Privacy Policy

Last updated: October 16, 2026

1. Scope

This Privacy Policy explains how Sellevry (“we”, “us”) processes personal data in connection with (a) our website at sellevry.com (the “Website”) and (b) the integration of Facebook Pages and Instagram professional accounts with the Sellevry platform (the “Meta Integration”). The processing of all other data within the Sellevry platform is governed by the agreement between Sellevry and each business that subscribes to it (a “Customer”).

2. Controller and contact

For the Website, the controller is Sellevry, [registered address].

For data processed through the Meta Integration, the Customer that connected the Page or account is the controller. Sellevry processes this data on the Customer’s behalf and in accordance with its instructions.

Questions and requests concerning this Privacy Policy can be submitted through our contact form.

3. The Website

3.1 Data we collect

• Contact form submissions: your name, email address, company (optional), the plan selected, your message and, if used, the configuration from the plan builder.
• Server logs: your IP address, browser type, the page requested, and the date and time of the request.
• Usage analytics: we use Google Analytics to measure which pages are visited and how often the contact form is submitted. Google Analytics sets cookies in your browser and receives your IP address and information about your device and browser. Its advertising features and Google signals are disabled.
• Display preference: if you switch between the light and dark appearance, your choice is stored in your own browser only and is never transmitted to us.

We do not use advertising trackers.

3.2 Purposes and legal bases

• To respond to your enquiry and follow up on it, including taking steps at your request before entering into a contract.
• To operate and secure the Website, based on our legitimate interest in a functioning and secure website.
• To understand how the Website is used and improve it, based on your consent where applicable law requires it.

We do not sell your data, and we do not add you to a mailing list.

3.3 Recipients

Our hosting provider stores the Website and the requests it receives; our email provider delivers contact form submissions to our team. Both act only on our instructions. Google provides the analytics described above. The Website loads its typefaces from Google Fonts and its icons from unpkg.com, and the contact form’s human verification is provided by Cloudflare (Turnstile); in each case your browser connects to that provider, which receives your IP address and, in the case of Cloudflare, information about your browser and device.

3.4 Retention

We retain contact form submissions for as long as necessary to respond to your enquiry and follow up on it, and delete them upon request. Server logs are retained for a limited period for operational and security purposes.

4. The Meta Integration (Facebook and Instagram)

Customers can connect their Facebook Pages and Instagram professional accounts to Sellevry through Sellevry’s app on Meta’s platform. The Customer selects which Pages and accounts to connect and can disconnect them at any time.

4.1 Data we process

• Connection data: the access tokens issued by Meta for the Pages and accounts the Customer selects, the names and IDs of those Pages, and the IDs and usernames of linked Instagram professional accounts. We do not receive Facebook login credentials.
• Messages: where the Customer has enabled message import, the content and time of messages sent to its Page via Messenger or to its Instagram account via Instagram Direct, together with the sender ID that Meta assigns for that Page. Attachments remain hosted by Meta; we store only a reference and retrieve the file from Meta when it is displayed.
• Sender information: the sender’s name and, for Instagram, their username, retrieved once when their first message arrives. The sender’s profile picture is retrieved from Meta for display only and is not stored.
• Replies: the content of replies sent by the Customer’s users and any images attached to them. These images are stored in our cloud storage so that Meta can retrieve and deliver them.
• Posts and engagement: content the Customer publishes through Sellevry, the engagement metrics Meta reports for it (such as likes, comments, shares and reach), and the comments on those posts, including each commenter’s name or username.
• Advertising spend: where the Customer enters an ad account, the monthly spend per campaign.

4.2 Purpose

We process this data solely to provide the Meta Integration to the Customer: to display incoming messages and send its replies, to publish its content and report on its performance, and to report its advertising spend. We do not sell this data, use it for advertising or profiling, or make it available to any other Customer.

4.3 Sub-processors

Our hosting and cloud storage providers store this data on our behalf. If a Customer enables AI features in Sellevry using its own OpenAI account, the content of incoming messages may be transmitted to OpenAI in order to classify them, for example by topic and language; the results are visible only to that Customer. No other third parties receive this data.

4.4 Security

Data is transmitted over encrypted connections, and access tokens are stored in encrypted form. Access within Sellevry is limited to the users the Customer authorizes.

4.5 Retention

• Access tokens are retained until the Customer disconnects the Page or account in Sellevry, at which point they are deleted immediately. If access is instead removed in the Customer’s Facebook settings, the tokens become invalid immediately. The name and ID of a disconnected Page are retained so that content published earlier remains attributed to it.
• All other data is retained for the duration of the Customer’s subscription unless the Customer deletes it earlier, and is deleted after the subscription ends in accordance with the Customer’s agreement with Sellevry.

4.6 Revoking access and deleting data

How to revoke Sellevry’s access and request deletion of this data is described in our Data Deletion Instructions.

5. International transfers

Our service providers may process personal data in countries other than your own, including the United States. Where required by applicable law, we rely on appropriate safeguards for such transfers, such as standard contractual clauses.

6. Your rights

Depending on the law that applies to you, you may have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, to withdraw consent you have given, and to lodge a complaint with a data protection authority. You can submit a request through our contact form. Requests concerning data processed through the Meta Integration are forwarded to the Customer concerned, and we assist the Customer in responding.

7. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised.