Privacy Policy

Last updated: April 5, 2026

Selia Bot ("we", "our", "us") operates the seliabot.com website and the Selia Bot platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Account Information: When you register, we collect your name, email address, business name, and industry. We use this to create and manage your account.

Business Data: Products, orders, customer conversations, and other business data you enter into the platform. This data belongs to you and is stored per-tenant in isolated database scopes.

Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, and session duration.

WhatsApp Data: If you connect your WhatsApp Business Account, we process messages on your behalf through Meta's Cloud API. We act as a data processor for these conversations.

2. How We Use Your Information

• To provide, operate, and maintain the Service
• To process your transactions and manage your account
• To power AI-driven sales conversations on your behalf
• To send transactional emails (verification, password reset, order notifications)
• To improve our Service and develop new features
• To comply with legal obligations

3. Data Isolation & Multi-Tenancy

Selia Bot is a multi-tenant platform. Your business data is logically isolated from other tenants. Every database query is scoped to your tenant ID. Other businesses on the platform cannot access your data.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Google Cloud Platform — Infrastructure hosting (Cloud Run, Cloud SQL, Cloud Storage). Data is stored in the us-central1 region.
• Meta (WhatsApp Cloud API) — WhatsApp messaging integration. Subject to WhatsApp's Privacy Policy.
• Google Gemini AI — Powers our AI sales agent. Conversation data is sent to Google's API for processing. Google's Gemini API Terms apply.
• Google Tag Manager / Analytics — Website analytics on our landing page.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, we retain data for 30 days before permanent deletion. You may request immediate deletion by contacting us.

6. Data Security

We implement industry-standard security measures including:

• Encryption at rest (Cloud SQL) and in transit (TLS/HTTPS)
• Bcrypt password hashing (12 rounds)
• AES-256 encryption for sensitive tokens (WhatsApp access tokens, payment credentials)
• JWT-based authentication with 7-day expiry
• Rate limiting on authentication endpoints
• Webhook signature verification (HMAC-SHA256)

7. Your Rights

You have the right to:

• Access and export your data at any time through the dashboard
• Correct inaccurate personal information
• Request deletion of your account and associated data
• Withdraw consent for marketing communications

8. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@seliabot.com