Privacy policy
Effective October 5, 2026. Front Seat is operated by Siddons Holdings LLC ("we", "us").
Front Seat is a mileage and expense tracker for real estate agents. This policy explains what we collect, how we use it, who helps us run the service, how long we keep it, and how you delete it. We don't sell your data, show ads, or use third-party analytics or advertising tools.
What we collect and why
Your account
Your email address, used to sign you in with a one-time code, and the name you choose to add. If you join a team, your name (never your email) is shown to your team leader.
Location and trips
With your permission (including "Always" access, so drives are recorded when the app is closed), Front Seat uses your phone's location and motion sensors to detect and record drives. GPS runs only while you're moving, and you can pause tracking in the app at any time.
- The detailed GPS points of each drive stay on your phone. They're deleted from your phone once you confirm the trip, or after 30 days.
- For business trips and trips you haven't reviewed yet, we store the start and end points, their street addresses, a simplified route, the miles, the times and the purpose you enter, to build your mileage log.
- For trips you mark personal, we keep no location on our servers: only the date, times and miles.
Receipts and expenses
When you photograph a receipt, the photo is uploaded to private storage, and its text is read automatically (see Anthropic below) to fill in a draft expense for you to check. We keep the photo with the expense until you delete the expense or your account. We also store the expenses, deals, rental properties, rents, vehicle details and tax settings you enter, to show your totals and build your exports.
Google Calendar (optional)
If you choose to connect Google Calendar, Front Seat asks Google for read-only access to your calendar events (calendar.events.readonly) and your Google account's email address, to show which account is connected.
- What we read: the title, location, start and end time of events on your primary calendar, around the times of your recent trips.
- Why: only to suggest a purpose for a trip that ends at an event's address and time. A suggestion never changes a trip unless you choose to use it.
- What we keep: only events that match a trip, and only until you use or dismiss the suggestion, or for 30 days at most. We don't copy or keep the rest of your calendar.
- Tokens: your Google access tokens are encrypted on our servers and never sent to your phone. We never change, create or delete calendar events.
- Sharing: we don't share, sell or transfer Google user data, use it for advertising, or let people read it, except where you ask us to for support, where needed for security, or where the law requires.
- Turning it off: disconnect in the app (Settings, Google Calendar), which revokes our access and deletes what we kept. You can also remove Front Seat's access in your Google Account at myaccount.google.com/permissions.
Front Seat's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Notifications
If you turn on reminders, we store your phone's push notification token to send estimated tax reminders. Reminders don't include dollar amounts.
Teams
If you join a team, your team leader sees your name and participation counts: whether you've used the app in the last week, and how many business trips, receipts and confirmed expenses you have. Mileage totals, expense totals and trip locations are shared only if you turn them on, and you can turn them off at any time. Leaving a team ends your leader's access immediately; your records stay yours.
Who helps us run Front Seat
We share data only with the service providers below, only as needed to run the features you use, and under terms that require them to protect it at least as well as this policy does:
| Provider | What for | What they receive |
|---|---|---|
| Hetzner Online (Helsinki, Finland) | Hosting our server and database | Everything stored in your account, other than receipt photos and export files |
| Cloudflare (R2 storage) | Storing receipt photos and your exports | Receipt images, export files |
| Anthropic (Claude API) | Reading receipt photos into draft expenses | Receipt images and our expense category list, processed and stored in the United States. Under Anthropic's commercial terms, it doesn't use them to train its models and deletes them within 30 days (longer only if needed to investigate misuse or required by law). |
| Postmark (ActiveCampaign) | Sending sign-in codes and team invites | Email addresses and the message |
| Expo and Apple Push Notification service | Delivering reminders | Push tokens and the reminder text |
| Calendar matching, only if you connect it | Our requests for your events |
We may disclose information if the law requires it.
Where your data is stored and processed
Front Seat is run from more than one country, so your information is stored and processed outside the United States as well as in it:
- Finland (European Union): our server and database are in Hetzner's data center in Helsinki. Your account, trips, expenses, deals, properties, team membership, settings and any matched calendar events are stored there.
- United States and Canada: receipt photos and export files are stored by Cloudflare in its eastern North America region.
- United States: Anthropic reads receipt photos in the United States only and stores them there until they're deleted, within 30 days. Postmark sends our emails, and Expo and Apple deliver push notifications.
Wherever it's stored, your data is protected as described in this policy, and our providers are bound to protect it at least as well.
How long we keep it
- Your trips, expenses, deals, properties and receipt photos: until you delete them or your account.
- CPA exports you create: 7 days, then the files are deleted.
- Calendar suggestions: until you act on them, 30 days at most.
- Sign-in codes: 24 hours. Signed-out sessions: up to 14 days, for security.
- Database backups: 14 days, so anything you delete is gone from backups within 14 days.
Deleting your data
You can delete your account in the app (Settings, Delete account). That permanently deletes your account and everything in it: trips, expenses, receipt photos, deals, properties, exports, team memberships and calendar connection (we revoke our Google access too). Backups roll off within 14 days. You can also delete individual trips, expenses, deals and properties at any time.
To ask for a copy of your data, a correction, or deletion, or with any other privacy question, email privacy@usefrontseat.com from the address you sign in with. We answer privacy requests by email.
You can withdraw location, camera, photo and notification permissions at any time in your phone's Settings; the features that need them stop working, and the rest of the app keeps working.
Security
All connections use HTTPS. Receipt photos and exports are private and shared with your phone only through short-lived links. Google tokens are encrypted at rest. Our logs never record your locations, receipt contents or access tokens.
Children
Front Seat is for working real estate professionals and isn't intended for anyone under 18.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.
Contact
Siddons Holdings LLC. Email privacy@usefrontseat.com; we answer privacy questions and requests by email.