Privacy at Sesalin

01Overview

Sesalin is a multi-sector technology platform connecting consumers, businesses, shops, sellers, professionals, service providers, advertisers and partners. This policy also covers visitors without accounts and information processed through property, hospitality, clinic and other business features when used.

The legally responsible entity, its full details and a dedicated data protection contact still require confirmation. Businesses, sellers and professionals may have their own responsibilities for information received to provide their services.

Purposes, legal bases and responsibilities must be assessed for each activity and market. Validation of legal bases and controller details is pending; this page does not claim verified global compliance.

02Information we collect

Information depends on the features you use. You do not need to provide every category below simply to visit the platform.

• Accounts: name, email, phone, credentials and profile images; date of birth may be supplied for age-restricted features. Passwords are processed with a hashing algorithm, not stored as readable text.
• Businesses and publications: commercial identity, tax details, location, contacts, qualifications, descriptions, photos, products, services, properties, vehicles and other offers you choose to publish.
• Transactions and services: order details, delivery contact and address, payment references and information needed for the booking or service used.
• Professionals: names, contacts and the content of requests, proposals, appointments and conversations, including requests made without an account.
• Health information: when using pharmacy prescription uploads, the file, prescription details, authorised items and validation decision are processed in that service. They require specific protection and legal grounds; do not send them through listings or general support.
• Support: name, email, optional phone, country, category, subject, message and any attached image. When the form is active, a request may be associated with an authenticated account. Do not send passwords or full card details.
• Technical information: IP and browser information may be used for approximate location, security and measurement. Language, session and consent cookies support site operation.
• Professional profiles: measurement uses a key derived from IP and browser information that changes daily, together with events, dates and the referring domain. That collection does not store raw IP or browser details; this does not mean that infrastructure never processes them.
• Marketing, where consented and active: browsing and conversion events and, depending on the process, hashed matching identifiers, technical information and advertising identifiers.

03How we use information

We use information to create and manage accounts, authenticate access, publish offers, provide profiles and enable communication. Orders, payments, bookings and services use the information needed to perform and track the operation.

Information also supports assistance, fraud and abuse prevention, security, language and regional preferences and feature measurement. Advertising measurement uses the consent control described below.

Processing and retention may also be needed for legal obligations and disputes. Specific obligations, legal bases and any legitimate-interest assessments need to be documented for each market; consent is not assumed to be the basis for all processing.

04Public information

Private account information differs from content you choose to publish. Business pages, profiles and listings may display trading names, photos or logos, descriptions, services, products, business locations, prices, reviews and public-facing contacts.

Professional phone, WhatsApp and email details are displayed publicly only when their respective visibility controls are enabled. Contact information supplied in a private request is sent to the professional so they can reply; it does not automatically become a public contact.

Public pages may be read, indexed or copied by third parties. Removing content from Sesalin does not automatically delete copies or search results held elsewhere. Avoid publishing sensitive or third-party information without permission or another appropriate basis.

05Payments

Payment processes may use external providers. An EMIS/Multicaixa integration is present in the project; available providers and methods depend on the operation.

The platform keeps operational information such as amounts, currency, status and transaction references, as well as bank details needed to pay sellers or professionals. For bank transfers, the recipient’s banking details may be shown to the buyer to enable payment.

Storage of full card numbers by Sesalin was not identified in the reviewed payment processes. Card details are handled through the payment provider’s process; do not send them in support messages or attachments. The final list of active providers and their roles requires operational confirmation.

06Cookies and similar technologies

Session, language and preference cookies support authentication, choices and functionality. Approximate location may come from infrastructure information or, as a fallback, the ipapi.co service; precise location depends on browser permission when requested.

The manager stores the allowed categories, version and choice date for up to 180 days. Preferences, analytics and marketing are optional and start disabled. On the main site, saving language, approximate location, favourites and history depends on Preferences. Meta Pixel depends on Marketing. You can change the choice below; essential operations remain available.

Professional profile measurement uses events and a daily key without marketing cookies. Browser storage also supports site features. The complete inventory and retention periods of these mechanisms remain subject to confirmation.

Withdrawing consent prevents new advertising transmissions controlled by this mechanism. It does not retrospectively delete information already received by a provider or guarantee removal of all third-party cookies; you can also manage storage in your browser settings.

07Sharing information

Information is provided to those who need it for the operation: for example, sellers receive delivery information and professionals receive request details. These recipients may have their own privacy responsibilities.

Prescriptions submitted to a pharmacy are available through the authorised validation process to the corresponding pharmacy team. Access to and use of health information require specific rules; these are not public profile contents.

The project uses external services for hosting and databases, images, communication, payments, location and measurement. Identified integrations include Cloudinary for images, Zoho for email, EMIS/Multicaixa for payments, ipapi.co as an approximate-location fallback, Meta for consented advertising and Anthropic for the Business Success AI assistant. Sesalin must confirm the active providers, subprocessors and contracts.

