Privacy Policy

Last updated: 12 October 2026

Sellora provides an AI sales assistant that answers customers on WhatsApp for businesses in Sri Lanka and manages their products, orders and customers. This policy explains what information we handle, why, who we share it with and what choices you have. "We" means Sellora. "Merchant" means a business that uses Sellora. "Customer" means a person who messages a merchant on WhatsApp or buys from a merchant's online store.

1. Our role

For information about our merchants and their staff, we are the controller. For information about a merchant's customers, the merchant decides why and how it is used and we process it on the merchant's behalf to run the service. If you are a customer and want to see or remove your data, contact the business you messaged first. You can also contact us and we will help.

2. Information we collect

From merchants and their team

• Name, email address, role and password (stored only as a one-way hash).
• Business name, currency, billing plan, invoices and payment records.
• Products, prices, stock, images, FAQs and settings the merchant adds.
• The WhatsApp Business Account, phone number and access token the merchant connects through Meta. The access token is stored encrypted.
• Technical information such as IP address, browser, device and activity logs, used for security and support.

From customers who message a merchant

• Phone number and WhatsApp profile name.
• The content of messages, including text, voice notes and photos the customer sends, and our replies.
• Order details such as name, delivery address, items and order status that the customer gives to place an order.
• Information from ads that open a chat, such as the ad the customer clicked.

From visitors to our website

• Details you give in a demo request, such as name, business, phone and email.
• Basic usage and campaign information, such as the page you came from.

3. How we use information

• To receive customer messages and send replies, and to take and manage orders for the merchant.
• To understand text, voice notes and photos so the assistant can answer correctly.
• To show merchants their conversations, orders, customers and reports.
• To send order updates and, when a merchant chooses, messages to its customers.
• To bill merchants, provide support, and keep the service secure and free of abuse.
• To improve how the assistant works. We do not sell personal information.

4. WhatsApp and Meta

Messages travel through the WhatsApp Business Platform operated by Meta. Merchants connect their number to Sellora using Meta's Embedded Signup. When they do, they authorize Sellora to send and receive messages and manage message templates for that number. Meta processes this information under its own terms and privacy policy. Where a merchant keeps using the WhatsApp Business app on the same number, messages the merchant sends from the app can also reach Sellora.

5. Who we share information with

• The merchant a customer is chatting with, who can see that conversation and the related orders.
• Meta Platforms, to deliver WhatsApp messages and manage the connection.
• AI providers such as OpenAI and Google, which process message text, voice and images to produce replies. We send only what is needed for the reply.
• Service providers for hosting, database, image storage, email, push notifications and bot protection (Cloudflare).
• Couriers and delivery partners, when a merchant exports delivery details for an order.
• Authorities, when the law requires it or to protect people and the service.

6. Storage, security and retention

We use encryption in transit, encrypt access tokens and API keys at rest, hash passwords, and limit access by role. No system is perfectly secure, but we work to protect your information. Our servers and providers may be outside Sri Lanka, so information can be transferred internationally. We keep information while the merchant's account is active and for as long as needed for billing, legal and security reasons. After an account closes we delete or anonymise its data within a reasonable period, except what we must keep by law.

7. Your choices and rights

• Ask to access, correct or delete the personal information we hold about you.
• Object to or limit how we use it, or withdraw consent you gave.
• Merchants can disconnect WhatsApp at any time from the WhatsApp page of their dashboard, which stops Sellora receiving messages for that number.
• Customers can stop messages by telling the merchant or by blocking the number in WhatsApp.

To make a request, email hello@nadun.me. We may ask you to confirm who you are before acting on it.

8. Data deletion

To delete your data, email hello@nadun.me from the address on your account, or for a customer message, with the phone number you used on WhatsApp. We confirm your request, delete the data we are able to delete, and tell you if we must keep anything and why.

9. Children

Sellora is for businesses and is not directed at children. We do not knowingly collect information from children.

10. Changes to this policy

We may update this policy. We will change the date above and, for important changes, tell merchants in the dashboard or by email.

11. Contact

Questions or requests: hello@nadun.me