Privacy policy

What we store about you, why, and how to have it removed.

Last updated: 10 October 2026

This policy explains what personal data SeshGrid collects, why and on what legal basis, who receives it, where it is processed, how long it is kept and what rights you have. It describes what the system actually does.

Who we are

SeshGrid is an online platform connecting clients with professionals in 20 categories: beauty and wellness, and services such as tutors, coaches, nannies, psychologists, photographers and home repairs. Website: seshgrid.com.

The controller of your personal data, who decides why and how it is processed, is [seller name], code [to be added], [seller address] ("SeshGrid", "we"). Email: [email protected].

We are established outside the European Union. Our representative in the EU under Article 27 of the General Data Protection Regulation (GDPR) is [being appointed]; their address and email are on our Legal notice page (seshgrid.com/legal-notice). You can contact the representative instead of us about anything in this policy.

For the client records a professional keeps on SeshGrid for their own business, the professional is the controller and we process those records for them (see "Professionals' client records").

What we collect

What we hold depends on who you are on the platform.

All users: first, middle and last name, username, email address, phone number, gender, age, birth date, profile photo, time zone, interface language.
Phone confirmation: when you confirm your number with a code by SMS, we record when. For each code sent we keep the number, IP address, time and number of attempts; we never store the code itself, only a protected fingerprint of it. These records are deleted after 30 days. A confirmed number can belong to only one account.
Clients also: country and city.
Professionals also: the address where services are provided (country, region, city, district, street, house, apartment) and its map coordinates (found from the address, or set by the professional with a pin on the map), profile description, years of experience, working hours, currency, their list of services and prices, the photos in their gallery, and the short promotional videos (Reels) they post, with their captions.
Bookings: date and time, the services chosen, price, comments from both client and professional, the address of a home visit, how the visit was paid, booking status, cancellation reason.
Reviews: rating and review text.
Messages and calls: the text and photos of conversations between clients and professionals, a line for each call, blocks, and reports (see "Messages and calls between clients and professionals").
Notifications: your notification settings for email and SMS. Notifications by Telegram and WhatsApp ended on 25 September 2026, and the chat IDs and phone numbers we held for them were deleted on 10 October 2026.
Money and loyalty: your SeshGrid tokens and their history, your plan, loyalty points and their history, season passes, memberships you ask a professional for or buy from them, and gift certificates, including the name of the person a certificate is for.
Waiting-list entries, your favourite professionals, the places you save, your saved locations such as Home or Work with their map coordinates, and your friends and friend requests (see "Friends" and "Places and saved locations").
Salon teams: who belongs to which team, and the pay rates the salon owner sets for each professional.
Support messages: what you write to us and any image you attach. If you write without an account, also the name and email address you give.
Technical data: hashed password, sign-in tokens (also stored only as one-way hashes), whether and when your email was confirmed, when you accepted the Terms of Service and this policy and which version of each, who invited you if you signed up through someone's invitation link, and the reason if an account is blocked. Our server logs record the IP address, time, browser and the address of each request, with location, phone numbers and email addresses removed from it.
Signing in with Google or Apple: if you choose "Continue with Google" or "Continue with Apple", we receive from them your name, your email address and an ID for your Google or Apple account, and we keep the ID, the email address and which of the two you used. We never receive your Google or Apple password. If a SeshGrid account already uses the same email address, the two are linked and you sign in to that account; otherwise a new account is created. If you use Apple's "Hide My Email", we receive the forwarding address Apple gives us instead of your real one. You can unlink Google or Apple in Settings once your account has a password.

When card payments are switched on, we will also keep the card's type, last four digits, expiry date, issuing bank and country, and a token from the payment provider (never the full card number or its security code), and the IP address used for the card check. We will also keep a one-way fingerprint of the card, so that a free trial is given only once per card. If you remove a card that was used for a free trial or a plan, the payment provider may keep its token, only so that the card is still recognised; a removed card is never charged.

We do not ask for health data. Please do not write illnesses, injuries, allergies, medicines or other health details in booking comments or messages: tell the professional in person at the start of the visit.

Clients added by a professional

A professional can create a booking for someone who has not registered, entering that person's name, phone number and Instagram handle, and, if they wish, their birth date. In that case the details are entered by the professional, not by the person themselves.

For these records the professional is the controller (see "Professionals' client records"). If you find that a professional has entered your details and you do not want this, ask the professional or contact us, and we will delete them.

