Privacy Policy

1. Who is the data controller

The data controller for this website is [TODO: full registered company name, e.g. "SellChat Sp. z o.o."], [TODO: registered office address], NIP: [TODO: NIP], KRS: [TODO: KRS number], registered with [TODO: registry court, e.g. "District Court for ... , National Court Register"].

Contact for any privacy question or request: contact@sellchat.eu.

2. What data we process, and why

We collect different data depending on how you interact with the site:

• Buying SellChat: when you click “Order” you are taken to a Stripe-hosted checkout page. Stripe collects your email, name, and payment details directly — we never see or store your card number. After a successful payment, Stripe sends us your email address, name, and the completed transaction so we can deliver your package and issue any legally required accounting records.
• Download & confirmation email: once payment is confirmed, we use MailerSend (a transactional email provider) to send your download link to the email address Stripe passed us. MailerSend processes your email address and name on our behalf for this single purpose.
• The live demo chat widget on this site: if you type a message into the chat bubble on sellchat.eu, that message is sent to an AI provider (Anthropic's Claude) to generate a reply, temporarily stored in our Upstash Redis database so the conversation has context, and — if the conversation looks like a sales lead — forwarded through our Make.com automation to a Google Sheets log and a Telegram alert to us, so we can follow up. Do not share sensitive personal data (health, financial account numbers, etc.) in the chat widget.
• Contacting us by email (including the “Order” or “installation” buttons when Stripe is not configured, which open a pre-filled email draft in your own mail client): we receive whatever you choose to send us, to answer your question or process your order.
• Site analytics: we use Vercel Analytics, a cookie-free, privacy-preserving analytics tool. It records aggregated page-view and click events (e.g. which “Order” button was used) without using cookies, without a persistent identifier, and without being able to identify you personally.

3. Legal basis for processing

• Performance of a contract (Art. 6(1)(b) RODO): processing your order, delivering the package, sending the confirmation email.
• Legitimate interest (Art. 6(1)(f) RODO): operating the demo chat widget, following up with visitors who show buying intent, and keeping aggregated, non-identifying analytics to improve the site.
• Legal obligation (Art. 6(1)(c) RODO): keeping transaction records for the periods required by Polish tax law.

4. Who receives your data (processors / recipients)

We use the following service providers to run this site and deliver SellChat. Each acts as our data processor (or, for Stripe's own compliance obligations, as an independent controller for payment-related legal duties) and is only given the data it needs for its specific task:

• Stripe, Inc. — payment processing (card data never touches our servers).
• MailerSend — transactional email delivery (download link, order confirmation).
• Anthropic — processes the text you send to the demo chat widget to generate a reply.
• Upstash — short-term storage of chat sessions (Redis database).
• Make.com — automation that forwards demo-chat leads to Google Sheets and Telegram.
• Google (Google Sheets) — lead log for the demo chat widget.
• Telegram — instant alert to us when the demo chat widget flags a hot lead.
• Vercel Inc. — website hosting, server logs, and cookie-free analytics.

5. International data transfers

Some of the providers above (including Stripe, MailerSend, Anthropic, Upstash, Google, Telegram, and Vercel) may process data outside the European Economic Area, in particular in the United States. Where that happens, we rely on the safeguards those providers offer (such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses).

[TODO for lawyer review: confirm and list the specific transfer mechanism each named provider currently relies on — this changes periodically and should be verified against each provider's current Data Processing Addendum.]

6. How long we keep your data

• Transaction and invoicing data: kept for the period required by Polish tax law (generally 5 years from the end of the tax year in which the transaction occurred — confirm the exact period with your accountant).
• Demo chat conversations: kept only as long as needed to provide the conversation and follow up with genuine leads, then deleted or anonymized on a rolling basis.
• Email correspondence: kept as long as needed to resolve your query, then deleted or archived per our retention practice.

7. Your rights

Under RODO/GDPR, you have the right to: access your data, request correction or erasure, restrict or object to processing, request data portability, and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, UODO) or your own country's supervisory authority.

To exercise any of these rights, email contact@sellchat.eu.

8. Cookies

As of the date above, this site does not set any cookies that require your consent. Vercel Analytics is cookie-free by design. If we add any cookie-based tool in the future (e.g. marketing or session cookies), we will update this policy and the cookie banner on the site will ask for your consent before those cookies are set.

9. Security

We use providers (Stripe, Vercel, Upstash, MailerSend) that maintain their own industry-standard security certifications. We do not store payment card data ourselves. Access to any data we do hold is limited to what's needed to run the site and fulfil orders.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date at the top will always reflect the current version. Material changes will be reflected here before they take effect.

11. Contact

Questions about this policy: contact@sellchat.eu.