object: where we process data on the basis of Art. 6 (1) (f) GDPR, you can object to the processing at any time for reasons arising from your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, https://www.lfd.niedersachsen.de.

16. Obligation to provide data and automated decisions

You are not obliged to provide personal data. Without the data required for registration and print jobs, however, we cannot provide Sealed Print. We do not use automated decision-making or profiling.

17. Changes

We update this privacy policy when the service or the legal requirements change. The current version is always available on this page.