Privacy Policy

1. Who we are and scope

Selltro is a sales, order and customer management platform for online businesses in Malaysia and the region. This policy applies to the Selltro website, the Selltro web and mobile apps, and the Selltro AI connector. For the data a merchant stores about its own customers, the merchant decides why and how it is used and Selltro processes it on the merchant's behalf.

2. Information we collect

We collect the following kinds of information:

• Account information: name, email, phone number, password (stored hashed) and the role you hold in a store.
• Business data: store details, products, prices, stock, orders, payments, commissions, payouts, courier and marketplace settings, and e-invoice records.
• Customer data stored by merchants: customer names, phone numbers, emails, delivery addresses, order history and, where a merchant needs it for e-invoicing, IC numbers.
• Usage and log data: sign-in times, device and browser information, IP address, pages used, errors, and the AI connector call log described below.

3. How we use your information

We use your information to provide and improve Selltro, run your workspace, process orders and payments, arrange courier and marketplace integrations, send important account and service messages, provide support, keep the service secure, prevent fraud and abuse, and meet our legal obligations.

4. Legal basis and consent

We handle personal data in line with the Malaysian Personal Data Protection Act 2010 (PDPA). We rely on your consent when you sign up and when you choose to connect optional features such as an AI assistant, on the need to perform our contract with you, and on legal obligations. Merchants are responsible for having a proper basis to store their own customers' data in Selltro. You can withdraw consent at any time (see Your rights).

5. Sharing your information

We do not sell your data. We share it only with: service providers that help us run Selltro, such as payment processors, messaging and WhatsApp providers, couriers, and hosting and infrastructure providers, and only what they need to do their job; AI providers, only when a merchant connects an AI assistant (see the next section); and authorities or other parties where the law requires it or to protect our rights and users.

6. AI assistants (Claude, ChatGPT)

Selltro offers an optional connector so a store can use Claude (Anthropic) or ChatGPT (OpenAI) to ask questions about its own store. Setup steps are on the AI connectors page. What to know:

• Who can connect: only HQ (management) users of a Selltro store can connect. Sellers and agents are refused.
• Read-only: the AI assistant can only read data. It cannot change anything in Selltro.
• Masking: in what the AI assistant receives, customer phone numbers show only the first 3 and last 4 digits, IC numbers only the last 4 digits, emails only the first letter and the domain, and street addresses and postcodes are hidden. Customer names are shown.
• Third-party processing: whatever you let the AI assistant read is sent to that AI provider (Anthropic or OpenAI) and is governed by that provider's terms and privacy policy. Selltro does not sell data.
• Logging: Selltro logs each AI tool call (tool name, success, duration and a masked preview) for 30 days. The store's HQ can see this log at Settings → Sambung AI luar (Connect external AI).
• Tokens: access tokens expire after 1 hour and refresh tokens rotate. They are stored hashed on our side.
• Revoking: you, or any HQ admin of the store, can revoke a connection at Settings → Sambung AI luar at any time. Access stops immediately.

7. Data retention

We keep account and business data while your account is active, and delete or anonymise it on request unless we must keep some of it by law (for example tax or e-invoice records). The AI connector call log is kept for 30 days and then deleted. AI access tokens last 1 hour, and refresh tokens are replaced each time they are used and stop working once you revoke the connection.

8. Security

Data is hosted on Selltro's servers. We protect it with encryption in transit (HTTPS), access controls, and hashed storage of passwords and OAuth tokens. No system is perfectly secure, so please keep your credentials safe and tell us at once if you suspect unauthorised access.

9. Your rights

You can ask us to give you access to your personal data, correct it, delete it, or withdraw your consent, and you can revoke any AI connection yourself in Settings → Sambung AI luar. If you are a merchant's customer, please contact that merchant first; we will help them respond. To make a request, email [email protected].

10. Children

Selltro is for businesses and is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will change the date at the top and, for material changes, give reasonable notice in the app or by email.

12. Contact us

For any privacy question or request, email [email protected] and our team will help you.