Legal
SeatTime Privacy Policy
Effective date: October 29, 2026
1. Who we are and what this policy covers
This policy applies to SeatTime ("we," "us," or "our"). It explains how we handle personal information when you visit our website, try the free demo, create an account, use SeatTime, make a payment, or contact us. Send privacy questions and requests to privacy@getmoreseattime.com.
SeatTime is currently offered only in the United States. It is a deliberate-practice simulator for adults in graduate training or post-graduate practice in counseling, social work, marriage and family therapy, and related fields. A clip is a short practice scenario; a rep is your attempt at that scenario. Clients are fictional, and the coach is automated. SeatTime is not therapy, clinical advice, supervision, or a replacement for practicum or field hours. Using it creates no clinical, supervisory, or credit-bearing relationship.
2. Keep real-client material out of SeatTime
Use only fictional material in practice. Never enter real client, patient, or student identifiers, or material from an actual session. This includes names, contact details, record numbers, recordings, transcripts, case notes, and descriptions that could identify someone from their circumstances. Changing a name, removing obvious identifiers, or obtaining someone’s permission does not make real-session material acceptable in SeatTime.
Provide your own email and optional name or program only in the designated account fields. Do not put your own sensitive personal information into a rep or use SeatTime to seek help for your own health concerns.
SeatTime uses automated screening intended to flag prohibited material. Screening can miss information or flag harmless text. Screening is not a guarantee of confidentiality, successful de-identification, or prevention of transmission to a service provider. You remain responsible for what you submit. Submitting prohibited material violates our Terms of Service; it does not excuse us from our own legal obligations.
If you submit real-person material by mistake, stop and request deletion of the affected rep by contacting privacy@getmoreseattime.com without repeating the sensitive details. Follow your program’s or placement site’s incident-reporting procedures. Deletion cannot undo a disclosure that has already occurred.
Reps are records of fictional exercises, not medical records documenting care provided to a real person. SeatTime is not a patient portal or a system for storing protected health information (PHI). Do not treat it as a HIPAA-compliant place to put PHI. Information submitted improperly does not lose any legal protection merely because these rules prohibit it.
3. Information we collect and why
We collect information you provide, information generated during your use of SeatTime, and information supplied by the services you use to sign in or pay.
| Category | Information and source | Main purposes |
|---|---|---|
| Account and sign-in information | Your email; name, program, training stage, modalities, and preferences you provide; your confirmation of the practice terms at signup; account identifiers and authentication records for email magic links or Google sign-in. | Create and secure your account, sign you in, and communicate about the service. |
| Practice information | The messages in your reps, fictional-client replies, automated coach notes and codes, hints, ratings, and associated scenario and attempt records. | Run the simulation, provide feedback, and let you revisit your practice. Coach codes are labels used in feedback, not a clinical assessment of you. |
| Free demo information | If you try the demo without an account: your demo rep (the same practice information as above), stored under a random identifier kept in a cookie on your browser, plus the program type and campaign labels from the link you followed. | Run the demo and show you its feedback. If you create an account or sign in on the same browser while that cookie lasts, your demo reps move into your account. |
| Usage and acquisition information | Events such as visits, sign-ups, clip starts, rep completions, and checkout steps; campaign labels in landing links, such as UTM parameters. When you arrive through one of our ads, this also includes the ad labels and the ad platform’s click identifier from that link, kept first-touch for 30 days and attached to your account if you sign up. On the first visit we also keep the referring site’s hostname and path (not the query string) and the path of the first page you opened. Homepage visits record a coarse device type (phone, tablet, or computer) from the browser’s user agent. | Understand how people find and use SeatTime, troubleshoot problems, improve the product and sign-up process, and measure which ads lead to sign-ups and subscriptions (Section 4). |
| Payment information | Stripe customer and checkout-session identifiers, plus the subscription and transaction information needed to manage billing. | Process subscriptions, cancellations, refunds, accounting, and payment disputes. |
| Inquiry and product feedback information | Faculty-request details such as name, institution, role, email, and message; feedback submitted after checkout or about the product. | Respond to inquiries and improve the service. |
| Support information | Your email, messages, and other information you choose to send when requesting help or exercising privacy rights. | Respond to you, resolve issues, and document requests. Do not send real-client material to support. |
| Technical and security records | Request and error records, authentication events, timestamps, account or session identifiers, and records of AI usage and cost. Our hosting and analytics providers also receive IP addresses and browser/device information. For rate limiting we store only a one-way keyed hash of your IP address, and only briefly. | Operate, secure, and troubleshoot the service, and enforce usage limits. |
Stripe collects payment details directly through its payment service. SeatTime does not store full payment-card numbers. When you choose Google sign-in, we request basic identity, profile, and email permissions (openid, profile, and email). We receive your Google account identifier, email and verification status, name, and profile image when supplied. We store account/profile information and the authentication tokens and related records supplied for sign-in. This sign-in integration does not request access to Gmail messages or Google Drive files.
