Privacy Policy

Last updated: October 31, 2026

This policy explains what personal data SealReply collects, why, and what you can do about it. It covers our website, dashboard and chat widget.

Who we are

SealReply is operated by Wei Dong, an individual based in China. For our customers' account data we decide how it is used. For the data of people who chat on our customers' websites ("visitors"), we process it on behalf of the website owner, who decides how it is used; that website's own privacy policy applies to it. Contact: support@sealreply.com.

Data about our customers

Account: email address, name, password (stored only as a secure hash), two-factor settings, language and time zone.
Billing: plans, orders, invoices and payment status. Card details are entered on our payment partners' pages; we never see or store card numbers.
Usage and security: IP address, browser, device, sign-in times and actions in the dashboard, used to keep accounts secure and to fix problems.
Messages you send us, such as support emails.

Data we process for website owners

When visitors use the chat widget on a customer's website, we process on the customer's behalf:

messages, files, and contact details visitors choose to give;
IP address and approximate location (country, region, city) worked out from it;
browser, device, language and time zone;
pages visited on that website, how the visitor arrived (referrer, search or campaign parameters), and past visits and chats.

Website owners can export or delete one visitor's data at any time to answer privacy requests.

How we keep chats private

Messages and files are encrypted before they are stored, with a separate key for every customer, and all traffic uses HTTPS. Our staff have no casual access to chats: any access needs two people to approve it, is limited in time, and the customer is told. This is server-side encryption, so our servers can decrypt messages while handling them; we promise "no casual access, and you always know", not "technically impossible to read".

How we use data

To provide, maintain and secure the Service.
To take payments, send receipts and keep financial records.
To send service emails: sign-in codes, notifications, expiry and payment reminders.
To understand which pages and channels bring sign-ups, using counts rather than individual profiles.

We do not sell personal data, and we do not use your or your visitors' data for advertising.

Cookies

We use only the cookies the Service needs:

sign-in cookies that keep you logged in;
a first-party cookie remembering how you first found our website (for example a search engine or a campaign link), so we know which channels work;
Cloudflare Turnstile on sign-up and report forms, to stop bots.

We do not use third-party advertising cookies. The chat widget stores an identifier in the visitor's browser so a conversation continues across pages.

Service providers

We share data only with providers that help us run the Service, and only what they need:

Vultr: servers and storage;
Amazon Web Services: encryption key management;
Resend: sending email;
Cloudflare: bot protection (Turnstile);
payment partners: processing payments (card and PayPal partners, and cryptocurrency payment gateways);
DeepL: message translation, only when a workspace owner turns it on.

We may also disclose data when the law requires it.

Where data is stored

Our servers are run by cloud providers and may be located in a country other than yours. We protect data the same way wherever it is processed.

How long we keep data

Chats and files: for the retention period of the workspace's plan (30 to 365 days), then deleted automatically.
After a downgrade or expiry: older chats are kept for another 30 days, so renewing restores them.
Closed workspace: it stops being accessible at once, its encryption key is destroyed, and its data is removed from backups within 30 days.
Orders and payment records: kept as long as tax and accounting rules require.

Your rights

You can view and correct your account details in the dashboard, export your data, and close your workspace at any time. To ask about, correct or delete your personal data, email support@sealreply.com; we answer within 30 days. If you chatted on a website that uses SealReply, contact that website first; we will help its owner answer your request.

Children

The Service is not meant for children under 16, and we do not knowingly collect their data.

Changes to this policy

If we change this policy in a way that matters, we will update the date above and tell customers by email before the change takes effect.