Privacy Policy
Last updated: April 5, 2026
Selia Bot ("we", "our", "us") operates the seliabot.com website and the Selia Bot platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Account Information: When you register, we collect your name, email address, business name, and industry. We use this to create and manage your account.
Business Data: Products, orders, customer conversations, and other business data you enter into the platform. This data belongs to you and is stored per-tenant in isolated database scopes.
Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, and session duration.
WhatsApp Data: If you connect your WhatsApp Business Account, we process messages on your behalf through Meta's Cloud API. We act as a data processor for these conversations.
2. How We Use Your Information
- To provide, operate, and maintain the Service
- To process your transactions and manage your account
- To power AI-driven sales conversations on your behalf
- To send transactional emails (verification, password reset, order notifications)
- To improve our Service and develop new features
- To comply with legal obligations
3. Data Isolation & Multi-Tenancy
Selia Bot is a multi-tenant platform. Your business data is logically isolated from other tenants. Every database query is scoped to your tenant ID. Other businesses on the platform cannot access your data.
4. Third-Party Services
We use the following third-party services to operate the platform:
- Google Cloud Platform — Infrastructure hosting (Cloud Run, Cloud SQL, Cloud Storage). Data is stored in the us-central1 region.
- Meta (WhatsApp Cloud API) — WhatsApp messaging integration. Subject to WhatsApp's Privacy Policy.
- Google Gemini AI — Powers our AI sales agent. Conversation data is sent to Google's API for processing. Google's Gemini API Terms apply.
- Google Tag Manager / Analytics — Website analytics on our landing page.
5. Data Retention
We retain your account data for as long as your account is active. If you cancel your subscription, we retain data for 30 days before permanent deletion. You may request immediate deletion by contacting us.
6. Data Security
We implement industry-standard security measures including:
- Encryption at rest (Cloud SQL) and in transit (TLS/HTTPS)
- Bcrypt password hashing (12 rounds)
- AES-256 encryption for sensitive tokens (WhatsApp access tokens, payment credentials)
- JWT-based authentication with 7-day expiry
- Rate limiting on authentication endpoints
- Webhook signature verification (HMAC-SHA256)
7. Your Rights
You have the right to:
- Access and export your data at any time through the dashboard
- Correct inaccurate personal information
- Request deletion of your account and associated data
- Withdraw consent for marketing communications
8. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at:
Email: privacy@seliabot.com