Privacy Policy

1. Who we are

Sesklo (“Sesklo,” “we,” “us”) operates a home-services platform that connects homeowners and property managers (“Consumers”) with home-service businesses (“Service Providers”) for quoting, scheduling, payments, project management, and related services, via our website and mobile apps (the “Services”).

For some data, Sesklo acts as a service provider/processor on behalf of a Service Provider or organization — see “Data you provide about other people” below.

2. Information we collect

You provide:

• •Account & identity — name, email, phone, password (held by our auth provider; we never store your password), business details, profile/logo images.
• •Addresses & properties — service and property addresses, unit/building info, property photos and project details, including optional pre-arrival access info you choose to share (e.g. gate/lockbox codes, parking, pet notes).
• •Project content — messages, quotes, job details, notes, reviews, support requests, forum posts, photos and videos you upload (captured with your device camera or chosen from your photo library, at your direction), and signatures (with IP address, device/user-agent, and timestamp captured for the e-signature audit trail).
• •Payments & financial — card or bank-account details (collected and tokenized by our payment processor; we do not receive or store full card or bank-account numbers), billing address, purchase/invoice history, subscriptions, and — for Service Providers — payout onboarding information (the identity-verification and bank details you give our payment processor so it can pay you out).

Collected automatically:

• •Usage & device — interactions with features, pages/screens viewed, in-app search terms, approximate and (for routing/service-location features) precise location, IP address, browser/device type, and notification/push tokens and device identifiers used to deliver notifications. When you first go through Sesklo’s welcome screens, we record which screens you see and what you tap on them, with the time of each, under a random identifier for that app install or browser — tied to your account once you sign in — together with the app version, operating-system version and device type (phone, tablet or computer), so we can see where the welcome steps are confusing and fix them. Our public marketing pages use Google Analytics (first-party _ga cookies) to measure visits; the signed-in product and the mobile apps use first-party analytics only. We do not use advertising or attribution SDKs.
• •Cookies & similar — strictly-necessary cookies for sign-in and session/persona state, Google Analytics cookies (_ga) on our public marketing pages only, and first-touch attribution parameters captured at signup. We do not use advertising or cross-site tracking cookies.

Mobile app permissions: the iOS and Android apps ask for your permission before accessing the camera or photo library (to capture and attach photos and videos), location (for routing, service-location features, and — where a Service Provider organization enables time tracking — on-site presence used to suggest work time entries for team members), and push notifications. When a team member taps the time clock and has allowed location, the app saves the location the phone already has with that tap; it never asks for location or waits for one to record the time. These locations are used to check logged time against the job site: the organization's owners and admins can choose to be alerted, with the approximate distance, when a project timer is started far from the job address or logged time does not match where the phone was. Each permission is optional, and you can change it at any time in your device settings.

From other sources:

• •Calendar (optional, Service Provider opt-in) — if you connect Google or Microsoft/Outlook calendar, we access busy-times and sync appointment details.
• •Address validation & mapping — addresses are standardized and geocoded via our mapping/address partners.
• •Publicly available business information — for Service Provider prospecting, we may collect business contact information from public sources.
• •Equipment recalls and weather — we download the US Consumer Product Safety Commission's public recall list (nothing about you is sent), and ask the US National Weather Service for a forecast using the approximate location of your property's ZIP code, for seasonal upkeep tips. A label photo you take but never save to an item is deleted after 30 days.

3. How we use information

• •Provide, operate, and improve the Services (quoting, scheduling, messaging, payments, project management, reviews).
• •Power Sesklo AI — the Help chat, filling in a request from your description, price estimates, reading inspection reports, floor plans, equipment labels, receipts and permits, before/after renderings, polishing messages, and summaries of answers and support requests. When you use these, what you submit and the account details the feature needs are sent to Anthropic and Google. In the Sesklo iPhone app, we ask your permission before Sesklo AI sends your information (one answer for your login; on a team, each person answers for themselves), and you can turn it off there anytime on My Account — with it off, nothing from the app is sent to them and the rest of Sesklo still works. On the website and in the Android app, using a Sesklo AI feature sends what that feature needs. Inspection reports shared through our partner form are read by Sesklo AI when submitted. Our AI sub-processors do not use your data to train their models under their commercial terms. More at sesklo.com/sesklo-ai.
• •Improve the Help chat — we keep the text of questions asked in it, without your name, account or anything that links it to you, to find common questions and answer them faster. We delete them after 90 days.
• •Send transactional communications, and — where you have opted in — marketing communications (you can opt out anytime). Service Provider outreach complies with CAN-SPAM and similar laws.
• •Process payments, prevent fraud, maintain security, and keep audit/e-signature records.
• •Comply with legal obligations and enforce our terms.

4. We do not sell or share for advertising

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under California’s CCPA/CPRA). We do not use third-party ad networks, advertising identifiers, or marketing trackers.

5. How we share information

We share personal information only with:

• •Service providers/sub-processors acting on our behalf (listed below), under contract and only as needed.
• •Other users as the Service requires — e.g. a Consumer’s project details and (after a quote is accepted) full service address are shared with the awarded Service Provider; messages are shared between the parties to a project.
• •Payment and financing partners to process transactions.
• •Card networks and banks, when a payment is disputed — to answer a dispute or chargeback, we send the customer’s bank (through our payment processor) the records of that job: the quote or booking and anything signed for it, the work records and photos, the messages between the customer and the provider, and the receipt.
• •Legal/safety — to comply with law, enforce terms, or protect rights and safety.
• •A successor in a merger, acquisition, or asset sale, subject to this policy.

