Privacy Policy
Effective date: 3 November 2026 · Replaces the policy of 27 September 2026
Written in plain language. If anything here is unclear, ask us before you rely on it.
1 Who we are and what this covers
Selright ("we", "us") gives small businesses a store link and an AI sales rep that answers their customers on WhatsApp, on the store page, and on Telegram, Facebook Messenger or Instagram where the merchant has connected them. Customers pay through Paystack checkout links, and riders confirm deliveries through app-free tracking links.
This policy covers the Selright mobile app, the website and store pages at selrightapp.com (and the older address selright.tech, which still serves links sent before November 2026), the merchant admin console, and every message our systems send or receive on a merchant's behalf.
Two kinds of people are covered. Merchants create an account and run a store. Customers chat with a merchant's store, buy from it, or receive a delivery from it; they never create a Selright account. Where a merchant's customers are concerned, the merchant decides what to sell and how to use the data; Selright processes it to provide the service.
2 What we collect
Merchant account
Name, business name, email, phone number, password (stored only as a one-way hash), store name, logo and product photos, team members you invite, and the bank account you register with Paystack for payouts. We never see your card number or online banking login.
Conversations
Customer phone numbers or chat IDs, WhatsApp profile names, the messages customers send, the replies the AI or the merchant sends, delivery status of those replies, and, where a merchant turns on WhatsApp Business app coexistence, the chat history Meta imports from the merchant's phone.
Orders and payments
What was ordered, the amount, the customer's name, phone number and delivery address, and the payment reference and status Paystack reports to us. Paystack handles the card or bank transfer itself.
Deliveries
The rider or courier the merchant assigns, their phone number, and the times they tap the pickup and delivered links. Riders never install an app or create an account.
Customer profile
For each customer of a store we keep a profile built from their orders and chats: past purchases, preferred options, delivery location, how they usually pay, and a short written summary of what they last discussed with the store, so the AI can pick the conversation back up.
Device and usage
App version, a push notification token for the merchant's phone, server logs (IP address, time, endpoint) kept for security, and counts of orders, chats and messages used to meter the merchant's plan. We do not run advertising trackers on the website or in the app.
3 How we use it
- ✓Answering customers. The AI sales rep reads the customer's message, the store's live catalog and prices, the customer's own orders and profile, the recent chat, and the merchant's delivery prices to write a reply. It cannot change prices, give discounts, confirm payments or cancel orders.
- ✓Taking orders and payments. Creating checkout links, recording paid orders from Paystack's confirmation, sending the receipt, and reducing stock.
- ✓Deliveries. Sending the rider a tracking link and showing the merchant and customer where the order is.
- ✓Follow-ups. Reminding a customer about an unpaid order or an abandoned cart, asking how a delivery went, and letting them know when it is time to reorder. A customer can reply "stop" to any of these and we stop.
- ✓Notifying the merchant. Push notifications and emails when a customer is waiting, wants a person, or has paid.
- ✓Billing and limits. Counting chats and orders against the merchant's plan and charging subscriptions through Paystack.
- ✓Improving the AI's selling. See section 4.
- ✓Security and support. Detecting abuse, keeping tenants separated, and helping merchants who contact us.
We do not sell, rent or trade personal data or conversations, and we do not use them for advertising.
4 How the AI learns, and what stays private
The AI sales rep is a large language model. Each reply is generated by sending the information in section 3 to our model provider (Google Gemini, or OpenAI where a merchant chooses it) under terms that do not allow the provider to train on it. Replies are logged in the merchant's inbox and kept so the AI remembers the conversation.
To make every store's AI a better seller, Selright reviews successful conversations and keeps short examples of how a question or objection was handled well. By default an example teaches only the AI of the store it came from. Selright staff may share an example with all stores only after it has been anonymised: the store, customer, product names, prices, contact details, addresses and order numbers are removed, and a person checks it before it is shared. Phone numbers, email addresses and card numbers are stripped from any example automatically.
A merchant may also upload their own sales scripts and store knowledge. That material trains only their store's AI and is never shared with other merchants.
5 WhatsApp, Meta and other messaging platforms
Selright connects a merchant's own WhatsApp Business number through Meta's official WhatsApp Business Platform (Meta app ID 1551139436618428) using the whatsapp_business_messaging and whatsapp_business_management permissions. We use them only to receive messages customers send to the merchant, send the merchant's replies, receipts and delivery updates, register the number, and subscribe it to our webhooks. Message templates sent outside a customer's 24-hour window are limited to order updates and follow-ups the customer can stop.
When a merchant turns on coexistence, Meta shares the merchant's WhatsApp Business app chat history and contacts with Selright once, and then mirrors replies the merchant sends from their phone, so the inbox and the AI stay in step. The merchant can decline the history import inside WhatsApp.
Messenger, Instagram and Telegram chats are received through those platforms' official APIs on the same basis. Meta, Telegram, Google and OpenAI each process data under their own terms; Meta's are at whatsapp.com/legal.
6 Who else sees data
- Paystack takes the payment and pays the merchant. Selright receives a flat ₦50 per paid order through Paystack's split; the customer's money never passes through a Selright account.
- Meta, Telegram carry the messages, as above.
- Google and OpenAI generate AI replies and summaries.
- Hosting. Our servers run on Hostinger in the United Kingdom; the database and file storage are on Supabase in the European Union; emails go out through Resend; push notifications through Firebase.
- The merchant's team and riders see the customers and orders of that store only.
- Authorities, where Nigerian law or a court order requires it.
Each store's data is kept apart from every other store's. A merchant's staff can only ever reach their own store.
7 How long we keep it
- While a store is open: orders, customers and conversations are kept so the merchant has their records and the AI has its memory.
- WhatsApp access tokens are stored encrypted and removed when a merchant disconnects their number.
- After a store closes or asks for deletion: everything in section 9 is removed. Paid-order records needed for tax and accounting are kept for the period Nigerian law requires, then deleted.
- Server logs are kept for up to 90 days.
- Shared AI examples that were anonymised before sharing are not linked to any store or person and are not deleted with the store.
8 Security
Every connection is encrypted with TLS. Passwords are hashed, API tokens and WhatsApp credentials are encrypted at rest, and checkout and tracking links are signed so they cannot be guessed. Card and bank details are entered on Paystack's pages, never ours. Selright staff access production data only to support a merchant or investigate abuse, and that access is logged.
The AI is instructed never to ask a customer for card numbers, PINs, passwords or bank logins in chat. If a message claiming to be from a store asks for these, do not answer it and tell the merchant.
9 Your rights and deleting your data
Under the Nigeria Data Protection Act 2023 (and GDPR where it applies) you can ask what we hold about you, have it corrected, receive a copy, object to follow-up messages, or have it deleted.
- Customers: reply "stop" to any follow-up to end them. To have your chats, profile and contact details removed from a store, use the deletion page below or ask the store; the merchant can also remove you from their customers list.
- Merchants: deleting your account removes your store, catalog, team, customers, conversations, uploaded knowledge, WhatsApp connection and AI settings.
Data deletion request
Tell us the email or phone number on the account. We confirm it is yours, then delete within 30 days, usually much sooner.
10 Children, changes and contact
Selright is for businesses. You must be 18 or older to open a merchant account.
When we change this policy we update the date at the top and tell merchants in the app. Continuing to use Selright after a change means you accept it.
Data controller: Selright Technologies, Lagos, Nigeria
Email: goetechx@gmail.com
WhatsApp: +2348155698819
Deletion requests: selrightapp.com/data-deletion
Website: selrightapp.com