Why we use your data and on what legal basis

We use personal data only for the purposes below. For each, we name its legal basis under Article 6(1) GDPR; the same purposes rest on the matching grounds of the Law of Ukraine "On Personal Data Protection".

To provide the service you signed up for (performance of our contract with you): your account and signing in; making bookings and showing them to you and to the professional; letting the professional contact you about your appointment; messages and calls between clients and professionals; favourites, saved places, saved locations and friends; tokens, plans, loyalty points, season passes, memberships and gift certificates; card payments when they are switched on; professionals' public profiles, Reels, place pages and statements; the emails and notifications your account needs (email confirmation, password reset, booking notifications and reminders); answering support messages.
To meet our legal obligations: keeping accounting records of payments and statements, and answering requests from authorities that the law obliges us to answer.
For legitimate interests, ours or those of the people using SeshGrid, which we have weighed against your interests and rights: protecting the platform (limits on sign-in attempts, server logs kept for 30 days, blocking abuse, dealing with reports of chats and Reels); making sure a free trial or a new-customer offer is given only once, using one-way fingerprints of phone numbers, email addresses and cards; working out SeshGrid's fee to professionals, by recording whether a booking came through SeshGrid (the professional's invite link, the 30-day marker their profile link leaves on your device, and comparing your phone number with the clients the professional has entered themselves); reviews and ratings, including the ratings professionals give their clients; backups, so data survives a failure; telling search engines about new public pages; and deciding disputes about missed visits.
With your consent, which you can withdraw at any time: using your phone's location to confirm arrival at a visit and to share your way there; using your current location to fill in an address or search near you; matching your phone contacts to find friends; letting your friends see your bookings; letting people find you by your phone number; and, if you give your birth date, birthday offers from professionals.

We send no marketing and no advertising, we do not sell personal data, and we use no analytics or advertising trackers.

Some data is needed to provide the service: without an email address or phone number we cannot create an account, and without the details of a booking we cannot pass it to the professional. Everything given only with your consent is optional.

What is public and what other users see

A professional's profile is public: name, photo, profession, the address where they work without the apartment number, a pin on the map placed to within about 100 metres rather than at the exact spot, working hours, services with prices, rating, reviews and gallery photos. Their phone number is shown so clients can call. A client who books sees the full address, including the apartment, for their visit.

A professional's Reels are public while Reels is active for them (the free week or a paid plan): anyone can watch them on the home page and on the professional's page, without signing in. When Reels is off, the videos are hidden from clients but kept, and the professional can delete them at any time. An unlisted professional's Reels show only on their own page.

A professional can make their page unlisted. It is then hidden from search and from the map, but it still opens for anyone who has a direct link to it.

Client profiles are not public. Your email address is never shown to other users. Anyone signed in to SeshGrid can find you by your username and see your first name, the first letter of your last name and your photo; what your friends see is described under "Friends".

A professional sees the name and phone number of their own clients, that is, people who have booked with them. To add a registered client to a booking, a professional has to type that client's exact phone number or email address; they then see only the first name and the first letter of the last name, and each professional can make at most 30 such lookups an hour. A salon owner sees the bookings and clients of the professionals in their team.

A professional can give a client in their client base a personal discount, on their whole price list or on services they choose. We keep the percentage and the services it covers until the professional removes it, or the client's or the professional's account (or the record of a client the professional added themselves) is deleted. Only that professional and that client see it: the client sees their own price when booking, and it is never shown to anyone else. If the professional gave it to a client they added themselves, it also applies when a SeshGrid account with the same phone number, confirmed by SMS, books with them.

Messages and calls between clients and professionals

Clients and professionals can write to each other on SeshGrid. We store each message and any photos sent with it, who sent it and when, and how far each person has read.

A conversation can be seen only by the two people in it. It is not public, and a salon owner cannot read the conversations of professionals in their team.
Photos sent in a chat are never published. We resize them and remove their metadata, including location. Only the two people in the conversation can open them.
When you get a new message, you see an alert in SeshGrid. It says who wrote, never what they wrote. Chat messages, and alerts about them, are never sent by email or SMS.
Blocking: if you block someone, we record it, and neither of you can send messages in your conversations until you unblock them. The person you blocked is not notified, but they see that they can no longer write to you.
Reports: SeshGrid staff do not read conversations. The one exception is when someone in a conversation reports it. We then save a copy of the text of its last 30 messages, and the team can open their photos while the conversation still exists, with the reason and any comment you add, so the team can review it. The team's private Telegram chat gets a short alert with the reason, both names and any comment you added, but not the messages.
Deleting a message: you can delete any message you sent, at any time. It disappears for both of you, and we erase its text and photos from our server. A copy already saved for a report stays with that report, and the nightly backups keep it until they expire (see "How long we keep data").
Calls: the two people in a conversation can call each other by voice. A client can call a professional only during the professional's working hours.
A call goes directly between the two devices and is encrypted. We never record calls. If the devices cannot connect directly, the call passes through Cloudflare's relay service; it stays encrypted end to end between the two devices, so Cloudflare cannot listen to it.
To connect, the two devices exchange their network addresses (IP addresses) through our server, so each device learns the other's address. Our server deletes these connection details as soon as the call ends.
In the conversation we keep one line per call: when it was and how long it lasted, or that it was missed or declined.
A missed call creates a notification in SeshGrid; it is not sent by email or SMS.

