What we store
Account information (name, email), business configuration (locations, services, hours), and the operational records a business creates through normal use (customers, appointments, work, and the communications sent about them).
Who can see it
A business's data is isolated from every other business by database-level access control. Within a business, staff see only what their role and location scope permit.
Customer-facing links
Booking, tracking, and management links use randomly generated, hashed tokens rather than guessable identifiers.
Text messages and phone numbers
A customer gives their phone number to a business using SET, and that business sends them text updates about their own service or appointment. Consent to those updates is given by the customer on the business's booking page, and it is never assumed on their behalf.
Mobile information and text-message consent are not sold, and are not shared with third parties or affiliates for their own marketing purposes. They are shared only with the messaging provider that carries the message.
Consent to service and appointment updates is separate from any consent to marketing: agreeing to one is not agreeing to the other. Replying STOP to a message ends texts to that number, and replying HELP returns contact details for the business.
Data export and deletion
You can delete your own SET account from inside the product, at any time: on the web under Business → Account → Delete your account, and in the app under More → Account → Delete your account. Your sign-in and personal profile are deleted and your memberships are removed.
A business you worked in continues while other people remain in it — its work, customers and history belong to the business rather than to you, and are not erased when you go. If you are the last person in a business, that business is archived: the records are retained, but nobody can sign in to it. If you are the only owner of a business other people still work in, deletion is refused until another owner exists, so that nobody is left running a business they cannot administer.
For an export of a business's data, contact us directly during the pilot phase.