When you arrive through one of our Reddit ads, we may send Reddit a matching page-visit notice through its server-side Conversions API. When you create an account or a paid subscription is confirmed, we may send Reddit a matching sign-up or $15 subscription-purchase notice only if that account arrived through a Reddit ad (a Reddit click identifier, or a link whose source is Reddit), and only after our payment provider confirms a purchase. Notices carry technical details such as IP address and browser type; sign-up and purchase notices also carry a hashed (SHA-256) version of your email and the Reddit click identifier when we have it. This sharing is server-to-server — SeatTime loads no Reddit pixel or other advertising script in your browser (Section 5) — and visitors whose browsers signal Global Privacy Control are excluded entirely.
We also use the information necessary to enforce our Terms, prevent misuse, comply with legal obligations, and handle disputes. Product-usage analysis does not make account-linked events anonymous. Fictional subject matter does not make a student’s transcript or coach feedback nonpersonal information.
AI processing and model training
Fictional-client replies, hints, and automated coach feedback are generated by third-party AI models. We currently use OpenAI’s API and Anthropic’s Claude API. We may route any of these requests to OpenAI, Anthropic (Claude API), or xAI (Grok API), for example to change models, manage cost or reliability, or keep practice running when a provider is unavailable, so any of these three providers may process your practice content. We send requests directly to the provider. Each request contains the scenario instructions, the relevant practice messages, and your program type (such as counseling or social work). We do not send your name, email address, or account identifier with these requests.
We do not use practice transcripts to train or fine-tune models, and we have not opted in to any provider program that lets the provider train on our API data. Generating a response is different from training a model. Provider safety review, storage, and retention depend on the provider’s terms and our account settings; Section 6 summarizes each provider’s published API retention policy. Do not assume that practice content is anonymous, immediately erased, or never accessible to authorized provider personnel.
4. Who receives information
We use the following services to operate SeatTime. They receive information needed for the functions described here, subject to applicable agreements and law.
| Service | Recipient | Information involved |
|---|---|---|
| Fictional-client responses, hints, and coaching | OpenAI and Anthropic (currently used); xAI (we may also route requests here) | Scenario instructions, relevant practice messages, your program type, and generated replies or coach feedback. |
| Payments | Stripe | Checkout and payment information, billing identifiers, and subscription/refund information. |
| Sign-in with Google | Authentication exchanges when you choose Google sign-in. | |
| Transactional email | Resend | Email address, magic links, and the contents and delivery records of service messages. |
| Application hosting | Vercel | Application data and operational records needed to host the service, including request logs with IP addresses. |
| Database storage | Neon (PostgreSQL) | Account, practice, billing-reference, and operational records stored by SeatTime. |
| Site analytics | Vercel Web Analytics | Page views with the page address (campaign labels kept, other query details removed), the referring site, country, and device and browser type. No cookies; Vercel identifies a visit with a daily-rotating hash, not an account identifier, name, or email. Not sent when your browser signals GPC or Do Not Track (Section 5). |
| Product analytics | PostHog | Page views and product events with a random browser-session identifier, plus IP address and browser details. Never your account identifier, name, or email. Not sent when your browser signals GPC or Do Not Track (Section 5). |
| Advertising measurement | Page-visit, sign-up, and subscription-purchase notices only when you arrived through a Reddit ad. Never when your browser signals Global Privacy Control. Notices carry technical details such as IP address and browser type; sign-up and purchase notices also include a hashed (SHA-256) email and, when we have it, the Reddit click identifier and ad labels. Sent server-to-server; no Reddit script runs in your browser. |
Google and Stripe also have their own privacy notices for activities they perform independently, such as operating their accounts or meeting their own legal obligations. This policy explains SeatTime’s handling of information; it does not replace those notices.
Access by the operator and authorized personnel is limited to what is needed to operate and secure SeatTime, investigate a problem or reported violation, respond to support, or meet legal obligations. We do not promise that no human can ever access a rep.
We do not provide your reps or coach feedback to a school, instructor, supervisor, or employer for review or evaluation. You choose whether to export and share them yourself. Using a school email or entering a program name does not give that organization access. Once you share an export, the recipient controls its copy. Legally required disclosures remain subject to the next paragraph.
We may disclose information when reasonably necessary to comply with a legal obligation or valid legal process, address fraud or security threats, or protect lawful rights and safety. In a business transfer, relevant information may be transferred with the service, subject to applicable law and the protections in this policy; a transfer does not authorize unrelated new uses without any required notice or consent.