Friends

You can add friends on SeshGrid by their username, with their friend link, or, in the app, from your phone's contacts. You become friends only when the other person accepts your request, and either of you can remove the friendship at any time.

What friends see: your first name and the first letter of your last name, your username and photo, your upcoming bookings (the professional, their profession and city, the services, the date and time; never the price, comments or the address of a home visit) and your favourite professionals.
Sharing your bookings with friends is off until you turn it on in Settings (accounts created before 10 October 2026 keep the setting they had, which was on unless they turned it off). When it is off, your friends see only your name, username and photo.
Anyone signed in to SeshGrid can find you by your username. People who have blocked one another cannot find or add each other.
Contacts: only in the app, and only if you allow it to read your contacts. Each number is turned into a one-way code (a SHA-256 hash) on your phone, and only these codes are sent. We compare them with the codes of the phone numbers of people who allow being found by their number, and we keep neither the codes you sent nor the result. Being found by your number is off until you turn it on in Settings (accounts created before 10 October 2026 keep the setting they had).
We keep your friends and friend requests until the friendship or the request is removed or an account is deleted. To limit abuse, we also keep a record of when you sent each friend request, for one day.
When you send or accept a friend request, the other person gets a notification.

Places and saved locations

A salon owner, or a professional who works at their own studio, can publish a page for their place: its name, a short description, its address without any apartment number, a pin on the map placed to within about 100 metres, a cover photo chosen from their gallery, and the professionals of their team who can be booked there. The page is public while it is published. The owner can hide or delete it at any time, and it is deleted with the owner's account. SeshGrid staff can hide a page that breaks the rules.

Saved places: when you tap the heart on a place, we keep a record that you saved it, so you can find it again. Nobody else, including the place's owner, sees who saved it.
Saved locations: you can keep up to 10 addresses, such as Home or Work, each with a name you choose and its map coordinates. If you wish, you can also give a location the category of services you look for there, such as Barber. We use your saved locations and their categories only to search for professionals and places near them. Only you can see them.
We keep saved places and saved locations until you delete them or your account is deleted.
To find an address you want to save, or the address of where you are when you choose to use your current location, we send the text you typed, or your device's position rounded to about 10 metres, to Nominatim (see "Who we share data with"). We do not store that position unless you save it as a location.
Which saved location you last chose to search near is remembered only in your browser or app, on that device.

Arriving at a visit: location check-in

When a client books a visit they will pay for at the salon, in cash or by card, and has no SeshGrid plan, they agree that SeshGrid confirms their arrival using their phone's location. This protects both sides if a visit is disputed. A client on a SeshGrid plan is not asked.

Check-in: around the time of the visit, when you tap “I'm here”, or open your bookings with location already allowed, your phone sends its position once. We compare it with the place of the visit and keep only the distance, how accurate the phone said it was, the time, and whether it counts as arrived. We do not keep the position itself.
At a home visit the professional checks in the same way against the client's address, which we look up on the map with Nominatim when the professional opens the route or checks in.
On my way: in the 90 minutes before a salon visit you can choose to share your position while the app is open. The professional, or the owner of the salon whose team they work in, sees it on a map with your travel time; it is not shown to SeshGrid staff. We keep only the latest position, delete it when you arrive or stop sharing, and delete anything left behind a few hours after the visit.
Route: when you open the route to a visit or to a professional's place, the website and the current version of the app send your position to our server inside the request, not in its web address, so it does not end up in our server logs. We round it to about 10 metres and pass it on to the routing service (see “Who we share data with”) to draw the way there. We do not save it, and hold the rounded point in memory for only a few minutes; the routing service keeps its requests in its own server logs.
If a professional marks a visit "did not come" after your phone checked in there, we open a check of it for you automatically. The check-in is shown to our team and to the professional as evidence, and a person on our team decides the check.
Location is used only while the app or page is open; SeshGrid never tracks your location in the background. You can turn location off at any time in your phone's settings. Without it you cannot book a visit paid at the salon unless you have a plan.

