The short version
- Your company's data belongs to your company. We use it only to run Sealed Work for you.
- Each customer's data lives in its own database, encrypted with its own key. Other customers can't reach it.
- When you connect another system, Sealed Work only reads from it. It never changes, sends or deletes anything there.
- Our AI provider doesn't train models on your data. It doesn't keep your data after each request beyond what its terms allow, and we've asked for zero data retention.
- We never sell personal information, and we don't use it for advertising.
Who we are
Sealed Work LLC ("Sealed Work", "we", "us") makes software that helps project-based companies run their contracts and projects. This policy covers our website at sealedwork.com, the Sealed Work application, and our support. Questions go to privacy@sealedwork.com.
Two kinds of data
Customer Data is what a customer and its people put into Sealed Work or let Sealed Work read: contracts, records, documents, messages to MOSES, and data synced from systems they connect. The customer controls it. We process it on the customer's behalf, under our agreement with them. If you're a user at a customer company and have a question about that data, contact your company first. We'll help them answer it.
Account and website data is what we collect to run our business: your name, work email and role when your company invites you, sign-in records, support requests, and what you send us through the website. This policy explains how we handle both.
What we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, work email, company, role | To give you access and keep the right people in the right company |
| Sign-in and security records | Sign-in times, IP address, browser, multi-factor setup, actions taken in the app | To secure accounts and keep an audit log your company can review |
| Customer Data you add | Contracts, statements of work, invoices, reports, photos, emails, text you paste, questions to MOSES | To provide the service your company signed up for |
| Data from systems your company connects | Invoices, projects, tasks, time entries, work orders, document and signature status | To give MOSES and your team one view across your systems |
| Usage and cost records | Which features ran, how much AI processing each used | To run, bill for and improve the service |
| Website and contact details | What you send when you request a demo or email us | To reply and follow up |
Connected systems
An admin at your company can connect systems like QuickBooks, Procore, Jira, Microsoft 365 or Google Workspace. When they do:
- Sealed Work asks for read-only access wherever the system offers it. A few systems have no read-only option. For those, Sealed Work still only reads.
- Sealed Work never creates, changes, sends or deletes anything in a connected system.
- Sign-in tokens and keys are encrypted with your company's own key and are never shown again, even to your admins.
- Before anything is saved, Sealed Work drops fields that look like Social Security or tax ID numbers, bank or card numbers, dates of birth, passwords and access tokens. It also masks those patterns in text.
- An admin can disconnect a system at any time and choose to delete everything read from it.
Google user data. Sealed Work's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features your company turned on. We don't use it for advertising, and we don't use it to develop, improve or train generalized AI or machine learning models. People at Sealed Work don't read it unless you ask us to for support, it's needed for security, or the law requires it.
How MOSES uses AI
MOSES is the assistant inside Sealed Work. To read a document or answer a question, Sealed Work sends the relevant part of your Customer Data to our AI provider, Anthropic, through its commercial API. Under its commercial terms, Anthropic doesn't train its models on that data and deletes it within 30 days. We've asked Anthropic for zero data retention, under which it keeps nothing after each response. What MOSES works from is kept in your company's own Sealed Work database, not by the AI provider.
We don't use your Customer Data to train AI models, and we don't let anyone else do so.
How we use information
- To provide, secure and support Sealed Work for your company.
- To send service messages: invitations, sign-in codes, alerts your company set up, and notices about changes.
- To find and fix problems, and to understand which features get used so we can improve them. We use aggregated usage and cost records for this, not the content of Customer Data.
- To meet legal obligations and enforce our terms.
Who we share it with
We don't sell personal information and we don't share it for targeted advertising. We share data only with:
| Who | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, storage, encryption keys, sign-in and email delivery | United States |
| Anthropic | AI processing for MOSES | United States |
| Google Workspace | Our company email, for support conversations | United States |
| Calendly | Scheduling demos from our website | United States |
| Systems your company connects | Sealed Work reads from them with your company's permission | Set by that provider |
We'll also share information if the law requires it, to protect people or the service, or as part of a merger or sale of our business, in which case this policy keeps applying to it. We'll update this list before adding a new provider that handles Customer Data.
How we protect it
- Each customer has its own database and its own encryption key. One customer's account can't reach another's data.
- Data is encrypted in transit and at rest. Sensitive text is also encrypted field by field with the customer's key.
- Sign-in requires multi-factor authentication with an authenticator app. Accounts are invitation only.
- Every sign-in and change is written to an audit log that can't be edited.
- Access inside Sealed Work is limited to the few people who run the service, and every access is logged.
No system is perfectly secure. If a breach affects your information, we'll tell your company and, where required, you, without undue delay.
How long we keep it
- Customer Data is kept for as long as your company uses Sealed Work. It's the record your company builds on.
- An admin can download a full export of your company's data at any time from the Users tab in Sealed Work. Each export is kept for 7 days, then deleted.
- When your company ends its subscription, we export its data on request and delete it within 30 days. Encrypted backups roll off within 14 more days.
- Data from a connected system can be deleted at any time by disconnecting it with "also remove what was read."
- Application logs are kept for 90 days. Audit logs are kept as long as your company's account.
- Website and demo request details are kept as long as needed to follow up, then deleted on request.
Your choices and rights
Depending on where you live, you may have the right to know what personal information we hold about you, get a copy, correct it, delete it, or object to how it's used. You can ask at privacy@sealedwork.com. We'll confirm who you are first. If the request is about Customer Data, we'll pass it to your company, which decides. We won't treat you differently for asking.
Cookies
The Sealed Work app keeps your sign-in in your browser's session storage while you're signed in. It doesn't use advertising cookies. Our website may use Calendly's widget, which sets its own cookies when you schedule a demo. If we add analytics to the website, we'll use it to count visits and demo requests, not to build advertising profiles.
Children
Sealed Work is a business service for adults. We don't knowingly collect information from anyone under 18.
Changes
If we change this policy, we'll post the new version here with a new effective date. If a change is material, we'll tell customer admins by email before it takes effect.
Contact
Sealed Work LLC
1965 West Parkview Drive
Syracuse, UT 84075
privacy@sealedwork.com