We do not sell personal information. We share hashed identifiers and conversion notices with Reddit to measure our own ads, which may count as “sharing” for cross-context behavioral advertising under California law. We honor Global Privacy Control as an opt-out of that sharing, and you can also opt out any time by emailing hello@getmoreseattime.com. We do not use personal information for targeted advertising across other companies’ services. Necessary disclosures to service providers are described above.
5. Cookies, browser storage, and analytics
SeatTime sets these cookies on its own domain:
- Sign-in cookies (set by our sign-in system): your session, protection against cross-site request forgery, where to return after sign-in, and, for Google sign-in, short-lived security values for the sign-in exchange.
- st_anon (30 days): a random identifier for this browser, so visits before you sign up can be tied together, and so you can see free demo feedback and keep those reps if you sign up. It is set on the first page you open, including when your browser signals Global Privacy Control.
- st_fictional (30 days): records that you confirmed the practice terms while signing up, so your account can be created with that confirmation.
- st_demo (30 days): the program type and campaign labels from the link that brought you to the demo, used to tailor the demo and to understand which campaigns lead to sign-ups.
- st_attrib (30 days): the UTM labels and Reddit click identifier from the ad link you arrived through (first visit only), used to attribute sign-ups and subscription purchases to ads. Not set when your browser signals Global Privacy Control.
- st_ref (30 days): the hostname and path of the site that linked you here, and the path of the first SeatTime page you opened. The query string is not stored. Set on the first visit, including when your browser signals Global Privacy Control. Kept in our database and not sent to Reddit.
- st_invite (30 days): the code from a classmate’s invite link you opened, so an account you start creating in this browser is linked to that invite, even if you finish signing in elsewhere. It never names either of you.
- st_invite_own (1 year): set when you get or copy your own invite link, so an account created in the same browser is not counted as an invite.
We also keep campaign labels in your browser’s session storage for the length of a visit, and a service worker keeps a cache of site files so pages load faster. Blocking cookies prevents sign-in and the demo from working.
Site analytics (Vercel Web Analytics) counts page views without cookies or other browser storage, and isn’t loaded when your browser signals Global Privacy Control or Do Not Track. Product analytics (PostHog) also runs without them: its identifier lives only in page memory and resets when you reload. We don’t use session recording, heatmaps, or surveys, and we don’t place advertising pixels on SeatTime. Ad measurement with Reddit happens server-to-server as described in Sections 3–4. We also record product events in our own database to run and improve the service; campaign labels and usage events there may be associated with your account, so “cookie-free” does not mean anonymous.
Global Privacy Control and Do Not Track. If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we don’t load PostHog in your browser and our servers don’t send your activity to PostHog. We also skip Reddit ad-measurement sharing for GPC visitors: the ad-attribution cookie is not set and no conversion notices are sent for them. We still record events in our own database, including the random browser id and the referring site’s hostname and path. You can additionally opt out of Reddit ad measurement any time by emailing hello@getmoreseattime.com.
No third party embedded in SeatTime collects your activity across other websites. We don’t use advertising pixels, tag managers, or embedded third-party frames, and our fonts are served from our own domain. When you go to Stripe to pay or to Google to sign in, you are on their sites, and their own cookies and privacy notices apply there.
6. Retention and deletion
We determine retention periods based on the type and sensitivity of the information, the purposes described in this policy, our relationship with you, operational needs, and applicable legal requirements. We do not apply a single fixed retention period to all information or automatically delete all records solely because an account is inactive or a subscription is canceled. Section 7 explains what deleting your account removes.
| Records | Retention criteria |
|---|---|
| Account and practice records | Retained to provide your account, saved practice, progress, and support until you delete your account or ask us to delete them. Cancellation alone does not delete your practice history. |
| Free demo reps | Kept under the demo identifier so you can return to their feedback. Demo reps you don’t move into an account are retained like usage records. |
| Usage, acquisition, technical, and security records | Retained as reasonably needed to analyze usage, improve the service, troubleshoot problems, protect systems, enforce usage limits, and investigate misuse. |
| Billing, consent, inquiry, support, and legal records | Retained as reasonably needed for accounting, payment disputes, requests, evidence of consent, enforcement of agreements, and legal obligations or claims. |
| Deleted information and backups | Our database provider keeps a limited restore history. Information deleted from SeatTime can remain in that history until it expires. Lawful retention exceptions may also apply. |
| AI-provider copies | Governed by the provider’s policies and our account settings, summarized below. Deleting data in SeatTime does not itself erase copies held by an AI provider. |
We may retain information after account closure where reasonably necessary for the purposes above or otherwise required or permitted by applicable law. When information is no longer needed, we delete or de-identify it. We may retain aggregated or de-identified information that no longer identifies you for longer, subject to applicable law. These criteria do not permit unrelated new uses of identifiable practice transcripts or override applicable deletion rights or our no-training commitment.
