Privacy Policy

What we collect, why, and your rights. SealedSpace is zero-knowledge — your content is encrypted on your device before it reaches us, and we cannot read it.

Effective date: 2026-06-08 · Last updated: 2026-06-11

SealedSpace (“SealedSpace”, “we”, “us”) provides an end-to-end encrypted collaboration suite — notes, chat, calls, email, calendar, tracker, files, and on-device AI. This policy explains what we process, why, and the choices you have.

The short version

Your notes, files, chat, email bodies, and other content are encrypted on your device before they reach us. We cannot read your content. We process a minimal amount of account and routing metadata needed to run the service, and we use no advertising, analytics, or tracking.

1. Information we process

Content you create (encrypted — unreadable by us): notes, documents, files and their names, chat messages, email bodies and attachments, and space names. We store only ciphertext.

Account & routing metadata (readable by us, required to operate):

Your email address and chosen display name.
Membership and routing relationships (which spaces and teams you belong to).
Operational metadata: message and update sequence numbers, timestamps, file size and MIME type, audit events for administrator actions, and device push tokens.

Technical data: standard server and CDN logs (IP address, user agent, request times) used for security and reliability.

We do not use analytics, advertising, session-replay, or third-party tracking.

2. How we use information

To provide and secure the service, authenticate you, route and sync your encrypted data, send service and transactional email (such as verification codes, security notices, and organization invitations), prevent abuse, and comply with the law. We do not sell personal data.

3. Email we send

We send only transactional email triggered by you or by your organization’s administrator — for example a verification code when you sign up, a security notice, an invitation to an organization, or an account-setup message. Each is addressed to a single recipient who initiated the action or was provisioned by an administrator. We do not send marketing email, and we do not buy, scrape, or import recipient lists. Bounces and complaints are automatically suppressed so we stop emailing an address that has bounced or reported our mail. To opt out of any non-essential notification, or to report unwanted mail, contact security@sealedspace.com.

Performance of our contract with you (providing the service); our legitimate interests (security, abuse prevention, and reliability); and compliance with legal obligations.

We share data only with the infrastructure sub-processors needed to run the service (hosting, email delivery, push notifications). See Sub-processors. We may disclose data if legally compelled — but for your content, we can only produce ciphertext that we cannot decrypt.

5a. Integrations you initiate (e.g. Claude Code)

You can connect external tools to your account — for example, linking the Claude Code MCP server (@sealedspace/mcp) so an AI assistant can help you plan and work on your tracker. These integrations are opt-in and entirely under your control, and they work differently from the sub-processors above:

You approve the connection and choose exactly which spaces it may access.
The integration runs on your own device. When you use it, your client decrypts the content of the spaces you granted and sends it to your own account with the AI provider (Anthropic), where it is handled under that provider’s terms and your settings with them — not ours.
SealedSpace only facilitates the encrypted delegation of your space keys to the tool you authorized; we do not receive, store, or control the decrypted content that you choose to send to the provider, and the provider is not a SealedSpace sub-processor. Encryption against our servers is unchanged.
You can revoke a connection at any time in Settings → Integrations, which immediately stops it from obtaining new access.

Before you approve any such connection, the app shows you exactly what will leave end-to-end encryption. Treat enabling an integration as a deliberate choice to share that content with the provider you selected. See the Security Whitepaper (“Agent delegation”) for the technical detail.

6. International transfers

Where data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses (and the UK Addendum where applicable). Content crosses borders only as ciphertext.

7. Retention

We retain account metadata while your account is active and for up to 90 days after closure, except where the law requires longer. Content is deleted when you delete your account or on request. Self-hosted deployments are controlled entirely by the operating organization. See Account deletion.

8. Your rights

Depending on where you live (GDPR / UK GDPR, CCPA / CPRA, and similar laws) you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object or lodge a complaint with a supervisory authority. Contact privacy@sealedspace.com. Because your content is encrypted, fulfilling some content requests requires your keys.

9. Security

See our Security Whitepaper. To report a vulnerability, see our Vulnerability Disclosure Policy.

10. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

11. Changes & contact

We will post changes on this page and update the “Last updated” date; material changes will be notified. Questions or requests: privacy@sealedspace.com.