Privacy Policy

1. Who is responsible

Sellia is operated by Shrk Negócios Digitais LTDA, CNPJ 58.324.099/0001-67.

Sellia decides how account data is used. For the contacts and conversations of each business, the customer decides what is processed, and Sellia acts on the customer's behalf.

2. Data we process

• Account: name, email, protected password, profile picture, language and organization details such as name, website, phone, address and tax ID, when provided.
• Sign in with Google: the name, picture and email of your Google account.
• WhatsApp: the connected number, contacts, messages, audio, images and documents from conversations received through the connection.
• Sales data: pipeline stage, qualification score, notes, tasks and meetings.
• Payment: plan and subscription status. Card details stay with the payment processor, not with Sellia.
• Technical: access and error logs needed for security and operation.

3. How we use it

• To create and protect your account and provide the service.
• To answer messages through AI agents, following your business's configuration, and to qualify leads.
• To schedule meetings, when you connect Google Calendar.
• To send account access and security emails.
• To bill the subscription, meet legal obligations and prevent abuse.

Legal bases include contract performance, legitimate interest, legal obligations and, where applicable, consent. We do not sell personal data.

4. Google Calendar data

This connection is optional, and you can undo it at any time. When you connect your account, Sellia requests access to your calendar events and your Google email address, and uses that access to:

• show your upcoming events on Sellia's calendar screen;
• check whether a time slot is free before booking a meeting;
• create, update or cancel the meetings booked through Sellia.

When an agent schedules a meeting, the check only reports whether the slot is free or busy. The content of your events is not sent to AI models or used to train them. We do not use this data for advertising or sell it.

Access tokens are stored encrypted. When you disconnect the calendar in Sellia, we ask Google to revoke access and delete the tokens. Meetings already created stay on your calendar. You can also revoke access at myaccount.google.com/permissions.

Sellia's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who we share data with

We use vendors that process data to provide the service:

• Supabase: database, authentication and files.
• Hostinger: application hosting.
• Omni Z-API: WhatsApp connection.
• OpenRouter and the model providers accessed through it: generating replies, transcribing audio and analyzing files and conversations.
• Inngest: background jobs.
• Resend: email delivery.
• Stripe: payments.
• Google: sign-in and Calendar, when you use them.
• BrasilAPI and People Data Labs: contact data enrichment, when that feature is triggered.

We may also share data when required by law or a competent authority.

6. International transfers

Some of these vendors process data outside Brazil, including in the United States, where our database is located. These transfers are made to provide the service, with the applicable safeguards.

7. How long we keep data

• Account and conversation data: while the account is active or until a deletion request, unless the law requires us to keep it.
• First message from a contact awaiting approval: stored encrypted and deleted when rejected or after 7 days.
• Google Calendar tokens: until the calendar is disconnected or the account is deleted.

8. Security

We use encrypted connections, per-organization access control, encryption of sensitive credentials and two-step verification. No system is entirely immune to failure; if a relevant incident occurs, we will notify affected people and authorities as required by law.

9. Cookies

We use cookies needed to keep your session and remember your language. We do not use advertising cookies.

10. Your rights

Under the Brazilian General Data Protection Law (LGPD), you can request confirmation of processing, access, correction, portability and deletion of your data, information about sharing, and review of consent. To do so, or to delete your account, write to privacidade@sellia.pro. If you are a contact of a customer business, please contact that business first; we may forward your request to it.

11. Children and teenagers

Sellia is a service for businesses and is not intended for anyone under 18.

12. Changes and contact

We may update this policy, and the date at the top shows the current version. Relevant changes will be communicated. Questions: privacidade@sellia.pro.