Legal
Privacy Policy
How Sealr collects, protects, and uses your personal data.
Working draft — have these terms reviewed by your legal counsel.
Last updated: July 1, 2026
1. Data We Collect
In the course of providing its platform and operating its website, Sealr SAS (the “Data Controller”) collects the following categories of data:
- Professional identification data — first name, last name, business email address, job title, and company, provided through our forms (demo requests, newsletter, recruiting).
- Account and usage data — login credentials, activity logs, and settings, generated through your use of the platform.
- Technical data — IP address, browser type, and pages visited, collected as you browse the website.
Technical data processed by the platform on behalf of our customers (agent operation metadata, evidence records) is governed by the subscription agreement and the associated data processing agreement.
2. Purposes
This data is processed for the following purposes:
- providing, operating, and securing the Sealr platform;
- responding to demo, contact, or support requests;
- sending you our communications (newsletter, event invitations), subject to your consent;
- measuring website traffic and improving our content;
- complying with our legal and accounting obligations.
3. Legal Basis (GDPR)
In accordance with Regulation (EU) 2016/679 (the “GDPR”), each processing activity relies on one of the following legal bases:
- performance of a contract for providing the platform and managing accounts;
- consent for the newsletter and non-essential cookies;
- legitimate interest for securing our systems, preventing fraud, and business-to-business prospecting;
- legal obligation for retaining accounting and contractual records.
4. Retention Periods
Data is retained only for as long as strictly necessary for the purposes pursued:
- prospecting data: three (3) years from your last contact with us;
- account data: for the duration of the contract, then thirty (30) days for data return before deletion;
- technical logs: twelve (12) months at most;
- contractual and accounting records: applicable statutory periods (up to ten years).
5. Subprocessors
We rely on subprocessors for platform hosting, email delivery, and audience measurement. Each is bound by a contract compliant with Article 28 of the GDPR and processes data only on our documented instructions.
Our production data is hosted within the European Union. Where a transfer outside the European Union is necessary, it is subject to appropriate safeguards, such as the European Commission's standard contractual clauses. An up-to-date list of our subprocessors is available upon request.
6. Your Rights
You have the right to access, rectify, and erase your data, as well as the rights to restriction of processing, data portability, and objection, under the conditions set out in the GDPR. You may also withdraw your consent at any time and set instructions regarding the handling of your data after your death.
To exercise these rights, contact our data protection officer: [email protected]. You will receive a response within one (1) month. If you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
7. Cookies
The website uses cookies that are strictly necessary for its operation, which do not require consent, as well as audience measurement cookies and, where applicable, personalization cookies, which are set only with your prior consent.
You can accept, decline, or configure these cookies at any time through the preference manager available in the footer, or via your browser settings. Consent remains valid for six (6) months.
Use of the platform is also governed by our terms of use.