Legal

Privacy Policy

Last updated June 5, 2026. Session System is operated by Kapotel LLC d/b/a Session System. This policy describes the information we collect, how we use it, and the privacy posture of the private preview product.

Information we collect

The public marketing site is designed to be lightweight. If you contact us, request access, sign in, or use the private preview, we may receive account details, contact information, support messages, workspace metadata, and information you choose to enter into the product.

The product may hold sensitive business records, including client names, notes, contact methods, session history, appointment and payment status, relationship context, and follow-up tasks.

How we use information

  • To provide, secure, maintain, and improve Session System.
  • To manage private preview access and product support.
  • To communicate about accounts, security, and service changes.
  • To comply with legal obligations and enforce our terms.

Local-first product posture

Session System is designed to be local-first where practical. The CRM launch posture is local-only by default, with no automatic cloud upload unless sync, backup, or another connected feature is explicitly enabled for a workspace.

Sensitive notes and relationship context are treated as confidential business records. Export and backup features are designed to warn before sensitive data leaves the workspace.

Third-party providers

We may use third-party service providers for hosting, authentication, email, support, billing, analytics, or other product infrastructure. We only share information as needed to operate the service, comply with law, or with your direction.

Cookies and analytics

We do not need non-essential cookies for the static marketing site. If we later add analytics, advertising, or similar tracking, we will update this policy and provide the notice or controls required by applicable law.

Your choices

You may ask to access, correct, export, or delete personal information associated with your account, subject to legal, security, and product integrity limits. Private preview operators can also export and delete workspace data through product controls as those controls become available.

Security and retention

We use reasonable administrative, technical, and organizational safeguards for the service. No method of storage or transmission is perfect, so the product is also designed around data minimization, local control, export, deletion, and careful provider selection.

We keep information only as long as needed for the purposes described in this policy, unless a longer retention period is required by law, security, dispute resolution, backup integrity, or legitimate business needs.

Contact

Privacy questions can be sent through the channels listed on the support page.