Back to home
Draft — pending legal review. This document has not been reviewed by qualified legal counsel and is not yet effective. Do not rely on it as legal advice.

Privacy Policy

Last updated: May 20, 2026  ·  Effective: May 20, 2026

1. Introduction

DeploySeal (“we”, “us”, or “our”) is committed to protecting the personal data of our customers, testers, and website visitors. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it.

[Data controller details — legal entity name and registered address — to be confirmed before commercial launch.]

2. Data We Collect

We may collect the following categories of personal data:

  • Account data: Name, email address, and organisation name provided during registration or invitation acceptance.
  • Usage data: Actions performed within the Service (campaign creation, test submissions, issue reports) and associated timestamps.
  • Device & log data: IP address, browser type, operating system, and server-side request logs retained for security and debugging purposes.
  • Communication data: Content of emails or messages you send to our support team.

We do not collect payment card data directly; payments are processed by a third-party payment provider. [To be specified at commercial launch.]

3. How We Use Your Data

We process personal data to:

  • Provide, maintain, and improve the Service.
  • Authenticate users and enforce access controls.
  • Send transactional notifications (invitation emails, campaign reminders, sign-off confirmations).
  • Detect, investigate, and prevent security incidents and abuse.
  • Comply with legal obligations.
  • Send product updates or marketing communications where you have provided consent or we have a legitimate interest to do so (you may opt out at any time).

4. Legal Basis for Processing (GDPR)

Where GDPR or equivalent legislation applies, we rely on the following legal bases:

  • Contract performance: Processing necessary to deliver the Service under your subscription agreement.
  • Legitimate interests: Security monitoring, fraud prevention, and service improvement.
  • Legal obligation: Compliance with applicable laws and regulations.
  • Consent: Where explicitly requested (e.g. marketing emails).

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Sub-processors: Cloud infrastructure (Microsoft Azure), transactional email provider, error monitoring, and analytics tools. A current list of sub-processors is available on request.
  • Legal authorities: Where required by law, court order, or to protect our legal rights.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality obligations.

6. Data Retention

We retain account and usage data for the duration of your subscription and for [retention period to be defined — suggested 2 years] following account closure, unless a longer period is required by law. Log data is retained for [90 days — to be confirmed].

7. International Transfers

[Cross-border transfer mechanisms (Standard Contractual Clauses, adequacy decisions, etc.) to be specified by legal counsel prior to commercial launch.]

8. Cookies and Tracking

We use strictly necessary cookies to maintain your authenticated session. We do not currently use third-party advertising or tracking cookies. [Cookie policy to be reviewed prior to commercial launch.]

9. Your Rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict processing of, or port your personal data, and to object to certain processing. You may also withdraw consent at any time where consent is the legal basis. To exercise any of these rights, contact us at privacy@DeploySeal.com.

You also have the right to lodge a complaint with the relevant data protection supervisory authority. [Supervisory authority details to be added based on jurisdiction.]

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews.

11. Children

The Service is not directed at children under 16 (or the applicable age in your jurisdiction). We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent in-app notice. The “Last updated” date at the top of this page reflects the most recent revision.

13. Contact

Privacy enquiries: privacy@DeploySeal.com
For data processing agreements, see our DPA page.

© 2026 DeploySeal. All rights reserved.

TermsPrivacyDPA