Privacy Policy
Last updated: 10 October 2026
Language preferences
Your selected language is stored as an essential preference, not for analytics. We also save your language with your enquiry or waitlist request so our replies and emails use the right language.
Optional waitlist surveys
If you choose to answer our optional survey, we save your feature preferences, intended recipient category, pricing preference and any comments with your waitlist entry to help us plan SealedLight. Answering is not required to join, does not change your Founding 100 place and does not add marketing permissions. Survey answers follow the same retention and deletion rules as your waitlist entry.
This Privacy Policy explains how SealedLight handles your personal data when you visit sealedlight.com, join our waitlist or contact us. It is written to meet the requirements of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Czech Act No. 110/2019 Coll., on the processing of personal data.
The SealedLight vault service is not yet available. Before the vault opens, we will publish a separate privacy notice covering vault content, nominees and optional identity verification.
1. Who is responsible for your data
The controller of your personal data is:
Email: hello@sealedlight.com
We have not appointed a Data Protection Officer because we are not legally required to. For any privacy question, write to hello@sealedlight.com.
2. What data we process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Joining the waitlist | Email address, country (optional), consent record (time, consent version), confirmation status, Founding 100 position, UTM source/medium/campaign when present, and referral codes and relationships | To keep your place, confirm your email, send early-access and Founding 100 updates, attribute signups and show confirmed referral totals. Attribution is captured in memory and saved only when you submit a signup, without attribution cookies. Public invite codes expose only aggregate counts, not invitees' details. Referrals never change Founding 100 order | Your consent, Art. 6(1)(a) |
| Founding 100 offer | Email address, founding position, confirmation date | To deliver the offer you signed up for | Performance of the offer terms, Art. 6(1)(b) |
| Proof of consent | Consent record (time, version, wording) | To show that we obtained valid consent | Legal obligation, Art. 6(1)(c) together with Art. 7(1) |
| Contacting us | Name, email, topic, message, our replies | To answer your message | Our legitimate interest in responding to enquiries, Art. 6(1)(f) |
| Investor deck requests | Name, email address, fund/company, message, request time and reply status | To review investment enquiries and respond with information about SealedLight. This is not a waitlist signup or marketing subscription. The same inquiry retention rules apply | Our legitimate interest in responding to enquiries, Art. 6(1)(f) |
| Visiting the website | IP address, browser and device information, time of request (server logs); security check data | To deliver the website, keep it secure and prevent spam and abuse | Our legitimate interest in a secure, working website, Art. 6(1)(f) |
| Cookieless website analytics | Replit Project Analytics (Umami tracker): page views, successful waitlist submissions and confirmations, guide reading at 75%, demo openings, and campaign source and medium. No analytics cookies or browser storage are used. We exclude private page views, confirmation tokens, email addresses and free-form content from analytics. | To understand useful pages and which channels bring waitlist signups | Our legitimate interest in understanding and improving the website, Art. 6(1)(f) |
| Admin sign-in | Username and sign-in data of SealedLight staff | To protect access to our internal dashboard | Our legitimate interest in security, Art. 6(1)(f) |
Where we rely on legitimate interest, you may object at any time (see section 7).
You are not legally or contractually required to give us any data. Without an email address, however, we cannot add you to the waitlist or reply to you.
If you choose to tell us your country, we use it only to plan where we launch next.
We do not use your data for automated decision-making or profiling, and we do not sell your data.
3. Who receives your data
We use carefully selected service providers ("processors") who process data only on our instructions under a data processing agreement (Art. 28 GDPR):
| Provider | Role | Location |
|---|---|---|
| Replit, Inc. | Website hosting and database | |
| Resend | Sending confirmation and update emails | |
| Cloudflare, Inc. (Turnstile) | Spam and bot protection on forms | USA / global |
| Replit (Project Analytics, Umami tracker) | Cookieless traffic and event reports | USA / global |
We may also disclose data where required by law (for example to courts or public authorities), or to professional advisers bound by confidentiality.
4. Transfers outside the EU
Some providers are based in the USA. Where data is transferred outside the European Economic Area, we make sure it is protected by either:
- the provider's certification under the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023), or
- the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR), with additional safeguards where needed.
You can ask us for a copy of the relevant safeguards at hello@sealedlight.com.
5. How long we keep your data
| Data | Retention |
|---|---|
| Unconfirmed waitlist signups | Deleted automatically 30 days after signup |
| Confirmed waitlist data | Until you unsubscribe or ask us to delete it, and at the latest 12 months after early access opens, unless you become a SealedLight customer |
| Founding 100 records | For the duration of the offer and up to 3 years afterwards, to handle any claims |
| Consent records | Up to 3 years after you withdraw consent, as proof of lawful processing |
| Contact messages | Up to 24 months after our last reply |
| Server logs and security data | Up to 30 days |
| Website analytics | Historical first-party anonymous totals contain no identifiers. New traffic and event reports follow Replit's analytics retention settings and privacy policy. |
6. How we protect your data
We use encrypted connections (HTTPS), access controls limited to authorised staff with verified accounts, and providers that meet recognised security standards. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a data breach where the law requires it.
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure ("right to be forgotten") (Art. 17)
- Restriction of processing (Art. 18)
- Data portability: receive your data in a common, machine-readable format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, without affecting processing that happened before withdrawal (Art. 7(3)). You can unsubscribe using the link in any email.
To use any of these rights, email hello@sealedlight.com. We will reply within one month. This may be extended by two further months for complex requests, and we will tell you if so. We may ask you to confirm your identity.
Right to complain. You can complain to a data protection supervisory authority, in particular in the EU country where you live or work. In the Czech Republic this is:
Úřad pro ochranu osobních údajů (Office for Personal Data Protection) Pplk. Sochora 27, 170 00 Praha 7, Czech Republic www.uoou.gov.cz
We would appreciate the chance to resolve your concern first.
8. Appropriate submissions
Please contact us if you believe personal information was submitted without appropriate permission.
9. Changes to this policy
We will update this policy when our processing changes, in particular before the SealedLight vault launches. The "Last updated" date shows the current version. Where changes are significant, we will tell waitlist members by email.
10. Contact
Questions about privacy: hello@sealedlight.com