Privacy Policy

1. Who we are

Sesklo (“Sesklo,” “we,” “us”) operates a home-services platform that connects homeowners and property managers (“Consumers”) with home-service businesses (“Service Providers”) for quoting, scheduling, payments, project management, and related services, via our website and mobile apps (the “Services”).

For some data, Sesklo acts as a service provider/processor on behalf of a Service Provider or organization — see “Data you provide about other people” below.

2. Information we collect

You provide:

• •Account & identity — name, email, phone, password (held by our auth provider; we never store your password), business details, profile/logo images.
• •Addresses & properties — service and property addresses, unit/building info, property photos and project details, including optional pre-arrival access info you choose to share (e.g. gate/lockbox codes, parking, pet notes).
• •Project content — messages, quotes, job details, notes, reviews, support requests, forum posts, photos and videos you upload (captured with your device camera or chosen from your photo library, at your direction), and signatures (with IP address, device/user-agent, and timestamp captured for the e-signature audit trail).
• •Payments & financial — card details (collected and tokenized by our payment processor; we do not receive or store full card numbers), billing address, purchase/invoice history, subscriptions, and — for Service Providers — payout onboarding information.

Collected automatically:

• •Usage & device — interactions with features, pages/screens viewed, in-app search terms, approximate and (for routing/service-location features) precise location, IP address, browser/device type, and notification/push tokens and device identifiers used to deliver notifications. We use first-party analytics only; we do not use third-party advertising or analytics SDKs.
• •Cookies & similar — strictly-necessary cookies for sign-in and session/persona state, and first-touch attribution parameters captured at signup. We do not use advertising or cross-site tracking cookies.

Mobile app permissions: the iOS and Android apps ask for your permission before accessing the camera or photo library (to capture and attach photos and videos), location (for routing, service-location features, and — where a Service Provider organization enables time tracking — on-site presence used to suggest work time entries for team members), and push notifications. Each permission is optional, and you can change it at any time in your device settings.

From other sources:

• •Calendar (optional, Service Provider opt-in) — if you connect Google or Microsoft/Outlook calendar, we access busy-times and sync appointment details.
• •Address validation & mapping — addresses are standardized and geocoded via our mapping/address partners.
• •Publicly available business information — for Service Provider prospecting, we may collect business contact information from public sources.

3. How we use information

• •Provide, operate, and improve the Services (quoting, scheduling, messaging, payments, project management, reviews).
• •Power AI-assisted features (e.g. estimate help, inspection-report and floor-plan parsing, before/after renderings, support drafts). Our AI sub-processors do not use your data to train their models under their commercial terms.
• •Send transactional communications, and — where you have opted in — marketing communications (you can opt out anytime). Service Provider outreach complies with CAN-SPAM and similar laws.
• •Process payments, prevent fraud, maintain security, and keep audit/e-signature records.
• •Comply with legal obligations and enforce our terms.

4. We do not sell or share for advertising

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under California’s CCPA/CPRA). We do not use third-party ad networks, advertising identifiers, or marketing trackers.

5. How we share information

We share personal information only with:

• •Service providers/sub-processors acting on our behalf (listed below), under contract and only as needed.
• •Other users as the Service requires — e.g. a Consumer’s project details and (after a quote is accepted) full service address are shared with the awarded Service Provider; messages are shared between the parties to a project.
• •Payment and financing partners to process transactions.
• •Legal/safety — to comply with law, enforce terms, or protect rights and safety.
• •A successor in a merger, acquisition, or asset sale, subject to this policy.

Mobile information: No mobile information will be sold or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except with the messaging providers we use strictly to deliver the messages you asked for. See our SMS Terms for details on our messaging program.

6. Text messaging (SMS)

We send text messages only to people who have opted in, or who have an account with us and have not turned texts off. When you opt in we record your mobile number, the date and time, the exact consent language you were shown, and the page or screen where you gave it.

Message frequency varies and message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Our full messaging disclosure — program description, frequency, cost, opt-out, and carrier terms — is on our SMS Terms page at /sms.

7. Data you provide about other people (and prospecting)

• •Service-Provider-uploaded customer lists (“My Customers”/CRM): when a Service Provider uploads information about their own customers, the Service Provider is the controller of that data and Sesklo processes it on the Service Provider’s behalf. We assist with deletion requests routed to us.
• •Prospect data: we collect business contact information about Service Providers (and, for property managers, prospective tenants supplied by the organization) from public sources or our customers. We honor opt-out/do-not-contact requests. To be removed, contact us.
• •Inbound callers: if you call a Service Provider’s Sesklo-powered number, we may process your phone number and call details to handle and follow up on the call.

8. Your choices and rights

• •Access, correction, deletion, and portability — request via the contact details below or our account-deletion page.
• •Marketing opt-out — every marketing email/SMS includes an unsubscribe/STOP option; you can also manage preferences in your account.
• •California (CCPA/CPRA): rights to know, delete, correct, and opt out of sale/share (we do not sell or share); non-discrimination for exercising rights.
• •EEA/UK (GDPR), where applicable: rights of access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with a supervisory authority.
• •What we may retain: we may keep certain records (financial/tax records, e-signature audit trails, fraud-prevention data) as required by law or legitimate business need, even after account deletion — see below.

9. Account deletion and what we keep

You can close your account (which keeps your records on file so you can return) or permanently delete your data, from our account-deletion page. After you confirm, you have 30 days to change your mind.

When you permanently delete your data, we remove the information that identifies you (your sign-in, billing details, and standalone profile). We retain certain records where the law requires or permits — such as invoices and signed documents (tax and legal-defense obligations).

We also keep a property’s history (the work performed there, the service providers who did it, equipment and service records, layouts, and reports) in de-identified form — with your identifying information removed and you shown only as a previous owner — so a future owner of that property benefits from its history. We maintain this property information only in de-identified form and do not re-link it to you.

10. Cookies

We use strictly-necessary cookies (sign-in, session, active-persona) and capture first-touch attribution parameters at signup. We do not use advertising or cross-site tracking cookies.

11. Data retention

We retain personal information for as long as your account is active and as needed to provide the Services, then for the periods required by law or legitimate business needs (e.g. financial records, dispute/e-signature audit trails). De-identified property information is retained indefinitely.

12. Security

We protect data with encryption in transit (TLS), encryption of sensitive tokens at rest, access controls, and reliance on vetted infrastructure providers. No method of transmission or storage is 100% secure.

13. International transfers

Some providers may process data in the United States or other countries. Where required, we use appropriate safeguards.

14. Children

The Services are not directed to children under 13 (or the applicable age in your region), and we do not knowingly collect their personal information.

15. Changes to this policy

We will update this policy as needed and revise the “Last updated” date. Material changes will be communicated as required by law.

6. Sub-processors

We use the following service providers, each receiving only the data needed for its function:

Anthropic and Google (Gemini API) do not train on your data under their commercial terms. When financing is offered, our financing partner receives the details needed to underwrite a loan.

16. Contact

Questions or requests: john@sesklo.com · Sesklo LLC, PO Box 840117, Saint Augustine, FL 32080

To close or delete your account, visit our account-deletion page.