Section 1
Introduction
This Privacy Policy ("Policy") describes how Novus Broker Technology, Inc. ("Seshy," "we," "us," or "our") collects, uses, and protects information in connection with the Seshy mobile application and web platform at seshy.pro (collectively, the "Service"). This Policy applies to all users of the Service, including providers and clients who book sessions through the platform.
By using the Service, you agree to the collection and use of information in accordance with this Policy. This Policy should be read in conjunction with our Terms of Service.
Section 2
Our Privacy Architecture
Seshy stores your working data on its servers so that your booking page, your reminders and your client list keep working across devices and when your phone is off. Client contact details are encrypted at rest. Understanding where your data lives is central to this Policy, so here it is in full:
- Your client list — names and phone numbers
- Booking records (date, time, session type, and the client for each)
- Your services, prices and availability
- Your display name, profile bio and booking page settings
- Your phone number, for signing in
- Stripe account identifiers (we never see card numbers)
- Reviews left on your booking page
Client names and phone numbers are encrypted before they are written to our database. We hold the key and decrypt them only to serve your own screens, messages and booking page.
- Your signed-in session
- Whether you turned on Face ID or Touch ID
- Your light or dark theme choice
- Your current plan, remembered so the app opens correctly offline
That is the whole list. The app has no local client database — your client list is not stored on your phone, and deleting the app does not delete your data.
Section 3
Information We Collect
Account Information. When you create an account, we collect your phone number for authentication via SMS verification. We may also collect a display name and profile photo if you choose to provide them.
Booking Data. When a client books a session through your booking page, we collect the booking details (date, time, session type, duration, price) and the client's name and contact information as provided during booking. This data is necessary to facilitate the booking and payment process. The client's name and phone number are encrypted at rest, in the same way as the rest of your client list.
Payment Information. Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers. We retain only Stripe account identifiers and transaction references necessary to manage your subscription and facilitate payouts.
Usage Data. We do not collect usage analytics. There is no analytics, crash-reporting or advertising software in the Seshy app or on this website — no Sentry, no Firebase, no Amplitude, no Segment, no advertising SDK. We do not build profiles of how you use the Service and we have no third-party trackers to disclose.
Server Logs. Like any website, our hosting provider records ordinary request logs — IP address, timestamp, and the URL requested — which are used to keep the service running and to investigate abuse, and are retained for a short period. This is infrastructure logging, not product analytics.
Review Data. Reviews are anonymous and contain no client-identifying information. Only clients who completed a verified booking can submit a review.
SMS/Text Messaging. By providing your mobile number and checking the consent box, you agree to receive booking-related text messages from Seshy (booking confirmations, appointment reminders, and booking status updates). Message frequency varies with booking activity, typically 2–4 messages per booking. Message and data rates may apply. Reply STOP to opt out at any time or HELP for assistance. Mobile phone numbers and SMS opt-in consent are never shared with or sold to third parties or affiliates for marketing purposes. Full program details are in our SMS Terms.
Section 4
How We Use Your Information
We use the limited information we collect to:
- Authenticate your account and verify your identity
- Operate and maintain the booking system
- Display your public booking page and provider profile
- Process subscription payments and facilitate provider payouts via Stripe
- Operate the booking and review system
- Provide customer support
- Improve and maintain the Service
- Comply with legal obligations
We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising purposes. We do not build behavioral profiles of our users.
Section 5
Third-Party Service Providers
We work with a limited number of trusted third-party providers to operate the Service. Each has been selected for their security practices and commitment to data protection:
Hosts our backend infrastructure including user accounts and booking data. Data is encrypted at rest and in transit. Supabase is SOC 2 Type II compliant.
Handles all payment processing for subscriptions and booking payments via Stripe Connect. Stripe is PCI DSS Level 1 certified. We do not store card data.
Hosts the seshy.pro website and booking pages. Vercel processes standard HTTP request data (IP addresses, user agents) as necessary to serve web pages.
The Seshy app is distributed through the Apple App Store. Push notification tokens are used solely to deliver booking notifications.
We do not share your data with any other third parties except as required by law (see Section 9).
Section 6
Data Retention
Cloud Data. We retain your account and booking data for as long as your account is active. If you delete your account, we will delete your personal data from our servers within 30 days, except where retention is required by law or necessary to resolve disputes. Anonymized, aggregated data that cannot be used to identify you may be retained indefinitely.
Client Booking Data. Details a client provides to book (name, contact information) are encrypted and shared only with their provider to run the booking — never sold, never used for advertising. We retain them as needed to operate the booking and as described above.
Your Client List. Your clients' names and phone numbers are stored on our servers, encrypted at rest, for as long as your account is open. We can access them, and we can delete them. If you delete your account, they are deleted with it — see deleting your account. Deleting the app from your phone does not delete your data, because your data is not stored on your phone.
Payment Records. Transaction records may be retained for up to 7 years as required by tax and financial regulations.
Section 7
Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access. Request a copy of the personal data we hold about you.
- Correction. Request that we correct inaccurate personal data.
- Deletion. Request that we delete your personal data. You can delete your account by contacting us at hi@seshy.pro.
- Portability. Request a machine-readable copy of your data.
- Objection. Object to certain processing of your data.
These rights apply to the data we hold about you, which includes your client list. To exercise any of them, contact us at hi@seshy.pro. We will respond to all legitimate requests within 30 days.
Erasure. You can delete your account and everything in it yourself, at any time, from seshy.pro/account/delete — also reachable from More in the app. This deletes your profile, your booking page, your client list, your services and your session history. It cannot be undone, and we cannot recover it for you afterwards. If you have upcoming sessions booked, cancel them first so your clients are told.
Access and portability. Email us and we will provide the data we hold about you and your clients in a machine-readable format. There is no self-service export yet.
Correction. You can edit your own profile and booking settings in the app. For anything you cannot reach yourself, email us and we will correct it.
Section 9
Legal Disclosure
We may disclose your personal information if required to do so by law, or in the good-faith belief that such action is necessary to: (a) comply with a legal obligation, court order, or subpoena; (b) protect and defend the rights or property of Novus Broker Technology, Inc.; (c) prevent or investigate possible wrongdoing in connection with the Service; or (d) protect the personal safety of users of the Service or the public.
We hold your account details, your booking records, and your client list, and we hold the key that decrypts your clients' names and phone numbers. If we receive a valid and legally binding demand, we are capable of producing that data, and encryption at rest does not prevent us from doing so.
In practice we require valid legal process, and we disclose only what the request actually covers rather than handing over a whole account. Where we are able to tell the affected member before we produce anything, we do — though we may be legally prohibited from telling them, and we may not be able to where there is a risk to someone's safety.
Section 10
Data Security
We implement industry-standard security measures to protect the data we do hold. This includes:
- Encryption of data in transit (TLS 1.2+) and at rest
- Row-level security policies on all database tables
- Regular security audits of our infrastructure
- Minimal data collection philosophy — we don't store what we don't need
However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. If you become aware of any security breach, please contact us immediately at hi@seshy.pro.
Section 11
Children’s Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at hi@seshy.pro, and we will take steps to delete such information promptly.
Section 12
International Data Transfers
Our servers and third-party service providers are located in the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using the Service, you consent to such transfers.
Section 13
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you via the app or email. Your continued use of the Service after any changes constitutes your acceptance of the updated Policy.
We encourage you to review this Policy periodically to stay informed about how we protect your information.
Section 14
Contact Information
If you have questions about this Privacy Policy or our data practices, please contact us: