Privacy Policy

Last updated 4 November 2026

This policy explains what Seuvo (“we”, “us”) processes when you use seuvo.com or the installed app, and why.

The short version

• Your documents, notes, recipients and copy history are encrypted on your device before they leave it. We store only the encrypted result and cannot read it.
• We see technical data needed to run the service: random identifiers, sizes, timing, device labels you choose and your network address.
• We use no cookies, advertising or analytics, and we do not sell data.
• If you lose your keys and your recovery file, we cannot restore your vault.

What we process

Encrypted vault contents

Document images, document names and types, notes, recipients, purposes, dates and copy references are encrypted on your device with keys that never reach us. What reaches our servers is ciphertext, which we store in a private Backblaze B2 bucket in the EU.

Data the service can see

• Random vault, record and device identifiers, and a digest of your vault’s access token (not the token itself).
• The size and SHA-256 digest of each encrypted record, and when it was created or read.
• The labels you give linked devices, when they were linked, and whether they are the owner or a linked device.
• Short-lived data while two of your devices link: an encrypted exchange that expires after two minutes.

Timing and size patterns can say something about how a vault is used (for example, how many documents it holds), even though the contents are protected.

Technical data

When your device contacts us, our delivery and hosting providers process your IP address and request details (such as browser type and the page requested) to deliver the service and to protect it from abuse. We use your network address for rate limiting, which we keep in memory only and do not write to our database. Our providers may keep their own short-term logs.

On your device

Your browser stores, on your device only: your vault key, encrypted with your device passcode; the optional biometric unlock wrapper; a few interface preferences, such as whether you dismissed a reminder; and a small cache of the public app shell so it can start offline. Choosing “Forget this device” removes the saved key and preferences. Clearing site data removes everything Seuvo keeps in your browser.

If you write to us

We keep your message and our reply for as long as needed to deal with it.

Why we process it

To provide the service you ask for, which is storing your encrypted records and linking your devices (performance of a contract), and to keep it secure and prevent abuse (our legitimate interest). We do not use your data for profiling or marketing.

Who we share it with

We use these providers to run Seuvo. They process data only on our instructions, except where they act as independent operators of their own network.

• Bunny.net delivers the website and app files and passes API requests to us.
• Cloudflare carries traffic between the website and our application server.
• Backblaze stores encrypted records and encrypted backups, in its EU region.
• Our application server and database, which we operate, store the identifiers and metadata described above.

We disclose data to authorities only when the law requires it. Because we hold ciphertext, we cannot hand over the content of your documents.

International transfers

Some providers are established outside the European Economic Area or may route traffic through other countries. Where personal data is transferred, we rely on an adequacy decision or standard contractual clauses. Your documents are encrypted before any transfer takes place.

How long we keep it

• Encrypted records and metadata stay until you delete the document or the vault.
• Unfinished uploads are removed automatically within about two days.
• We back up our database daily, encrypted. Data we delete can remain in those backups until they are replaced.

Your rights

Under data protection law, including the GDPR where it applies, you may ask us for access to your personal data, correction, erasure, restriction, portability, or object to processing, and you may complain to your local data protection authority. You can delete a document, and its copy history, from the document itself, and the owner can delete the whole vault from Settings → Delete vault. Deleting a vault removes its records, metadata and device permissions from our database and queues the encrypted files for removal from storage, including earlier stored versions, which is retried until it succeeds. Encrypted database backups can keep deleted data until they are replaced. Because contents are encrypted, we can only act on a vault you can prove you control. Documents you copied to a device or sent as a prepared copy stay with whoever holds them.

Security

Encryption happens in your browser. Device keys are protected by your passcode, and the app locks after five minutes of inactivity. No system is perfectly secure, and a watermark on a copy cannot prevent copying. Keep your recovery file and passphrase somewhere safe: without them, and without a linked device, nobody can restore your vault.

Children

Seuvo is not intended for anyone under 18, and we do not knowingly process their data.

Changes

If we change this policy in a meaningful way, we will update the date above and tell you in the app before it takes effect.