Privacy notice
Last updated: October 3, 2026
The short version. We collect your email, the plan you picked and what you do, so we can tell you when SealPitch launches and send your founder code. We use MailerLite to send emails. No cookies, no ad tracking, no selling data. You can leave at any time with one click.
1. Who we are
SealPitch is run by a self-employed person in Portugal, who decides how and why your personal data is used (the "controller" under the General Data Protection Regulation, GDPR). Name, tax number and address are in the Legal notice. For anything about your data, write to [email protected]. We haven't appointed a data protection officer, because the law doesn't require one for a business of our size and kind.
2. What this notice covers
This notice covers sealpitch.com, the SealPitch waitlist, the emails we send to people on it, and any call you choose to have with us. The SealPitch product itself will have its own privacy notice when it launches.
3. What we collect
| Data | Where it comes from | Needed? |
|---|---|---|
| Email address | You, in the waitlist form | Yes, to send you the launch news and founder code |
| Plan you picked and what you do | You, in the form | Yes, it tells us what to build first |
| Languages you write proposals in | You, in the form | No, optional |
| Your answer to each consent box, the version of the consent text and the time | Recorded when you send the form | Yes, the law asks us to be able to prove consent |
| The time you confirmed your email | MailerLite, when you click the confirmation link | Yes, it completes your sign-up |
| Your replies to our emails | You, if you reply | No |
| Notes from a call | Us, only if you agreed to a call | No |
| Technical data: IP address, browser and device type, pages requested | Your browser, when you visit | Yes, to deliver and protect the website |
4. What we don't collect
- No name, phone number or payment details. Joining the waitlist needs only an email.
- No cookies, ad pixels or cross-site trackers.
- No sensitive data (health, religion, politics and similar).
- No data bought from list brokers or scraped from other sites.
- We don't track whether you open our emails or click their links.
5. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR art. 6(1)) |
|---|---|
| Launch news, founder code and up to 3 emails before launch | Your consent (a) |
| Newsletter after launch, only if you ticked the second box | Your consent (a) |
| Keeping proof that you consented | Legal obligation (c), art. 7(1) |
| Learning from your replies and calls to shape the product | Legitimate interest (f) |
| Running and protecting the website, and stopping spam sign-ups | Legitimate interest (f) |
| Counting visits without cookies or personal profiles | Legitimate interest (f) |
Where we rely on legitimate interest, we've weighed it against your interests: we only use what you chose to send us or what any website receives to work, we keep it short, and you can object at any time (section 11).
6. Do you have to give us this data?
No. Joining the waitlist is voluntary and isn't a contract. If you don't give us an email, a plan and the first consent, we simply can't add you to the list.
7. Who helps us, and who else may see it
We use a few service providers ("processors"). They act only on our instructions, under data processing agreements:
- MailerLite (UAB MailerLite, Lithuania): stores the waitlist and sends our emails.
- Cloudflare (Cloudflare, Inc., USA): hosting, delivery and security. It processes IP addresses to serve this website and block attacks.
- Umami Cloud (USA): counts visits without cookies and without building personal profiles.
We may also share data when the law requires it, for example with a court or a public authority. We never sell your data, and we don't share it for advertising.
8. Transfers outside Europe
Some providers are based in the USA or use sub-processors there. Those transfers rely on the EU-US Data Privacy Framework, where the provider is certified, or on the European Commission's standard contractual clauses. You can ask us for more detail.
9. How long we keep it
| Data | How long |
|---|---|
| Waitlist data | Until you unsubscribe or ask us to delete it. If you don't sign up, until 6 months after launch. If we decide not to launch, we delete it within 3 months |
| Proof of consent | For as long as we keep your waitlist data, then as long as needed to answer a claim about it |
| Your email after you unsubscribe | Kept on a do-not-contact list only, so we never write to you again by mistake |
| Replies and call notes | Until the end of our product research, then deleted or anonymized |
| Security logs | For the short period our hosting provider keeps them |
10. How we protect it
- HTTPS everywhere, with strict security headers.
- Two-factor sign-in on every account that can reach your data.
- Secret keys kept in our hosting provider's encrypted storage, never in code.
- We collect only the data listed above, and our logs don't record email addresses.
If a breach ever puts your data at risk, we'll tell the authority within 72 hours and tell you if the risk to you is high.
11. Your rights
- Access: ask what we hold about you and get a copy.
- Correction: fix anything that's wrong.
- Deletion: ask us to erase your data.
- Restriction: ask us to pause using it while a question is sorted out.
- Portability: get the data you gave us in a common format.
- Objection: object to uses based on legitimate interest.
- Withdraw consent: at any time, with the unsubscribe link or by writing to us. It doesn't affect what we did before.
Write to [email protected]. It's free, and we answer within one month (we may extend that by two months for complex requests, and we'll tell you why). We may ask you to confirm the request from the email on the list, so nobody else can get your data.
12. Our emails
Every email has a one-click unsubscribe link. Before launch we send up to 3 short emails, then the launch email with your founder code. The newsletter comes only if you asked for it. Replies reach a real person.
13. Cookies and similar technologies
This website sets no cookies and stores nothing on your device. Our visit counter, Umami, works without cookies and doesn't store your IP address. If we ever add cookies or ad measurement, we'll ask for your consent first and update this notice.
14. Automated decisions
We make no decisions about you by automated means that have legal or similarly significant effects, and we don't build profiles about you.
15. Children
SealPitch is a tool for professionals. The waitlist isn't meant for anyone under 18, and we don't knowingly collect their data.
16. Complaints
If you're unhappy with how we handle your data, please tell us first so we can fix it. You also have the right to complain to the Portuguese data protection authority, CNPD (Comissão Nacional de Proteção de Dados), at www.cnpd.pt, or to the authority in the EU country where you live or work.
17. Changes to this notice
When we change this notice, we update the date at the top. If the change is significant, we'll also email the people on the waitlist before it applies.