This is an earlier version of our privacy notice, kept for reference. It is no longer current. Read the current privacy notice.
Privacy notice
Last updated: 16 October 2026
Earlier version: March 2026.
Who we are
SealedIn is a trading name of Rabblepop Ltd, a company registered in England and Wales (company no. 17361712), registered office 320 Firecrest Court, Centre Park, Warrington, WA1 1RG. Rabblepop Ltd is the controller of the personal information described here.
Contact: support@sealedin.app
What we collect, why, and our lawful basis
| What | Why | Lawful basis |
|---|---|---|
| Your email address, display name, profile photo if you add one, and your time zone | To create your account, sign you in with a one-time code, and show your name to the people you send to | Contract |
| What you put in envelopes: letters, photos, videos, titles, recipients and delivery dates | To keep them safe and deliver them when you choose | Contract |
| Your Premium purchases: which envelope you upgraded and when, whether you paid by card or with credits, the amount and currency paid or the number of credits used, Stripe's reference for a card payment, the version of our terms you accepted, whether the upgrade was applied, and when we sent your confirmation email. If a payment could not be applied, we also record why: the payment did not say which account or envelope it was for, it was not completed, it was less than the price, the envelope no longer exists, or the envelope could not be upgraded (for example, it was already Premium or already delivered). If a payment cannot be matched to an account, we still keep its record so that we can refund it (card details go to Stripe, not us) | To sell you a Premium envelope, apply it to the right envelope, sort out a refund if a payment cannot be applied, and keep accounting records | Contract, and legal obligation for accounting records |
| If you bought credits before 16 October 2026: your credit balance and its history (what was added, spent or refunded, and when) | To let you spend those credits on Premium envelopes, and keep accounting records | Contract, and legal obligation for accounting records |
| If you close your account: the envelopes you have already delivered, including your name or email address as their sender and what is in them | So that the people you sent them to can keep what you sent them | Legitimate interests: your recipients' interest in keeping what you chose to send them and expected them to keep, as with a letter or an email |
| Emails you send us | To answer you | Legitimate interests |
You need to give us your email address to have an account; without it we cannot provide the service.
Paying by card. When you pay for a Premium envelope by card, you pay on Stripe's payment page. We send Stripe your email address, a reference for your account and for the envelope, and what you are buying (a SealedIn Premium envelope, £4.99). We do not send the envelope's title or anything in it. Stripe collects your card details and any billing details its payment page asks for, such as the name on the card; we never see your card number. Stripe tells us whether the payment went through, the amount and currency, and its reference for the payment, and we keep those with the envelope's upgrade.
We do not look inside your envelopes. Letters, photos and videos are opened only by you and your recipients. Our own support tools show envelope details such as titles, dates, recipients, file names and sizes, never the contents. We do not analyse your content and we make no decisions about you by automated means.
For recipients
If someone has sent you an envelope, they gave us your email address and, if they chose, your name. We use them only to tell you about envelopes addressed to you and to let you open them, on the basis of legitimate interests: delivering what someone chose to send you. We record when an envelope was delivered and when you opened it, but we do not show the sender whether or when you opened it. To open an envelope you create an account, and the sections above then apply to you too.
Once an envelope has been delivered to you, it stays yours to open even if the sender later closes their account, just as an email stays in your mailbox when its sender closes theirs. It shows the sender's name or email address as it did when it arrived. If you want an envelope you received deleted, email us at support@sealedin.app.
You can ask us to stop emailing you, or to delete your address, at any time. Every email we send a recipient says:
You're receiving this because [sender's name] sent you an envelope through SealedIn. How we use your email address: sealedin.app/privacy.
Who we share it with
These providers process data for us under written terms. They may not use it for their own purposes, except that Stripe also uses payment information as a controller in its own right, for example to prevent fraud and to meet its legal duties, under its own privacy policy (stripe.com/privacy).
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting the service, its database and your files | London |
| Resend | Sending sign-in codes, delivery emails, reminders and Premium purchase confirmations | European Union (Ireland) |
| Stripe | Taking card payments for Premium envelopes | UK and United States |
| Google Workspace | Receiving the emails you send us | United States and elsewhere |
We also share information with our accountant and our accounting software (FreeAgent), which records the name on the card and the amount of each card payment, and, if needed, our insurers or legal advisers. We do not sell personal information.
Where your data goes. We use the providers listed above. Most store data in the UK or EU. Some, including Stripe, are based in the United States. Where your data leaves the UK, we rely on the safeguards the law allows: the UK–US data bridge where the provider is certified, or otherwise the UK's approved contract terms for international transfers.
How long we keep it
| Your account, content and envelopes | While your account is open. Scheduled envelopes are kept until they are delivered |
| Delivered envelopes | Available to their recipients while the sender's account is open, and afterwards: if the sender closes their account, an envelope already delivered stays available to each recipient until they ask us to delete it or close their own account |
| A recipient's address | As long as the sender keeps them as a contact or an envelope sent to them is kept, or until you ask us to delete it |
| Premium purchases and credit history | 6 years from the end of the financial year they relate to, for UK tax and accounting, even if you close your account sooner |
| Error logs from the live service | 1 month in our hosting logs (Amazon Web Services) |
| Emails with us | 12 months from the last message, or as long as your account if they are about it |
To close your account, email us. We delete your account, your drafts, envelopes not yet delivered, and any files that are not part of an envelope you have delivered. Envelopes you have already delivered stay with the people you sent them to, with your name or email address as their sender, as described above: like an email, which stays in the recipient's mailbox when you close your email account. The only other things we keep are the records of your Premium purchases and credits described above (dates, amounts or credits, how you paid and Stripe's reference, with the account they belong to), until their 6 years are up. Stripe keeps its own record of a card payment under its own privacy policy.
Cookies
We use only the cookies needed to sign you in: access_token and refresh_token, which keep you signed in for up to 400 days, and auth_flow, which lasts five minutes while you sign in. No analytics cookies.
Your rights
You can ask us for a copy of your personal information, and ask us to correct it, delete it, restrict how we use it, or send it to you in a portable form. You can object at any time to anything we do on legitimate interests. Where we rely on consent, you can withdraw it at any time.
If you are a sender and ask us to delete your information, we delete it as described under How long we keep it, but we do not take back envelopes you have already delivered: your recipients' interest in keeping what you chose to send them outweighs it, as with a letter or an email. If you have a particular reason for wanting a delivered envelope withdrawn, tell us and we will consider it.
Email us at the address above. We reply within one month, and there is no charge.
If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk, or 0303 123 1113.
Changes
We will update the date at the top when this notice changes, and email account holders first if a change affects them significantly.