AI-provider retention
The following summarizes published API policies checked on September 19, 2026. We have no zero-data-retention arrangement with any of these providers, so their standard API policies apply.
| Provider | Published API retention policy |
|---|---|
| OpenAI | Abuse-monitoring logs can contain prompts and responses and are normally retained for up to 30 days, with legal and harm-prevention exceptions. We use the Chat Completions API without OpenAI’s optional completion storage. See OpenAI API data controls. |
| Anthropic | Standard API inputs and outputs are deleted within 30 days, with exceptions for stored features, agreements, legal requirements, and policy enforcement. Flagged inputs/outputs may be retained up to 2 years and safety classification scores up to 7 years; submitted feedback data may be kept for 5 years. See Anthropic commercial retention and API retention controls. |
| xAI | Generally deletes content within 30 days after the interaction or session. Different periods may apply through agreements, documentation, account settings, or legal, safety, security, moderation, and abuse-investigation exceptions. See xAI Enterprise Terms, Section 3. |
We cannot delete copies you export and give to someone else. Records retained for a legal or security exception remain limited to that purpose.
7. Your choices and privacy rights
You can download your account data under Settings → Your data. To request deletion of an individual rep, or to request access to, a copy of, correction of, or deletion of your personal information, email privacy@getmoreseattime.com. Do not include sensitive practice content in your request.
Deleting your account. You can delete your account under Settings → Your data. Deletion is immediate. It cancels any paid subscription at once, without a refund for the rest of the period, and removes:
- your account, profile, sign-in records, and subscription record;
- your reps, transcripts, coach feedback, hints, ratings, and progress;
- usage events linked to your account or to your browser’s demo identifier, demo reps from that browser you never moved into your account, and ad-measurement log entries tied to your account;
- pre-order, pre-order feedback, and faculty-request records under your account email.
We keep records of AI usage and cost (model, amount of text processed, cost, and time) with the link to you removed, because they back our spending limits. Stripe keeps its own customer and payment records under its legal obligations. Copies in our database provider’s restore history and copies held by AI providers expire on the schedules in Section 6.
If you only want to stop paying, cancel instead: Settings → Billing → Manage in Stripe stops renewal and keeps your practice history. If you can’t reach that page, email hello@getmoreseattime.com. The Terms explain refunds and their effect on paid access.
Wherever you live, you can ask us to tell you what personal information we hold about you, its sources, purposes, and recipients; give you a copy; correct it; or delete it. Some state privacy laws give residents further rights, such as opting out of the sale of personal information or targeted advertising. We don’t sell personal information or use it for targeted advertising, and we don’t use sensitive information to infer your health or other sensitive characteristics.
We will not discriminate against you for exercising privacy rights. Deleting information needed for an account can prevent us from continuing to provide that account; it is not a penalty.
We may verify your identity or an authorized agent’s authority before providing account information or carrying out a deletion. We request only information reasonably needed for verification.
We respond within 45 days. If we need more time, we will tell you why. If we deny a request, we will explain the reason. You may appeal by emailing privacy@getmoreseattime.com with “Privacy appeal” in the subject, and you may contact your state’s privacy regulator or attorney general.
Service emails include sign-in, billing, security, and support messages. If we send optional marketing emails, you can unsubscribe using their link or by emailing us. Opting out of marketing does not stop necessary service messages.
8. Security and processing locations
We use reasonable administrative and technical safeguards appropriate to the information we handle, including limits on access and encrypted connections to our database. No online service can guarantee complete security. Protect your email account, your Google account if you use Google sign-in, and your sign-in links; report suspected unauthorized access to privacy@getmoreseattime.com.
SeatTime runs in the United States: the application on Vercel’s Cleveland, Ohio region and the database with Neon in Amazon Web Services’ US East (Ohio) region. Our AI, payment, email, and analytics providers may process information in the United States and other countries where they or their subprocessors operate. Processing in another country may be subject to different laws. Where transfer protections are legally required, we must put them in place; using SeatTime is not a blanket waiver of those protections.
9. Adults only
SeatTime, including the free demo, is for people 18 or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe an underage person has provided information, contact privacy@getmoreseattime.com. We will investigate, close an ineligible account, and delete the information as required by law. We do not offer a parental-consent route for underage use.
10. Changes to this policy
We may update this policy from time to time by posting a revised version here and updating its effective date. Changes take effect on the date stated in the revised policy, subject to any notice or consent required by applicable law. Where required, we will provide additional notice, such as by email or a prominent notice in the service, and obtain any required consent before a change takes effect. We encourage you to review this page periodically.
An update does not override promises applicable to information already collected or authorize materially different uses without any notice or consent required by law.
11. Contact
SeatTime
Privacy requests: privacy@getmoreseattime.com
Everything else: hello@getmoreseattime.com
Mailing address: 801 International Pkwy, Ste 550 PMB 325, Flower Mound, TX 75022