Mobile information: No mobile information will be sold or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except with the messaging providers we use strictly to deliver the messages you asked for. See our SMS Terms for details on our messaging program.

6. Text messaging (SMS)

We send text messages only to people who have opted in, or who have an account with us and have not turned texts off. When you opt in we record your mobile number, the date and time, the exact consent language you were shown, and the page or screen where you gave it.

Message frequency varies and message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Our full messaging disclosure — program description, frequency, cost, opt-out, and carrier terms — is on our SMS Terms page at /sms.

7. Data you provide about other people (and prospecting)

• •Service-Provider-uploaded customer lists (“My Customers”/CRM): when a Service Provider uploads information about their own customers, the Service Provider is the controller of that data and Sesklo processes it on the Service Provider’s behalf. We assist with deletion requests routed to us.
• •Prospect data: we collect business contact information about Service Providers (and, for property managers, prospective tenants supplied by the organization) from public sources or our customers. We honor opt-out/do-not-contact requests. To be removed, contact us.
• •Inbound callers: if you call a Service Provider’s Sesklo-powered number, we may process your phone number and call details to handle and follow up on the call.

8. Your choices and rights

• •Access, correction, deletion, and portability — request via the contact details below or our account-deletion page. A Service Provider’s business owner can also download the business’s records directly from Settings → Billing & Payments.
• •Marketing opt-out — every marketing email/SMS includes an unsubscribe/STOP option; you can also manage preferences in your account.
• •California (CCPA/CPRA): rights to know, delete, correct, and opt out of sale/share (we do not sell or share); non-discrimination for exercising rights.
• •EEA/UK (GDPR), where applicable: rights of access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with a supervisory authority.
• •What we may retain: we may keep certain records (financial/tax records, e-signature audit trails, fraud-prevention data) as required by law or legitimate business need, even after account deletion — see below.

9. Account deletion and what we keep

You can close your account (which keeps your records on file so you can return) or permanently delete your data, from our account-deletion page. After you confirm, you have 30 days to change your mind.

When you permanently delete your data, we remove the information that identifies you — your sign-in, billing details, and standalone profile — along with the photos, videos and documents you uploaded to your own requests and projects. Files your service provider uploaded stay with that provider's records, and media attached to the property itself (property and equipment photos, room scans) stays with the property's history, de-identified as described below. We retain certain records where the law requires or permits — such as invoices and signed documents (tax and legal-defense obligations).

We also keep a property’s history (the work performed there, the service providers who did it, equipment and service records, layouts, and reports) in de-identified form — with your identifying information removed and you shown only as a previous owner — so a future owner of that property benefits from its history. We maintain this property information only in de-identified form and do not re-link it to you.

Unfinished setups that are never saved are deleted after 30 days of inactivity. If you start setting up Sesklo but never add an email address or sign-in to save your account, the home or business you began, and the photos you added, are deleted once the setup has been inactive for 30 days.

10. Cookies

We use strictly-necessary cookies (sign-in, session, active-persona), Google Analytics cookies (_ga) on our public marketing pages only, and capture first-touch attribution parameters at signup. We do not use advertising or cross-site tracking cookies.

11. Data retention

We retain personal information for as long as your account is active and as needed to provide the Services, then for the periods required by law or legitimate business needs (e.g. financial records, dispute/e-signature audit trails). De-identified property information is retained indefinitely. Questions asked in the Help chat are kept for up to 90 days, without anything that links them to you.

12. Security

We protect data with encryption in transit (TLS), encryption of sensitive tokens at rest, access controls, and reliance on vetted infrastructure providers. No method of transmission or storage is 100% secure.

13. International transfers

Some providers may process data in the United States or other countries. Where required, we use appropriate safeguards.

14. Children

The Services are not directed to children under 13 (or the applicable age in your region), and we do not knowingly collect their personal information.

15. Changes to this policy

We will update this policy as needed and revise the “Last updated” date. Material changes will be communicated as required by law.

6. Sub-processors

We use the following service providers, each receiving only the data needed for its function:

Anthropic and Google (Gemini API) do not train on your data under their commercial terms. When financing is offered, our financing partner receives the details needed to underwrite a loan.

Stripe collects some of this information directly from you, including identifying information about the devices that connect to its services, and uses it to provide and improve its services, including fraud detection and prevention. Stripe also handles some of it as an independent controller — for example to verify the identity of Service Providers receiving payouts and to meet its own legal obligations. See the Stripe Privacy Policy.

16. YouTube

Sesklo uses YouTube API Services to publish Sesklo’s own videos to Sesklo’s YouTube channel and to read viewing statistics for those videos. We do not access, collect or store any information from your YouTube or Google account through YouTube API Services. YouTube’s use of information is governed by the YouTube Terms of Service and the Google Privacy Policy. Access granted to an app through Google can be removed at any time at security.google.com/settings/security/permissions.

17. Contact

Questions or requests: john@sesklo.com · Sesklo LLC, PO Box 840117, Saint Augustine, FL 32080

To close or delete your account, visit our account-deletion page.