Privacy Policy

1. Who We Are

Selzee ("we", "us", "our") operates the Selzee platform at selzee.com, which allows users to create, configure, and deploy AI employees. This privacy policy applies to all data processed through the Selzee application, website, and connected integrations.

2. Data We Collect

We collect the following categories of personal data:

• Account information: name, email address, and password hash when you register.
• Billing information: payment details processed securely through Stripe. We do not store full credit card numbers.
• Integration credentials: OAuth access tokens and refresh tokens when you connect third-party services (e.g., Meta Ads, Google Analytics, Google Search Console, Google Ads, Gmail, Google Calendar, Shopify, Klaviyo, Notion, Judge.me).
• Integration data: ad account IDs, property IDs, campaign performance data, email data, calendar events, product reviews, and other information retrieved from connected platforms on your behalf.
• AI employee configuration: instructions, memory files, and workspace data you provide for your AI employees.
• Usage data: pages visited, features used, IP address, browser type, and device information collected via analytics (PostHog).
• Communication data: messages exchanged with AI employees via Telegram, Slack, or other connected channels.

3. How We Use Your Data

• To provide the service: deploying and operating AI employees, connecting integrations, and processing your instructions.
• To process payments: managing subscriptions and billing through Stripe.
• To retrieve integration data: accessing your connected accounts (e.g., Meta Ads) to pull campaign data, analytics, and reports as directed by your AI employees.
• To improve the platform: analyzing usage patterns to fix bugs and improve features.
• To communicate with you: sending transactional emails about your account, employees, and billing.

4. Third-Party Services & Data Sharing

We share data with the following categories of third parties, solely to operate the service:

• Stripe - payment processing.
• AI model providers (e.g., Anthropic, OpenAI) - your AI employee instructions and conversation context are sent to the model provider you select. We use your own API keys; data is subject to each provider's terms.
• Integration platforms (e.g., Meta, Google, Shopify, Klaviyo, Notion, Judge.me) - OAuth tokens or API keys are exchanged to access your accounts. We only request the minimum scopes necessary (e.g., ads_read for Meta Ads, analytics.readonly for GA4). Notion access flows through Notion’s hosted MCP server at mcp.notion.com.
• Communication platforms (e.g., Telegram, Slack) - bot tokens are used to send and receive messages on channels you configure.
• PostHog - anonymized usage analytics.
• Infrastructure providers (e.g., Google Cloud, Vultr) - cloud hosting for dedicated servers that run your AI employees.

We do not sell your personal data to any third party.

5. Data Retention

We retain your account data for as long as your account is active. Integration tokens are stored only while the integration is connected. AI employee workspace data is retained while the employee exists and is deleted when you delete the employee. After account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records for tax compliance).

6. Your Rights & Data Deletion

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your account settings.
• Delete your account and all associated data by contacting us.
• Export your data in a portable format.
• Disconnect integrations at any time, which immediately revokes our access and deletes stored tokens.
• Withdraw consent for data processing where consent is the legal basis.

To request data deletion or exercise any of these rights, email support@selzee.com. We will process your request within 30 days.

7. Meta Platform Data

When you connect your Meta Ads account through our platform, we access your advertising data (ad account IDs, campaign metrics, and performance reports) using the ads_read permission. This data is:

• Used solely to provide reporting and analysis through your AI employee.
• Not shared with any other users or third parties beyond what is described in this policy.
• Deleted when you disconnect the Meta Ads integration or delete your account.

You may request deletion of all Meta-related data at any time by disconnecting the integration in your dashboard or by emailing support@selzee.com.

8. Security

We protect your data using encryption in transit (TLS) and at rest. OAuth tokens are stored encrypted. Each AI employee runs in an isolated server environment. Access to production systems is restricted and audited.

9. Cookies & Tracking

We use essential cookies for authentication and session management. We use PostHog for product analytics. We do not use third-party advertising cookies or trackers.

10. Legal Basis for Processing (GDPR)

For users in the EU/EEA, we process personal data under the following legal bases:

• Contract: processing necessary to provide the Selzee service you signed up for.
• Consent: connecting third-party integrations (you can withdraw at any time).
• Legitimate interest: improving the platform and preventing fraud.
• Legal obligation: retaining billing records as required by law.

11. California Privacy Rights (CCPA/CPRA)

California residents have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information. To exercise your rights, contact support@selzee.com.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use of the service after changes constitutes acceptance.

13. Contact Us

If you have questions about this privacy policy or your data, contact us at support@selzee.com.