Selzee Privacy Policy

I. Operator

II. References

In accordance with Article 13 paragraphs 1 and 2 of Regulation (EU) 2016/679 (GDPR), Slovak Law No. 18/2018 on personal data protection, and Law No. 452/2021 on electronic communications, the Operator provides the following information regarding personal data obtained from the individual concerned.

III. Duration

We keep your account, brand details, ads and images while your account is open, and delete them within 30 days after you ask us to (see data deletion). Other periods:

• Sign-in tokens for ChatGPT and other AI assistants: access lasts 1 hour, renewal lasts 30 days, and expired or revoked tokens are deleted 31 days after they expire or are revoked.
• Usage analytics (PostHog, EU): 12 months.
• iPhone app: the sign-in token on your phone lasts until you log out or delete your account. A push notification token is kept until you turn notifications off, log out or delete your account, or until Apple's push service reports it dead.
• Technical logs: server log files about 3 weeks (they rotate weekly and the last two rotations are kept), AI activity logs 14 days, background job records 60 days, temporary reference images for ad rendering 30 days, chat files 90 days.
• Invoices and accounting records: 10 years, as Slovak accounting law requires. These are kept even after your account is deleted.
• If you consent to promotional emails, until you withdraw consent, but no longer than 10 years.

IV. Processed Personal Data

The Operator processes the following personal data on its website:

• Name, surname, residence
• Email address, home phone number, mobile phone number
• Billing address, delivery address
• Data collected from cookies, IP addresses

V. Data Protection Officer

The Operator has appointed a Data Protection Officer in compliance with GDPR.

Email: support@selzee.com

VI. Purposes and Duration of Processing

• Recording, creating, and processing contracts and client data
• Processing accounting documents
• Compliance with legal regulations regarding archiving
• Activities related to fulfilling requests, orders, contracts
• Newsletter, marketing, and promotional activities (upon consent)

VII. Legal Basis

• Processing based on consent begins only after consent is granted.
• Data necessary for pre-contractual negotiations, contract fulfillment, and service delivery is processed without consent.

VIII. Recipients of Personal Data

Recipients may include:

• Statutory bodies or members of the Operator; employees or collaborators
• Business partners, suppliers, contractors, accounting and legal services, transportation companies, marketing firms, social media platforms, payment gateways
• Courts, law enforcement, tax authorities, and other state bodies as required by law

IX. Transfers to Third Countries

Personal data in the form of cookies may be transferred to third countries:

• Google HQ: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• META Pixels: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Some of the processors listed in sections XV and XVI, for example OpenAI, Anthropic, OpenRouter, fal.ai, Firecrawl, Stripe, Cloudflare, RevenueCat and Expo, are outside the EU, mainly in the United States. These transfers rely on those providers' data-processing terms, such as the EU Standard Contractual Clauses.

X. Rights of the Individual

• Access to data; request correction or deletion
• Restrict processing; data portability
• Object to processing, including profiling
• Withdraw consent at any time

XI. Right to Withdraw Consent

Consent can be revoked at any time, fully or partially, via written or electronic communication.

XII. Right to File a Complaint

Individuals may lodge a complaint with a supervisory authority if they believe their data processing violates regulations.

XIII. Automated Decision-Making and Profiling

The Operator does not utilize automated decision-making or profiling as defined by Article 22 GDPR.

XIV. Data Protection and Cookie Usage

XV. Selzee in the Dashboard and in ChatGPT

Selzee is operated at selzee.com by AI Studio s. r. o. It makes and schedules social ads for your brand. You use it in your browser (the dashboard), through an AI assistant such as ChatGPT, or in the Selzee iPhone app (see section XVI). The Operator named in section I is responsible for the data in your Selzee account.

What we receive from ChatGPT. ChatGPT sends only what a tool needs: for example an ad id, a caption, a time, a platform, a search word, or an image you attach or link. We receive your sign-in through OAuth, never your ChatGPT password, and not your other ChatGPT conversations. We record which tool was called (never your text or images) in usage analytics. What Selzee returns in the chat is then handled by OpenAI under its own policy.