Reels

Professionals can post short promotional videos (Reels) of up to 60 seconds.

When a video is uploaded we convert it to a standard format and take a still image from it for the preview. The file as you uploaded it is deleted once it has been converted. Location and other metadata the camera stored in the video are removed in the conversion; the sound is kept.
We do not count or show who watched a reel, and there are no likes or other public reactions.
Anyone signed in can report a reel. We keep the report (the reason, any comment, who reported it, and a copy of the reel's caption and a link to the video) for 12 months, including after the accounts involved are deleted, then delete it automatically. An alert with the reason and the professional's name, but not the name of the person reporting, goes to the team's private Telegram chat.
SeshGrid staff can hide a reel that breaks the rules. A hidden reel is removed from public view; the professional still sees it and can delete it.
Reels are kept until the professional deletes them or their account is deleted. When Reels is switched off they are hidden, not deleted. Like uploaded photos, Reels are included in our backups.
The first 7 days of Reels are free and start the day a professional's first reel goes live. After that Reels has a monthly fee, added to the professional's statement only if they switch it on.

Who we share data with

We do not sell personal data. Besides the professionals you book with (see "What is public and what other users see"), it reaches only the service providers below, each for the purpose given. Most process it for us under a contract, as our processors. Google and Apple when you sign in with them, the payment providers, and the map, address and routing services act as independent controllers under their own privacy policies.

Hetzner Online GmbH (Germany) — hosts our server, in its data centres in Germany or Finland, in the EU. Everything we hold, including backups kept on the server, is stored there.
Cloudflare (Cloudflare, Inc., USA) — site protection and delivery; sees visitors' IP addresses. It also delivers Reels and may keep cached copies of them for a few minutes. Cloudflare also runs the relay that carries a call when the two devices cannot connect directly; the call stays encrypted and Cloudflare cannot listen to it. When a call starts, each device asks a Cloudflare or Google server for its own public IP address, so that server sees it.
Google (Gmail; Google Ireland Limited and Google LLC, USA) — sends our service emails; receives your email address and the message content.
Google and Apple (Google LLC and Apple Inc., USA) — only if you choose to sign in with them. The website loads their sign-in button from their servers, and the app opens their own sign-in on your phone; either way they receive your IP address and learn that you are signing in to SeshGrid. They then send us your name, email address and account ID (see "What we collect").
TurboSMS (Ukraine) — when SMS sending is switched on, sends the code by SMS when you confirm your phone number, and booking notifications and reminders, waiting-list alerts and payment notices to Ukrainian (+380) numbers. It receives your phone number and the text of the message. You can turn SMS notifications off in your settings; a code is sent only when you ask for one.
Telegram (Telegram FZ-LLC, United Arab Emirates) — nightly backups of the database, of uploaded photos and of Reels go to the platform owner's private chat. They contain users' personal data, including chat messages and chat photos, and are encrypted on our server before they are sent, with a key that only the platform owner holds, outside the server and outside Telegram, so Telegram cannot read them. When a conversation is reported, a short alert with the reason, both names and any comment added to the report, but not the messages, goes to the team's private Telegram chat. Support messages (the sender's name and email, the text and a link to any image) and technical error reports, which can include the address of the page involved and a shortened error message with email addresses and phone numbers masked, also go to the team's private Telegram chat.
Nominatim (OpenStreetMap Foundation, United Kingdom) — turns the address of a professional or a place into map coordinates; receives the street, house number, city and country, never the apartment number. For a home visit it receives the address of the visit without the apartment number, entrance or door code. When you look up an address, to save as a location or to place the pin of your own place, it receives the text you typed; when you choose to use your current location, it receives your device's position at that moment, rounded to about 10 metres. For a home visit we keep the map point found for the address with that visit.
OpenFreeMap — serves the map; receives the IP address of the browser showing it.
FOSSGIS (FOSSGIS e.V., Germany; routing.openstreetmap.de) — draws the route to a visit or to a professional's place and works out the travel time; receives the start point, rounded to about 10 metres, and the place of the visit. FOSSGIS keeps these requests in its server logs under its own privacy policy (https://routing.openstreetmap.de/about.html).
IndexNow — receives only the addresses of public pages, such as a professional's profile, and shares them with the search engines that take part (Bing, Yandex, Seznam and Naver), so they find new pages sooner.
monobank and Stripe (Universal Bank, Ukraine; Stripe, USA and Ireland) — when card payments are switched on, they check cards and take payments. You type your card details on their page, never on ours.

Translations of chat messages and of professionals' services and descriptions are made by our own translation service on our server; no outside translation or AI service receives them. Fonts are served from our own server too.

We disclose data to authorities only where the law obliges us to.

Data outside the European Economic Area

Our server is in the EU. Some of the recipients above, and we ourselves, are outside the European Economic Area:

United States (Cloudflare, Google, Apple, Stripe): these companies are certified under the EU–US Data Privacy Framework, which the European Commission has found to give an adequate level of protection; where a transfer is not covered by it, the Commission's standard contractual clauses apply.
United Kingdom (Nominatim): the European Commission has found that the United Kingdom gives an adequate level of protection.
Ukraine (SeshGrid and TurboSMS) and the United Arab Emirates (Telegram): there is no adequacy decision for these countries, so the transfers rely on the European Commission's standard contractual clauses. What goes to Telegram as a backup is encrypted, so Telegram cannot read it.

You can ask us for a copy of the safeguards that apply, at the address under "How to contact us".

How long we keep data

Account data — for as long as the account exists.
When an account is deleted, we delete the profile, conversations (messages, photos and call lines), favourites, saved places and saved locations, a place page the person published, the Reels a professional posted, friends and friend requests, notifications, sessions, support messages with the images attached to them, and the reviews the person wrote or received. Past bookings, and the season passes and memberships bought from a professional, stay in the professional's records without your name or account attached, because they are part of the professional's business and accounting records; we remove from them what you wrote yourself, such as your comment, your reason for cancelling and the address of a home visit. A membership request that has not been paid for is withdrawn. We also keep what the law requires us to keep, such as accounting records of payments, for the period the law sets. Reports are kept as described below. A professional's account is anonymised instead of removed: their name, contact details, photo, gallery and Reels are deleted, but their conversations with clients and the reviews of their work stay under a placeholder name, because they are the clients' correspondence and records as well. What a professional did as a client is deleted as for any client.
After an account is deleted we keep a record of the deletion request (the email address it came from, when it was made and when it was completed) as proof that we carried it out. We also keep a one-way fingerprint of the account's phone number and email address: a code that cannot be turned back into the number or the address. It is used only to recognise them if they are used to register again, so that new-customer offers, such as the first-visit discount and the reward for the person who invited you, are not given twice. Registering again is still possible.
We also keep a one-way fingerprint of each card saved by an account that had a free trial or a plan: a code that cannot be turned back into the card number. It is used only to recognise the card if it is added to another account, so that a free trial is not given twice.
Messages, chat photos and call records — as long as the accounts in the conversation exist, or until the sender deletes a message. When a client's account is deleted, its conversations are deleted with their photos and call records. When a professional's account is deleted, their conversations with clients stay under a placeholder name, because they are the clients' correspondence too.
Visit check-ins (distance, accuracy and time) — as long as the booking exists. A shared “on my way” position — until you arrive or stop sharing, and never more than a few hours.
Reports, with their copy of the conversation — kept for 12 months, including after the accounts involved are deleted, then deleted automatically.
Reel reports — kept for 12 months, including after the accounts involved are deleted, then deleted automatically.
Server logs — 30 days, then deleted automatically.
The IP address used for a card check — 30 days.
Database backups and copies of uploaded files are encrypted. Those on the server are kept for 14 days and then deleted automatically. Encrypted copies sent to the platform owner's private Telegram chat stay there until the owner deletes them.
Sessions — the access token expires after 60 minutes and the refresh token after 7 days. Signing out ends that device's session on our server straight away; your other devices stay signed in. Expired and used sign-in and password-reset tokens are deleted every night, and email confirmation links 7 days after they expire.
Messages sent to us without an account — as long as we need them to deal with the matter; you can ask us to delete them sooner.
The record of each request an administrator makes to the system — 12 months.

