Seneschal handles your email and your clients' contact details. That is sensitive material and this policy says plainly what we do with it, what we never do with it, and how you get it back or get rid of it.
Seneschal is sold to licensed real estate brokers in Washington State and is operated from Washington. Your data is stored in the United States.
Google user data. If your mailbox is Gmail, Seneschal's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: your Gmail, calendar, contacts and Google Drive data is used only to provide the features described on this page, it is never sold, never used for advertising, and never used to train AI models. No person at Seneschal reads your mail, except where you ask us to for support, where security or the law requires it, or where the data is aggregated and anonymised. You can withdraw this access at any time, either in Settings or from your Google account.
We do not use advertising trackers and we do not run third-party analytics that follow you around the web.
The public website. The website at seneschalhq.com counts page views using Cloudflare Web Analytics. It sets no cookies, does not fingerprint your browser, and does not follow you to other websites. What it records is the page you looked at, the site you came from, the country and the general type of device. There is no advertising tracking anywhere on the site and never will be.
Only what is needed to run Seneschal for you: build your briefing, track your deals and deadlines, draft written material you asked for, file your email, publish posts you approve, support you when you ask, and bill you.
What we never do. We do not sell your data. We do not sell or share your clients' contact details. We do not market to your clients. We do not use your data to build anything for a competitor, and we do not use your client data to train AI models for other customers.
Some features send relevant content to an AI provider to generate a draft, a summary or a help answer. That means the specific text needed for that task, not your whole mailbox. It is sent under a business agreement that prohibits the provider from using it to train their general models. Generated output can be wrong, which is why nothing is sent or published without your review.
| Who | What they get | Why |
|---|---|---|
| Microsoft | Your sign-in, and the mail, calendar, contacts and OneDrive access you granted | Authentication, mailbox access and phone backups |
| Where your mailbox is Gmail: your mail, and read-only access to your calendar, your contacts and the phone backup files in your Google Drive | Mailbox, calendar, contacts and phone backups | |
| Supabase | Your email address, a hash of your password, and your two-factor setup | Sign-in and account security |
| Railway | Everything stored, encrypted in transit and at rest | Hosting and the database |
| Anthropic | The specific text needed for a drafting, summarising or help request | Drafts, summaries, help answers |
| fal.ai | The prompt and any photo you chose | Listing images and video |
| ElevenLabs | The script you approved | Voiceover on videos you generate |
| Shotstack | The clips and captions for a video you asked to render | Video rendering |
| Canva | The post you chose to open in Canva | Editing a post you are publishing |
| Meta (Facebook, Instagram) | Only the posts you choose to publish | Publishing where you asked |
| Stripe | Your name, billing address, and the card details you enter on their page | Taking payment |
| Pexels | A stock photo search term. No personal data | Stock photography |
| Perplexity | A market data question. No personal data | Market figures in generated copy |
| Netlify and Cloudflare | The public website only. No account data reaches them | The website and its request form |
All of these are in the United States. Beyond them we disclose data only where the law requires it, or to establish or defend a legal claim. If a business transfer ever happened, you would be told before your data moved and the buyer would be bound by this policy.
Adding to this list. That table is the whole list, not an example of it. If we take on a new company that will handle your data or your clients' data, we will email you at least thirty days before it starts, saying who they are and what they would receive. You can end your subscription before that date if you would rather not have them involved. Replacing one of these with another company of the same kind counts, and so does giving an existing one access to something new. Swapping a vendor that never touches your data, such as the stock photo search, does not.
Every record is scoped to the account that created it. Agents sharing a brokerage plan share a bill, not a database. No user of Seneschal can see another user's contacts, deals or email. The one exception is a deal you choose to co-list, and it works exactly as set out below. Otherwise no one ever sees another user's deal.
You can name another agent, at any brokerage, as the co-listing agent on one of your deals.
You can ask us at any time to:
Ask through Help & Support. We respond within thirty days, usually much sooner. There is no charge, and asking never affects your service.
Contacts you import are your clients, not ours. You are responsible for having a proper basis to hold their information and for your own obligations to them. We process it on your behalf and on your instructions. If a client of yours asks you to delete their record, you can do that yourself, and we will help if you need it.
Data is encrypted in transit and at rest. You sign in through Microsoft or with an email address and a password. A Microsoft password is never entered into Seneschal, and a Gmail mailbox is connected on Google's own page, so a Google password never is either. A password you set here is passed through to Supabase, our authentication provider, which keeps only a hash of it; Seneschal never stores it. Card numbers never touch our systems. Access to production data is limited to the people who need it to operate the service.
No system is perfectly secure. If a breach affects your data we will tell you as soon as we reasonably can, and in any case no later than thirty days after we discover it, which is what Washington law requires of us. We will say what happened, what was involved, what we are doing about it, and what you may want to do. If the breach affects your clients rather than you, we will tell you what you need in order to meet your own obligations to them.
Thirty days is the outside limit, not the plan. A breach we can describe on the day is one we will tell you about on the day.
Seneschal is a professional tool for licensed brokers and is not intended for anyone under eighteen.
If we change this policy materially we will email you before the change takes effect. The version marker at the top of this page tells you which version you are reading.
Privacy questions and requests go through Help & Support, under Account and data. Put anything that needs a record in writing there.