Binding on both of us

Version 2026-10 · applies to every account on Sealique

1. Parties and scope

This agreement is between you, the account holder (“you”), and the operator of Sealique (“we”). It covers every document you upload, edit, sign or share, every attendance record and set of minutes you create, and the personal data of you and of the people you invite (signers, participants, viewers).

2. What we store

• Account data: name, e-mail address, optional job title, organisation, phone, language and profile picture.
• Documents: the files you upload, the versions you create with the PDF tools, the sealed PDFs, signature images, per-page fingerprints and verification IDs.
• Signing records: who was invited, when a link was opened and signed, the device and network address used, the signer's typed title and organisation, and the signing certificate issued to each signer.
• Attendance and minutes: participant details entered on attendance forms, signatures, minutes text and their versions.
• Audit trail: a record of every action on a document or event, kept for the lifetime of that document or event.
• Page statistics, first-party and without cookies: page path (link codes and document identifiers replaced by placeholders), language, device and browser family, referring domain, signed-in state and time of each page served, with a daily-rotating visitor code that cannot be reversed into a network address nor linked across days. Page views are never linked to an account: they store no account, and their visitor code is derived separately from any record that carries one, so they cannot be matched with feature records or feedback. No third-party analytics service receives anything. Page statistics are deleted after 400 days.
• Feature records: for account holders, each use of a feature (time, feature, item concerned) is tied to the account, so that we can see which features registered people rely on and improve the service; uses by people who are not signed in carry only an anonymous visitor code of their own. Feature records are deleted after two years.
• Feedback: the rating, category, message, page, language and device family of each message sent through the feedback button; the account when signed in (so that we can see what registered people ask for and follow up), otherwise an e-mail address only when given voluntarily; kept until handled and reviewed.

3. Where and how it is protected

• Files are kept in private object storage that is never exposed on a public link; the app streams them only to people who are allowed to see them.
• All traffic is encrypted in transit (HTTPS only). Signing keys are encrypted at rest; the root certificate is kept in private storage.
• Every sealed PDF carries a PAdES digital signature, a document fingerprint and per-page fingerprints, so any later change is detectable.
• Verification links and QR codes contain only a random verification ID and a page fingerprint — never names, e-mail addresses or document content. Public verification pages show masked e-mail addresses.
• Platform administrators can see accounts, usage and delivery status, but never the content of private documents.

4. What we will never do

• Sell, rent or trade personal data or documents.
• Use your documents to train models, for advertising or for any purpose other than providing the service to you.
• Give anyone access to a document unless you invited or shared it with them, or the law requires it.

5. How long we keep data

• Unsealed documents are deleted immediately when their owner deletes them.
• Sealed documents stay available to every holder (owner and signers) until each of them removes their copy; the document is then archived: the filled-in fields are removed, and the sealed file, the certificate, the signers and the verification record are kept so the verification links keep answering.
• Attendance records and minutes stay with the event until the host deletes the event.
• When an account is closed, its personal data is removed and documents that other holders still keep remain with them.

6. Your rights

You can see and correct your data from your profile, delete your documents and events, download sealed PDFs and attendance exports, and revoke sharing at any time. To receive a full export of your data or to close your account, write to the operator at the address shown in your account e-mails; we answer without undue delay.

7. Your commitments

• You only upload documents and personal data that you are entitled to process, and you invite only people who expect to receive them.
• You keep your password and signing links private and tell us if you suspect misuse.
• You inform the people whose data you enter (participants, signers) about this agreement when the law requires it.

8. Incidents and changes

If we learn of a security incident affecting your data, we tell you without undue delay and explain what happened and what we did. If this agreement changes, you are asked to accept the new version the next time you sign in; the previous version keeps applying until you do.

9. Acceptance

You accept this agreement when you create an account, when you confirm a new version in the app, or — for an account created for you after you approved a report or signed through a secure link — the first time you open the app. Sealique is bound by it towards you from that moment. The version you accepted and the time of acceptance are recorded on your account.

---