Privacy Policy

Last updated: 20 July 2026 · Version 1.1

This policy explains what personal information Seekopro collects, why, who it's shared with, and the rights you have over it. It applies to everyone who uses the Seekopro app or website — customers, business owners ("providers"), and visitors.

Who we are

Seekopro is operated by Nu-Some Pty Ltd, a company registered in South Africa. We are the "responsible party" under South Africa's Protection of Personal Information Act (POPIA) and the "data controller" under the EU General Data Protection Regulation (GDPR) for the personal information described in this policy.

Our appointed Information Officer can be reached at privacy@seekopro.com for any privacy question, complaint, or rights request.

Your data is stored and processed on Supabase, in the eu-central-2 region (Zurich, Switzerland).

What data we collect

We collect only what's needed to run the marketplace. Specifically:

Account data

• Name, surname, and email address.

Profile data

• Profile photo (optional).
• City, country, and province (free text, optional — you choose what to share).

Business data (for providers)

• Business name, description, and category.
• Location, at a precision you choose: exact address, suburb only, or address shown only after a booking is confirmed.
• Cover photo, logo, and gallery photos.
• Service details, pricing, and business hours.

Business billing data (for providers)

• Company name and VAT number, where a provider chooses to add them. This is stored separately from your public profile and is visible only to you and Seekopro staff — never to customers or other businesses.

Contact data

• Phone number. This is stored separately from the rest of your profile and is visible only to you and Seekopro staff — never shared with other users or businesses.

Booking data

• Service booked, requested date and time, booking status, amount, currency, and any note you add.

Communication data

• Messages you send through the platform. Only the two participants in a conversation can read it. We scan outgoing messages server-side to block obvious contact-information sharing (see Messaging in our Terms of Service) — this filter is a feature, not a complete guarantee.

Review data

• Star ratings and written comments, which can only be left against a completed booking.

Location data

• Your device's GPS coordinates, requested only when you use "Near me" or a location-based search. We do not store these coordinates — only the resulting distance is used to sort results.

Technical data

• A random session identifier, stored in an anonymous cookie, used to avoid double-counting profile and photo views. It carries no user ID, IP address, or device fingerprint.
• hCaptcha uses its own cookies and technical signals during account signup to tell humans from bots — see hCaptcha's own privacy policy for what it collects.
• When you accept our Terms of Service and Privacy Policy, we record your IP address and browser information alongside that acceptance, as evidence of consent.

Usage data

• An anonymised count of how many times a business profile or photo has been viewed. No personally identifying information is stored with these counts.

Future — not yet built

• We may in future add an identity-verification feature for providers (e.g. ID documents or a selfie photo). This does not exist today. If we build it, we will update this policy and tell you separately before it collects any data.

Why we collect it

Under GDPR and POPIA, every category above is collected for one of these reasons:

• Performing our contract with you — account data, booking data, and communication data, so the marketplace actually works.
• Our legitimate interests — technical data, usage data, and fraud/bot prevention, to keep the platform working safely.
• Legal obligation — retaining transaction records as required by tax and consumer-protection law.
• Your consent — location data, requested only at the moment you use a location feature.

Who we share it with

We use a small number of service providers (“sub-processors”) to run Seekopro, including Supabase, Resend, Google, hCaptcha, Vercel, and Anthropic. We do not sell your data, and we do not use advertising networks.

The full list, and what each one does, is on our sub-processors page.

• Law enforcement or courts, only when we’re legally required to disclose information.
• A prospective buyer, only if Nu-Some Pty Ltd’s business or assets are sold or transferred — we’ll notify affected users if this happens.

We do not sell your personal information to third parties, and we do not share it with advertising networks.

International transfers

Your data is processed in Switzerland (Supabase) and in the United States (Vercel, Resend, Google, hCaptcha). Where data leaves South Africa or the EU, the transfer is covered by Standard Contractual Clauses or an equivalent adequacy mechanism recognised under GDPR and POPIA.

• Anthropic PBC (United States) — AI draft suggestions.

Data retention

• While your account is active, we keep your data for as long as you keep using Seekopro.
• If you delete your account, your personal information (name, contact details, photos) is removed or anonymised. Transaction records (e.g. that a booking happened, for what amount) are kept for 5 years without your personal details attached, as required for tax and legal compliance. Anonymised aggregate statistics (e.g. total bookings platform-wide) are kept indefinitely — they contain no personal information.
• We retain message content for 12 months after the last message in a conversation, then delete it.
• If we build identity verification in future, any document or selfie submitted for it will be retained only until a decision is made, then deleted.

Your rights

Under GDPR and POPIA, you have the right to:

• Access the personal information we hold about you.
• Correct information that's inaccurate or out of date.
• Delete your data (see Deleting your account below).
• Request a copy of your data in a portable format.
• Object to certain processing of your data.
• Withdraw consent, where processing is based on consent (e.g. location access).
• Lodge a complaint with South Africa's Information Regulator, or with your local data protection supervisory authority if you're in the EU.

To exercise any of these rights, email privacy@seekopro.com, or use the account deletion feature described below.

Deleting your account

You can permanently delete your Seekopro account at any time from Account → Security → Delete my account. Deletion removes your personal information from active use immediately; some records are retained only as described in Data retention above. This action cannot be undone.

Children

Seekopro is not intended for anyone under 18. We do not knowingly collect information from children. If we learn that an account belongs to someone under 18, we will delete it.

Security

Data is encrypted in transit (TLS) and at rest. Access to data is controlled by role-based permissions and row-level security at the database level, so a user can only ever read or write the data they're authorised to. If a security incident affects your personal information, we will notify affected users and, where required, South Africa's Information Regulator, within 72 hours of discovering it (as required by POPIA).

Cookies and tracking

We use a session identifier (not a persistent tracking cookie) to avoid double-counting profile and photo views, and hCaptcha sets its own cookies during signup for bot detection. We do not use advertising cookies or cross-site tracking of any kind. See our Cookie Policy for details.

Location data

We only request your location when you actively use "Near me" or a location-based search. We never store your raw GPS coordinates — only the calculated distance to a business is used, and that isn't saved either. A business's own location is stored only at the precision its owner chooses to show publicly.

AI assistance

Seekopro offers service providers optional AI-generated draft suggestions to help them write service descriptions and reply to client messages. These drafts are always reviewed and edited by the provider before anything is saved or sent — nothing written by AI is published or sent to you automatically.

What is sent. When a provider requests a draft reply, the recent messages in that conversation are sent to Anthropic PBC to generate the suggestion. We send only the message text and whether each message came from the client or the business — never your name, email address, phone number, or account identifiers. When a provider requests a service description, only the service name, duration, and business details are sent; no client information is involved.

What we cannot remove. Message text is written by you and the provider. If you include your own name, phone number, or address in a message, that text is sent as written. We cannot reliably detect and remove personal details from free text.

Where it is processed.Anthropic processes this data in the United States. This is a cross-border transfer of personal information as defined by POPIA. Anthropic does not use content submitted through its commercial API to train its models. Content is deleted from Anthropic’s systems within 30 days, except where longer retention is required for legal or safety reasons.

We do not send photographs to any AI provider. Images uploaded by providers, including photographs of completed work, are never sent to Anthropic or any other AI service.

Changes to this policy

If we make a material change to this policy, we'll notify you by email and with an in-app notification at least 14 days before the change takes effect.