What we store. Your brand details (name, website, voice, audience, products), the ads Selzee makes, images you send to be posted, and the posts you schedule. Images and ads are stored on Cloudflare R2.

Why. To show your brand and ads, make new ads, schedule the posts you ask for, and keep the service secure. We never sell personal data, never use customer data to train AI models, and show no third-party ads.

Who receives it.

• Google (Gemini), OpenAI, and Anthropic via OpenRouter: AI models that write and check your ads.
• fal.ai: draws ad images.
• Firecrawl: reads public web pages such as your website.
• Cloudflare R2: stores your ads and images.
• Zernio: posts to Instagram and Facebook (Meta) on your behalf, when you connect them.
• PostHog (EU): usage analytics.
• Laravel Nightwatch: error and performance monitoring, kept under its standard retention.
• Stripe: payments.

Your controls. Disconnect Selzee in ChatGPT at any time. On the Connectors page in Selzee, disconnect Instagram or Facebook, which cancels pending posts and deletes the stored tokens. To delete your account and data, email support@selzee.com; we complete it within 30 days. In the iPhone app you can delete your account yourself (see section XVI). See data deletion for details. Your other rights are in section X.

XVI. The Selzee iPhone App

The Selzee iPhone app (bundle com.selzee.ios) shows the same Selzee account and brand as the dashboard. The Operator named in section I is responsible for your data in the app, and everything in section XV about brand details, ads, AI processors and storage applies to the app too. This section covers what is specific to the app.

Signing in. You can sign in with Apple, with Google, or with a code we email to you. We receive your verified email address from Apple or Google, and the name Apple gives us the first time. We store which sign-in methods belong to your account, with an identifier from Apple or Google, so we can recognise you next time. If you choose Hide My Email with Apple, we receive and store Apple's private relay address instead of your real email, and the emails we send go through Apple's relay to you. We never receive your Apple or Google password. After you sign in, the app holds a sign-in token for your device; we revoke it when you log out or delete your account. When the app opens a page of your dashboard inside the app, we give it a single-use link that expires after 5 minutes and signs the page in.

Purchases. Subscriptions in the app are bought through Apple, and Apple handles your payment. We never receive your card or payment details. We use RevenueCat to check and manage App Store subscriptions. RevenueCat receives an app user ID (anonymous until you sign in, then linked to your account) and your purchase and receipt data from Apple, and tells our server about it. We store the product, transaction id, expiry date and environment (sandbox or production) of your App Store subscription. Subscriptions bought on selzee.com are billed through Stripe instead (section XV). You manage and cancel an App Store subscription in iPhone Settings.

Notifications. If you allow notifications, the app registers a push token for your device. We store it with your account and send it, with the notification text, through Expo's push service and then Apple's push service, to tell you when your posts are ready. You can turn notifications off in iPhone Settings and we delete the token when you log out or delete your account.

Saving posts to Photos. When you save a post, the app downloads the image and adds it to your Photos after you give permission. The app only adds images. It does not read your photo library, and nothing is uploaded from your Photos to us.

Analytics. The app uses PostHog (EU) for product analytics, as the dashboard does (sections III and XV).

No tracking. The app does not track you across other companies' apps or websites. It does not use Apple's App Tracking Transparency prompt, because it does not track. It contains no advertising SDKs and no Meta or Google advertising pixels, and we do not sell your data or share it with data brokers. The cookie and pixel information in sections IX and XIV concerns our website, not the app.

Who receives it. In addition to the processors in section XV: Apple (sign-in, purchases, push notifications), Google (sign-in), RevenueCat (App Store subscriptions) and Expo (push notification delivery).

Deleting your account. In the app, open Account and choose Delete. If you have an App Store subscription, the app first reminds you to cancel it in iPhone Settings, because deleting your account does not cancel Apple billing. Deleting removes your account, your brand, ads, files, sign-in methods and device tokens, cancels any Stripe subscription straight away, and revokes the Sign in with Apple authorisation. Invoices and accounting records are kept as described in section III. You can also ask us by email, as described in section XV.

XVII. Final Provisions

These Privacy Policies take effect upon publication on the website on July 1, 2025. Last updated: October 15, 2026.