Your rights

You have the right to:

access your data and get a copy of it: Settings → Privacy & your data → "Download my data" gives you a file with the data held about you in your account, or write to us;
have inaccurate data corrected, in your profile settings or by contacting us;
have your data erased, by deleting your account (see below);
have processing restricted, for example while you contest whether data is accurate;
object at any time to processing based on legitimate interests, on grounds relating to your situation; we then stop, unless we have compelling legitimate grounds that override your interests or need the data for legal claims;
data portability: the same "Download my data" file is in a structured, machine-readable format (JSON) that you can take to another service;
withdraw your consent at any time, without affecting processing that took place before: turn location off in your phone's settings, turn off sharing bookings with friends or being found by your number in Settings, stop the app reading your contacts, or remove your birth date from your profile;
complain to a data protection supervisory authority: in the EU or EEA, the authority of the country where you live, work or where you think the infringement took place (the list is at edpb.europa.eu); in Ukraine, the Ukrainian Parliament Commissioner for Human Rights. We would be glad if you wrote to us first.

To delete your account, open Settings → Privacy & your data and send a request, or write to us at the address under "How to contact us". Until we act on it, you can cancel the request on the same page. We delete the account within 30 days and email you when it is done. Before deleting, we check that nothing is left open: an upcoming booking (yours, or, for a professional, a client's booking with you), an active SeshGrid plan, or a late-cancellation fee. If something is, we tell you what to settle first. When a professional's account is deleted, their page is hidden and signing in stops straight away, and the rest follows within the same 30 days.

To exercise any of the other rights, write to [email protected], preferably from your account's email address, so we can confirm it is you. We answer within one month; if a request is complex we may take up to two more months, and we tell you so within the first month.

Automated decisions

We make no decisions based solely on automated processing that have legal or similarly significant effects on you, and we do not build profiles of you for advertising. The order of the catalogue, loyalty levels and cashback follow fixed rules that are the same for everyone.

When a professional marks a visit as missed after the client's phone checked in at the place, the system opens a check automatically, using the distance measured at check-in. It decides nothing by itself: a person on our team looks at the check and decides it.

Professionals' client records

For bookings made on SeshGrid, we and the professional each act as a separate controller: we for running the platform, the professional for providing the service and keeping their business records.

A professional can also keep their own client records on SeshGrid: clients they add themselves, their notes and comments about clients, appointments they enter, the personal discounts they give and, for a salon owner, the pay rates of their team. For these records the professional is the controller, and SeshGrid processes them only on the professional's behalf, as a processor, under the Data Processing Agreement that professionals can read and accept in Settings.

If you are a client and want to exercise your rights over such records, ask the professional, or write to us and we will pass your request on and help the professional answer it.

Minimum age

SeshGrid is for people aged 18 and over, and you must be 18 or older to create an account. We do not knowingly collect data about anyone younger. If we learn that an account belongs to someone under 18, we delete it.

Security

Passwords are stored only as a cryptographic hash — we cannot see your password. Sign-in, password-reset and email-confirmation tokens are also stored only as one-way hashes. Connections to the site are encrypted (HTTPS). Sign-in attempts are rate limited. Uploaded images and videos are validated and their metadata, including location, is stripped.

Backups are encrypted before they leave the server. Server logs leave out location, phone numbers and email addresses, and are deleted after 30 days. Our team can see only what its work requires: staff do not read conversations unless one is reported. Administrator accounts sign in with a password and, once it is set up, a one-time code from an authenticator app, and every request an administrator makes to the system is recorded (who, what and when).

If a breach of security puts personal data at risk, we tell the supervisory authority within 72 hours, and tell you without undue delay when it is likely to put your rights and freedoms at high risk.

No system is completely secure, so we cannot guarantee absolute security.

Cookies and local storage

We set no cookies of our own and use no analytics or advertising trackers.

Local storage in your browser or in the app holds: your sign-in tokens and when they expire; a copy of your own profile (name, email, phone) so pages can show it without asking the server each time; your preferences, language and theme; which saved location you last chose to search near; a booking you were making when you were asked to sign in, so you can finish it; for 30 days, a marker that you opened a professional's profile link, used to work out SeshGrid's fee (see "Why we use your data and on what legal basis"); and a few short-lived markers, such as a sign-up in progress, a card check in progress, a team invitation being accepted, which prompts you have already seen, and a referral code. Signing out removes the tokens and the profile copy.

Cloudflare, which protects the site, may set its own cookies needed for security, such as telling people from bots. If you choose to sign in with Google or Apple, their sign-in may set their own cookies under their own policies.

Changes to this policy

We may update this policy. The date it was last updated is shown at the top of the page. We announce material changes on the platform before they take effect, and the version you accepted at registration is recorded with your account.

How to contact us

For questions about your personal data, deleting your account, or exercising your rights, write to: [email protected], or by post to [seller address]. You can also write to our representative in the EU (see "Who we are").