With marketing consent, Meta Pixel and server conversion processes may send events, amounts, currency and hashed matching details such as email or phone, as well as available technical information. A hash used for matching is not equivalent to anonymisation: a provider may connect it to a person.

The pharmacy advertising flow restricts commercial detail to value, currency and item count, excluding product identifiers, names and categories. This should not be interpreted as absence of other technical or matching information in the request.

In Business Success, the management panel for businesses, a business owner can turn on an AI assistant. Only with that consent, and while Sesalin keeps the feature active, the questions asked by that business's team and the data needed to answer them are sent to Anthropic, the provider of the AI model, to generate each answer. This data may include contacts and deals recorded by the business (name, email, phone), conversations and messages exchanged with customers on Sesalin, and summaries of the business's profile, reviews and activity. The assistant only consults what the person asking can see, does not send messages to anyone and does not change data.

Information may be provided to authorities or others where an applicable legal duty exists. The commercial statement about selling data and the legal classification of advertising disclosures still require confirmation; this policy makes no unverified promise that all sales or sharing are absent.

08International transfers

Infrastructure and providers may process or store information outside your country of residence. Locations depend on configuration and activated services.

Anthropic, the provider of the Business Success AI assistant, is a company based in the United States. When a business turns on the assistant, the data sent to generate answers may be processed outside the country where you live.

Processing countries, provider agreements and applicable legal transfer mechanisms still require confirmation. We do not claim specific contractual clauses, certifications or international safeguards without verification.

Contact the team for information about processing relevant to your service. The need for a transfer does not remove applicable data protection obligations.

09Retention and deletion

Retention should consider service delivery, account maintenance, legal duties, disputes and fraud prevention. Not every category currently has an automatic retention period, so an operational retention schedule still needs validation.

Professional profile visit events have a 400-day expiry rule and are removed by the database cleanup mechanism. Contact form protection counters have a technical expiry of approximately two hours and use protected identifiers rather than raw IP or email in that collection.

Contact requests and several professional relationship records do not have a global automatic expiry configured. Identity removal is supported in professional histories, but message text may still contain personal information and require further review.

Conversations with the Business Success AI assistant are not stored by Sesalin: they stay only in the browser tab where they take place. The business's activity log records who asked a question, when, and which lookups the assistant used, without the text of the question or the answer, and expires after one year. The daily count of questions per business expires after three days. Retention of the data by Anthropic follows that provider's terms, which still need to be confirmed.

You may request deletion or de-identification where applicable, subject to others’ rights and retention duties. Backup periods and deletion by providers also require confirmation; we do not promise immediate deletion of every copy.

For prescriptions, country-specific legal retention, file deletion and rules for reopening records still require specific validation. A retention field alone does not demonstrate deletion of all copies.

10How we protect your information

The project includes password hashing, session validation, access controls and input validation. Contact requests have abuse protection, and attached images are re-encoded and stored without public URLs.

These measures aim to reduce unauthorised access, loss, alteration, improper disclosure and abuse. Protection also depends on infrastructure configuration, permissions and operational procedures requiring continued oversight.

No system is invulnerable. Incidents must be assessed and communicated where and when applicable law requires. Use the contact channel to report a concern without sending unnecessary sensitive information.

11Your information, your controls

Depending on applicable law and your situation, rights may include access, correction, updating, deletion, portability, objection, restriction and withdrawal of consent. You may also have the right to complain to a competent authority.

Available account and profile tools let you update some details. The controls below direct access, correction and deletion requests to real support; they do not automatically delete an account or guarantee deletion of all information.

The team may need proportionate identity verification and must consider third-party information and legal duties before responding. Do not send identity documents unless needed and requested through a confirmed channel. Procedures and response times must be formalised for the applicable markets.

Requests are directed to support; these buttons do not perform deletion.

12Children and minors

The global minimum age and parental authorisation rules still require product and legal decisions. This version does not establish a universal age threshold without that confirmation.

Optional birth details and controls associated with particular age-restricted products exist. A self-declared date is not documentary age verification.

If you suspect inappropriate collection of a child’s information, contact the team for review and appropriate action. Avoid publishing minors’ information in public areas.

13Marketing and communications

Account, security, transaction and support communications differ from promotional messages. The former may be needed to manage your relationship and requests.

For promotional messages, use any cancellation mechanism provided or contact the team to ask that they stop. A single platform-wide promotional preference centre has not been confirmed; cookie controls do not replace email subscription management.

Meta campaign measurement depends on marketing consent in integrated features. You can change it below. Withdrawal does not affect the lawfulness of earlier processing that had a valid basis.

14Policy changes

This policy may change as features, providers, practices or legal requirements evolve. Significant changes should be communicated appropriately, with updated controls or consent where needed.

The displayed date identifies this text’s last update. Outstanding items are not guarantees of future implementation and do not replace confirmation of processing before final approval.

Last updated: October 11, 2026

15Questions about privacy?

If you have questions about this Privacy Policy or how Sesalin handles personal information, please contact us.

Identify the service and the type of request without including passwords or full payment card details. Until a dedicated legal or data protection contact is confirmed, use the official support channel below for routing.