Privacy Policy

1. Overview

SellRight AI (“we”, “us”, “our”) provides an AI-assisted sales outreach platform. This Privacy Policy explains what data we collect, how we use it, and your rights over it. It specifically addresses our use of WhatsApp Business API data and AI processing of conversations.

2. Data We Collect

Account data

Name, email address, and organisation details provided when your account is created.

Lead and contact data

Contact information (name, phone number, company, notes) that you enter for your prospects. This data is stored to enable the AI agent to personalise outreach on your behalf.

WhatsApp conversation data

Messages sent to and received from your leads via the WhatsApp Business API are stored to provide conversation history, generate follow-up suggestions, and allow human review before sending. Message content is processed by AI models to generate draft replies.

Calendar data

If you connect Google Calendar, we access your calendar availability to suggest appointment times and create calendar events. We do not store calendar event contents beyond what is needed to create and track appointments booked through the Service.

Email data

If you connect Gmail, we use it only to send meeting confirmation and invite emails to your prospects, from your own address, when you send or approve a message. We do not read, search, or store the contents of your mailbox, and we never access email you have not sent through the Service.

Usage data

Log data, feature usage events, and error reports collected to operate and improve the Service.

3. AI Processing of Conversations

SellRight AI uses third-party large language model (LLM) APIs to analyse conversation history and generate draft messages. When you use the Service:

• Conversation snippets and lead context are sent to LLM providers solely to generate reply drafts. Prompts include only the minimum context needed for the task.
• LLM providers are bound by data processing agreements and are prohibited from using your data to train their models.
• No message is sent to your lead without a human review step unless you have explicitly enabled autonomous sending mode for that category of message.

4. WhatsApp Data Handling

We receive WhatsApp messages via the Meta WhatsApp Business API. By using SellRight AIto send WhatsApp messages you confirm that:

• You have collected valid opt-in consent from each contact before initiating WhatsApp outreach, as required by Meta's policies and applicable law.
• You are the data controller for your contacts' personal data. SellRight AI acts as a data processor on your behalf.
• WhatsApp message content is stored to provide conversation history, AI drafting, and audit trails. Messages are retained for 12 months from the date of last activity and then deleted unless you request earlier deletion.

5. How We Use Data

• Providing and operating the Service.
• Generating AI-drafted outreach messages and replies.
• Sending WhatsApp messages on your behalf when you approve a draft.
• Scheduling calendar events when appointments are booked.
• Improving reliability, fixing bugs, and enhancing features.
• Complying with legal obligations.

We do not sell your data or your contacts' data to third parties, and we do not use it for advertising.

6. Data Sharing

We share data only with:

• LLM providers — to generate message drafts, under data processing agreements.
• Meta Platforms (WhatsApp Business API) — to deliver messages you approve.
• Google (Calendar and Gmail APIs) — if you connect your Google account, to check calendar availability, create calendar events, and send meeting emails on your behalf.
• Infrastructure providers — hosting, database, and monitoring services, all under appropriate data protection agreements.
• Law enforcement — when required by applicable law or valid legal process.

7. Data Security

We use encryption in transit (TLS) and at rest, access controls, and regular security reviews to protect your data. No system is perfectly secure; please use a strong password and report any suspected breach to us immediately.

8. Your Rights

Depending on your jurisdiction you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, use the data export or deletion feature in Settings, or contact us via the feedback button inside the app.

9. Data Retention

We retain account and contact data for as long as your account is active and for 30 days after deletion to allow recovery. WhatsApp conversation data is retained for 12 months from last activity. You may request earlier deletion at any time.

10. Cookies

We use session cookies required for authentication. We use analytics cookies (Google Analytics) to understand aggregate usage patterns. You can disable analytics cookies in your browser settings without affecting core functionality.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email or in-app notice before the change takes effect.

12. Contact

For privacy questions or to exercise your rights, use the feedback button inside the app or contact us through your account manager.