Privacy Policy | Sellapage

1What We Collect

When you create an account: your name, email address, business name, and business contact number.
Products or services you add to your store: names, prices, descriptions, categories, stock details, and images.
Customer enquiries submitted through your store page: their name, phone number, and interest note.
Basic usage data: which pages you visit and how long you spend on them. This helps us improve the platform.
If you contact us through the Investors & Partners page: your name and email address, and, if you choose to give them, your phone number, organisation, a link, how you heard about us and your message, together with a record of your consent. We use these only to reply to that enquiry, never sell or share them, and delete them when you ask.

2How We Use Your Data

To run your store, dashboard, customer records, orders, payments, analytics, and support experience.
To send you important updates about your account or the platform.
To connect customers with your business when they place an order or submit an enquiry.
To improve Sellapage based on how it is being used.
We do NOT sell your data to anyone. Ever.

3How We Share Your Data

Payment processing: We share transaction details with Paystack (our payment processor) to process payments. Paystack has its own privacy policy governing how they handle your financial data.
Order fulfillment: We share delivery addresses, recipient names, and phone numbers with Sendbox and Topship (our logistics partners) to deliver orders to your customers.
Text messages: We share your phone number with Termii, our SMS provider, to send you text messages such as verification codes.
Email: We share email addresses with Resend, our email delivery provider, to deliver the emails we send, such as sign-in codes and account and order notifications.
Dropshipped orders: When you buy a product that a store sells through the Sellapage Dropshipping Marketplace, we share your name, phone number and delivery address with the partner who fulfils that order, only so they can deliver it. They are bound by a written agreement to use it for nothing else, keep it secure, and delete it within 90 days after delivery.
Advertising: When you connect a Google Ads account, we communicate with the Google Ads API to create and manage campaigns on your behalf. Campaign data (names, budgets, performance metrics) is shared with Google for this purpose.
Meta Pixel: A vendor may add their own Meta Pixel ID to their store. When they do, their storefront sends standard Meta events (page views, product views, add to cart, checkout started, and completed purchases including the order value) directly from the visitor’s browser to Meta. Sellapage does not receive or store this data. If that vendor has enabled Automatic Advanced Matching inside their own Meta account, Meta may additionally collect details a visitor types into the checkout form, such as name, email address and phone number, in hashed form.
Business verification: If you use our advertising features, we may share business verification documents (such as CAC registration) with Meta for advertising account verification.
Legal compliance: We may disclose data if required by law, court order, or to protect the rights and safety of Sellapage and its users.
We do NOT sell your personal data to third parties.

4Sella AI and Third-Party AI Processing

Sella AI is an optional assistant available on the Premium plan. When a store owner or an authorised staff member uses it, we send the relevant parts of their question and their store data to third-party AI providers so it can answer.
These providers are reached through our AI routing provider, OpenRouter, and include Anthropic, Google, OpenAI, DeepSeek and Moonshot AI. Data sent to them is processed on their infrastructure, outside Nigeria.
Depending on what is asked, this can include store details, products and pricing, orders, bookings, sales figures, analytics, and customer personal data such as names, phone numbers, delivery addresses and order history.
Bank account and payout details, subaccount codes, verification records, authentication tokens and device push tokens are removed before anything is sent. Sella AI cannot access them.
We instruct these providers not to retain your data or use it to train their models. Chat history is stored in the store owner’s own account and is deleted when they delete it.
Sella AI is off unless used, and staff access to it is off unless the store owner turns it on. Store owners remain the data controller for their customers’ personal data under the Nigeria Data Protection Act 2023.

5How We Protect Your Data

All data is encrypted in transit using TLS/SSL encryption between your device and our servers.
All stored data is kept on Google Cloud and encrypted at rest.
API keys, OAuth refresh tokens, and payment credentials are stored server-side only and are never exposed to browsers or client-side code.
Firebase Authentication handles all identity verification - we do not store raw passwords.
Access to your store data is restricted to your authenticated account only. No other vendor or user can access your data.
We perform regular security monitoring and follow industry best practices for web application security.

6Where Your Data Is Stored

Your data is stored on Google Cloud servers in Belgium, with backup copies in the Netherlands, encrypted at rest.
Google Cloud is independently certified against international security standards, including ISO/IEC 27001.
Product images are stored on Cloudinary, a secure media cloud service.

7Your Customer Data

When a customer submits an enquiry through your store, their details are stored in your dashboard.
If you switch on abandoned checkout recovery, we also store the name, email, phone number and basket contents of customers who begin checkout but do not pay. These records are deleted automatically after 30 days, and nothing is stored at all while the setting is off.
If you switch on loyalty points, we store a points balance against a customer’s email address so they can spend it on a future order.
You can send a customer one recovery email per 24 hours from your dashboard. It is sent in your store’s name, so you are responsible for its use.
You are responsible for how you use that customer data.
Do not spam or misuse customer contact details.

8Cookies

We use basic cookies to keep you logged in to your dashboard.
Sellapage itself does not set advertising or tracking cookies.
However, a vendor may connect their own Meta (Facebook) Pixel to their store. Where they have done so, visiting that store places Meta advertising cookies (such as _fbp) in your browser, and your activity on that store is reported to Meta. This happens only on stores whose owner has switched it on, and the data goes to that vendor’s Meta account, not to Sellapage.
You can clear cookies at any time through your browser settings, and most browsers allow you to block third-party cookies entirely.

9Your Rights

You can update your store information at any time from your dashboard.
To request a full data export or raise a data concern, contact us at the address below.

10How To Delete Your Account And Data

You can delete your Sellapage account yourself, at any time. You do not need to email us or wait for approval.
Step 1: Sign in at sellapage.com.ng and open your dashboard.
Step 2: Go to Settings from the menu on the left (tap the menu icon first on mobile).
Step 3: Scroll to the bottom and choose Delete Account.
Step 4: We email a verification code to the address on your account. Enter that code to confirm it is really you.
Step 5: Confirm. Deletion begins immediately and cannot be undone.
What gets deleted: your login, your store page, products, services, customer list, bank details, sales ledger, Sella chats and everything else attached to your store.
What is kept: records of paid orders, bookings and plan payments, as financial records, with your customers’ names, phone numbers, emails and addresses removed.
What may remain: records we are required to keep for legal, tax or fraud-prevention reasons, such as payment records held by Paystack, and anything already delivered to a third party at your instruction (for example events sent to Meta by a pixel you connected).
If you cannot sign in, email us at the address below from the email address on the account and we will delete it for you.

11Changes to This Policy

We may update this privacy policy as the platform grows and adds more commerce tools.
We will notify you of any major changes via email or a notice on your dashboard.
The date at the top of this page shows when it was last updated.