Who we are
SeeYaThen is a booking and client-record service for solo businesses in Australia. This policy explains how SeeYaThen ("we", "us") handles personal information under the Privacy Act 1988 and the Australian Privacy Principles. SeeYaThen is operated by Point7 Studio (ABN 86 632 193 650). Contact us at support@seeyathen.app.
Businesses and their clients
Businesses ("operators") use the SeeYaThen app to run their bookings. Their clients use a booking page to book, change or cancel an appointment. For client information, the business decides what it collects and why, and we hold and process it for the business so it can use SeeYaThen. If you are a client, you can contact the business you booked with or contact us.
What we collect
Operators: email address and password (our sign-in provider stores the password only in hashed form), business name, booking page address, services, prices, hours and policies, plan and billing status, the phone's push notification token and, if the operator connects it, a Google Calendar authorisation.
Clients: name, mobile number, email address if given, notes you write to the business, your bookings and their history, payment, refund and no-show fee amounts, prepaid pack balances, and the policies and payment terms you accept.
Records a business adds: notes about the client and, only with the client's agreement, before and after photos. A photo can show health information, such as a skin condition, which is sensitive information.
Technical: a one-way hash of the IP address, used to limit abuse, and cookies needed to sign in on the website. We do not use advertising or analytics cookies.
We collect this information when an operator signs up and uses the app, when a client books or pays on a booking page, from Stripe about payments, and from Google Calendar if it is connected. Full card numbers and security codes are entered directly with Stripe and never reach our servers; we receive payment references and limited card details, such as the card brand and last four digits, from Stripe.
How we use it
To take and manage bookings; to show a business its calendar and client records; to send booking confirmations, reminders and verification codes by email, SMS or push notification; to process deposits, payments, refunds and prepaid packs through Stripe; to keep a business's Google Calendar in step if it is connected; to bill subscriptions; and to prevent abuse and keep the service secure. We do not sell personal information and do not use client information for our own marketing.
Messages
Booking confirmations and reminders relate to a booking made by you or entered by the business, and name the business. Verification codes for using a prepaid pack are sent by SeeYaThen. Booking notifications on the operator's phone do not show the client's name.
Who we share it with
Only the service providers we use to run SeeYaThen: Supabase (database, sign-in and file storage), Vercel (website hosting), Stripe (payments and subscriptions; when you pay a business, Stripe processes the payment for that business), Google (Calendar, if the business connects it, and our email sending), Expo, Google Firebase and Apple (push notifications) and 160.com.au (SMS). For Google Calendar, we read the business's busy times and add its bookings to a separate SeeYaThen calendar without client names or contact details. We may also disclose information where the law requires or allows it.
Overseas disclosure
Our database and file storage (Supabase) are hosted in Sydney, Australia. Stripe, Google, Vercel, Expo, Firebase and Apple store or process information in the United States, and Stripe and Google may also use other countries where they operate, such as Ireland. We use providers that commit by contract to protect personal information.
Storage, security and deletion
Information is protected by access controls and encrypted connections. Photos are kept in private cloud storage. The app downloads them through short-lived links and keeps copies on the operator's phone that are cleared on sign-out or account deletion. A client can withdraw photo agreement through the business at any time; withdrawing does not delete existing photos automatically, so ask the business to delete them. When a business deletes its account, its client names, contact details, notes and photos are deleted. We keep booking and payment records with names and contact details removed, together with the payment and subscription references we need for financial records and to cancel a subscription. Stripe keeps its own records under its privacy policy.
Access, correction and complaints
You can ask for access to, correction of or deletion of your personal information by emailing support@seeyathen.app or by contacting the business. We look into each request or complaint and reply within 30 days, explaining what we found and what we will do. If you are not satisfied with our response to a privacy complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Changes
We will publish any change here with a new date and, before a significant change applies, tell operators in the app or by email.