Privacy policy

Two groups of people interact with Paper&Seal:

• Visitors and waitlist members: people who browse paperandseal.com or leave an email address to request early access.
• Event hosts and their guests: hosts who create and send invitations through the product, and the guests who receive and respond to them. For guest data, we act on the host's behalf: the host decides who is invited and what is asked.

When you join the waitlist we collect the email address you provide. To understand where interest is coming from and how the site is used, the signup also records technical details about your visit:

• Your IP address and the approximate location derived from it (country, region, city).
• Device and browser details: user agent, browser, operating system, device type, screen and viewport size, and pixel density.
• Your browser language and timezone.
• The page that referred you, campaign parameters in the link you followed (utm_source and similar), and how long you spent on the page before signing up.

We also keep our own first-party analytics for the marketing site. As you browse, we record page visits, the buttons and links you click, how far down a page you scroll, how long you stay, and the same technical and approximate-location details noted above. This helps us understand what visitors find useful. It stays on our own systems and is never shared with advertising networks.

We use this information to plan the launch, gauge interest, and contact you about early access. We do not use it for advertising, and the marketing site does not use cookies for advertising or cross-site tracking.

When a host sends invitations through Paper&Seal, we process personal information about their guests in order to deliver invitations, collect replies, and show the host how their event is shaping up. Depending on what the host sets up, this can include:

• Contact details the host provides: guest names, email addresses, phone numbers, and how guests are grouped (for example by household).
• RSVP responses guests submit: attendance, party size, meal choices, dietary notes, song requests, answers to the host's custom questions, and free-text messages.
• Invitation engagement: whether an invitation email was delivered and opened, and visits to the invitation link, including IP address, approximate location, device details, and how far and how long the invitation was viewed.

This information is collected for the host and shown to the host. We do not use guest information for our own marketing, and we do not contact guests except to deliver the host's invitations and related messages the host initiates. If you are a guest with questions about an invitation you received, you can contact your host directly or write to us at support@paperandseal.com.

• We never sell or rent personal information: not visitor emails, not host data, not guest data.
• We do not run third-party advertising or share personal information with ad networks.
• We do not send marketing to guests. Guest contact details exist only to deliver their host's invitations.

We rely on a small number of infrastructure providers to run the service. Each processes data only to provide their service to us:

• Vercel: website and application hosting.
• Neon: database hosting.
• Resend: email delivery.
• Cloudflare: DNS and email routing.

Some of these providers store or process data in the United States and other jurisdictions outside Canada. Where they do, the data is subject to the laws of those jurisdictions.

Waitlist information is kept until we have finished contacting the list about launch and early access, or until you ask us to remove you, whichever comes first. Event and guest information is kept while the host's event and account remain active, and is deleted when the host asks us to delete it or closes their account. We may retain minimal records where the law requires it.

You may ask us to access, correct, or delete the personal information we hold about you at any time by writing to support@paperandseal.com. We will respond within the timelines PIPEDA requires. If you are in the EU or EEA, you also have the rights the GDPR provides (including access, rectification, erasure, restriction, portability, and objection) and you may lodge a complaint with your local supervisory authority.

If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

If we change this policy, we will post the new version here and update the date below. Material changes affecting the waitlist will be noted to the waitlist by email where practical.

Questions about privacy, or a request about your data: support@paperandseal.com.