Privacy policy
Privacy policy
What SeatStow stores, where it lives, who can reach it, and how to have it corrected or removed.
Last updated 22 September 2026
Two kinds of people in this policy
The first is the person who signs up and runs a study centre on SeatStow. We hold their account and decide how it is handled.
The second is the members of that centre, whose names, contact numbers and payments the centre enters. Those records belong to the centre. It decides what goes in, what is corrected and what is deleted; we store and process them on its instruction. If you are a member and want your records changed, ask the centre that admitted you.
This matters because it decides who you should ask for what. We cannot hand out or alter a centre's member records on a stranger's request.
What we collect
To create an account: an email address and a password. The password is handled by our infrastructure provider and stored hashed; we never see it. Signing in can also be done with a one-time code sent to that email instead of a password.
To set up a workspace: the organisation and branch name, and optionally the owner's name, contact number and city.
Whatever the centre enters while working: member names, contact numbers, email addresses, gender, seat and shift, admission and expiry dates, packages, bills, payments, attendance, follow-up notes, expenses, staff details, and optionally a photo, a document or a fingerprint or RFID number used to identify a member at the door.
We do not run advertising, we do not sell anything to anyone, and there is no analytics or tracking code in the product. We do not ask for or store card or bank details; payments recorded in the app are notes about money the centre collected itself.
Where it is stored
Data sits in Appwrite Cloud, in its Singapore region. Appwrite is our infrastructure provider and processes data on our behalf. It is the only third party that receives it.
Traffic runs over HTTPS. Files uploaded to the product are stored encrypted, and are scanned for malware on upload.
Two features hand information to an app on your own device when you choose to use them. Sending a bill or a link over WhatsApp opens WhatsApp with the message ready, and the email buttons open your mail app. Nothing is sent until you send it, and it travels through those services, not ours.
Who can see it
Records carry permissions tied to the account that created them, applied by the database rather than by the screen, so one workspace cannot read another's rows even by asking the database directly. We check this: an automated audit confirms that an unauthenticated request receives none of the stored rows.
On our side, access is limited to the people who need it to operate and support the product. We look at a workspace's contents only when it is needed to fix a problem, usually because you asked us to.
How long we keep it
For as long as the workspace is in use. Business records like bills and attendance are worth keeping, and centres often need them for past years.
Deleting a client moves the record to a Deleted clients area rather than erasing it, so an accidental deletion can be undone. It stays there until removed for good.
Ask us to close a workspace and we will delete its data. Copies may survive briefly in routine backups before they age out.
Your rights
You can ask for a copy of your data, ask for something inaccurate to be corrected, and ask for it to be deleted. You can withdraw consent and stop using the product at any time.
Write to hello@seatstow.tech from the address your account uses, so we can confirm who you are. That address is also our grievance channel: if you are unhappy with how we have handled a request, say so there and we will look at it again.
Children and minors
Study centres admit school and college students, so some members are minors. Their records are entered by the centre, not by them. The centre is responsible for having whatever consent the law requires from a parent or guardian before entering a minor's details, and for keeping that consent on record.
SeatStow is not meant to be used directly by children. Accounts are for the people running a centre.
Changes
When this policy changes we will update the date at the top. If a change materially affects what happens to your data, we will tell account holders by email rather than leave it to be noticed.