PO Genie - Privacy Policy

1. Who we are

Sesseto Ltd is the data controller for the personal data described in this policy. You can contact us at support@sesseto.com.

2. What data we process

Account data: your name, email address and organisation membership.

Organisation data: the company details you enter in settings, such as company name, address, contact details, company and VAT numbers, logo and footer text.

Business data: purchase orders, quotes, and supplier and customer details imported from Sage or created in the App.

Sage connection data: the access tokens that keep your organisation’s Sage connection working.

3. Why we process it

We process this data to provide the App: to run your account, keep your Sage connection working, generate purchase orders and provide support.

Our lawful bases are performance of our contract with you, our legitimate interests in operating and securing the App, and consent where it is required.

4. Data isolation and security

Each organisation’s data is isolated at the database level. Access is restricted to the users of your organisation and to Sesseto personnel where needed to run and support the App.

Sage tokens are stored server-side and are not exposed to other organisations.

5. Subprocessors

The App is hosted on the Base44 platform, which acts as our processor under our instructions. Data retrieved from Sage is also governed by your own agreement with Sage.

Our subprocessors operate under written data-processing terms.

6. Data retention

We keep your data while your subscription is active. When your account closes, we delete your data within 30 days unless you ask us to delete it sooner or the law requires us to keep it longer.

You can request an export or deletion at any time by contacting support@sesseto.com.

7. Your rights

Under the UK GDPR you have the right to access, correct, erase, restrict or object to our processing of your personal data, and the right to data portability.

You also have the right to complain to the Information Commissioner\u2019s Office (ico.org.uk).

8. International transfers

We use reputable cloud platforms to host the App. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

9. Changes

We may update this policy from time to time. We will notify you in advance of any material changes.

10. Contact

Sesseto Ltd, Hillsboro, Clodgy View, St Ives, Cornwall TR26 1JG, United Kingdom.

Email: support@sesseto.com

See also our Terms and Conditions and our Data Processing Agreement.