Introduction
At Sellzyo ("the Company," "we") we are committed to protecting our users' privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform and services.
By using the Sellzyo platform, you agree to the collection and use of your information in accordance with this policy.
Information we collect
Account information
When you register with Sellzyo, we collect:
- Full name
- Email address
- Phone number
- Store name
- Payment information (processed by secure payment providers)
Usage data
We automatically collect information about how you use the platform:
- Login and activity logs
- Conversations between the AI assistant and customers
- Usage and performance statistics
- Device and browser information
How we use your information
We use the collected information for the following purposes:
- Providing and operating our services
- Improving the AI assistant's performance and response quality
- Sending important notifications about your account
- Providing technical support
- Analyzing usage to improve the platform
- Complying with legal requirements
Messaging data (WhatsApp, social platforms)
When you use messaging services via Meta platforms, we collect and process:
- Customer phone numbers (WhatsApp) and account identifiers (Facebook and Instagram)
- Content of conversations between the AI assistant and customers via messaging platforms
- Message dates, times, and delivery status
- Customer names and profile pictures available via the platform
This data is processed via official Meta APIs (WhatsApp Business API, Facebook Messenger Platform, Instagram Messaging API) and is also subject to Meta's privacy policy.
Data protection
We take strict security measures to protect your data:
- Encrypting data in transit and at rest (SSL/TLS)
- Secure storage on protected servers
- Limited employee access
- Regular security reviews
- Regular backups
Data sharing
We do not sell or rent your personal information to third parties. We may only share your data in the following cases:
- Meta (WhatsApp, social platforms) — as messaging delivery platforms, shared data is subject to Meta's privacy policy
- Service providers essential to running the platform (e.g. payment processors and server hosting)
- AI service providers to process WhatsApp and website conversations only (does not include Google API data — see the Google data section below)
- When there is a legal requirement or court order
- To protect our rights or the safety of our users
Google API data (Google Calendar and others)
When you connect your account to Google services (such as Google Calendar), we strictly comply with Google API services user data policy, including limited use requirements.
Google data we collect:
- Email address associated with the Google account (to identify the account)
- List of calendars available in the Google account (to pick the default booking calendar)
- Calendar event details: title, date and time, description, and attendee emails
- Authentication tokens (OAuth access token and refresh token)
- Event IDs for events created by the assistant on your behalf
How we use Google data and with whom we share it:
- Limited Use only: We use your Google data exclusively to provide the booking-related features you requested (such as reading, creating, updating, and cancelling calendar events on your behalf) and do not use it for any other purpose.
- Not used to train AI: We never use Google data to train or improve any general AI or machine-learning models, whether owned by us or by a third party.
- Not shared with third parties: We do not sell Google data nor share it with any third party, except in the following limited cases: (a) when sharing is necessary to provide the feature you requested, (b) to comply with law or a court order, (c) for security purposes to protect against fraud or abuse.
- Not used for ads: We do not use Google data to deliver targeted advertising.
- Not read by humans: Neither our employees nor anyone else accesses your Google data except in the following cases: (a) with your explicit consent, (b) for security or required legal reasons, (c) as anonymized aggregate statistics after all identifiers are removed, (d) when you request technical support and allow us access to the data to handle your request.
- Deletion upon disconnection: When you disconnect your Google account from our platform, we delete the access tokens immediately, and any Google data stored locally is deleted within 30 days.
Google data protection:
- We encrypt OAuth tokens (access token and refresh token) in transit (TLS 1.2+) and at rest in the database
- OAuth token access is limited to production systems only, with no direct employee access
- When you disconnect Google from our UI, we revoke the OAuth tokens immediately and delete them from the database
- Any calendar event data cached temporarily for performance is deleted within 30 days of account disconnection
Compliance Statement:
Sellzyo's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
User rights
You have the following rights regarding your data:
- Access your personal data
- Correct or update your information
- Request deletion of your account and data
- Object to the processing of your data
- Export your data in a readable format
Cookies
We use cookies to improve your experience on the platform. These include:
- Files necessary to run the platform
- Analytical files to understand how the platform is used
You can control cookie settings through your browser.
Data retention
- Account data: retained throughout the account's active period and up to 90 days after deletion.
- Conversation content: retained for 12 months from the conversation date, unless the user requests earlier deletion.
- Payment records: retained for 5 years in compliance with legal and accounting requirements.
- Upon account deletion request, we delete all personal data within 30 days, except as required by law.
Data deletion
You can request deletion of your data at any time via:
- Dashboard: account settings → delete account
- Email: send a deletion request to contact@sellzyo.com
We will acknowledge receipt of your request within 48 hours and complete deletion within 30 days.
Policy changes
We may update this privacy policy from time to time. We will notify you of any material changes via email or an in-platform notification.
Contact us
If you have any questions about this privacy policy, contact us: