Privacy Policy — Sellio AI

Sellio AI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and safeguard your information when you use the Sellio AI mobile application, distributed via the Apple App Store and Google Play Store (the "App" or "Services"). The Services are designed for users aged 18 and older. By accessing or using the Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect the following categories of information:

1.1 Information You Provide

Account Information: When you create an account we may collect your name, email address, and authentication credentials (including via third-party sign-in providers such as Apple Sign-In, Google Sign-In, or email/password).
User-Uploaded Product Photos: To provide our core AI listing-image features, you upload photos of products you wish to list or market (e.g., apparel, electronics, accessories, home goods). These images are processed on secure servers solely to generate AI-based marketplace visuals.
Generation Inputs: Optional text descriptions, scene/style selections, ratios, and other parameters you provide as part of a generation request.
Payment Information: When you make a purchase, payment details are processed exclusively by Apple In-App Purchase or Google Play Billing (subscription state is managed via RevenueCat). Sellio AI does not see or store your card number — Apple and Google share with us only the transaction confirmation, subscription state, and the receipt token needed to fulfill your purchase.
Communications: If you contact us via email or support channels, we collect the content of your messages and any information you choose to provide.

1.2 Information Collected Automatically

Device Information: Device type, operating system, unique device identifiers, browser type, app version, and language preferences.
Usage Data: Information about how you interact with the Services — features used, generations submitted, screens visited, timestamps, and referring URLs.
IP Address: Collected for security, fraud prevention, analytics, and to determine your approximate geographic location.
Anonymous User ID: We assign a non-personally-identifiable identifier to your session and generations so we can link uploaded content to your account without exposing sensitive data downstream.

1.3 Information from Third Parties

Social Login Providers: If you sign in using Apple, Google, or another third-party provider, we receive your name, email, and profile picture as permitted by your privacy settings on those platforms.
Analytics & Crash Providers: We may receive aggregated or anonymized data from analytics, crash-reporting, and attribution partners to understand usage trends and stability.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Services — including AI-generated listing-pack images, lifestyle scenes, hero shots, macro spotlights, 360° angle grids, mannequin-to-flat-lay transforms, virtual try-ons, and other commerce-focused outputs.
Process transactions, manage Diamond balances, and send related receipts and notices.
Send technical notices, push notifications, security alerts, and administrative messages.
Respond to your comments, questions, and customer service requests.
Monitor and analyze trends, usage, and activities to improve user experience and reliability.
Detect, investigate, and prevent fraudulent transactions, abuse, and policy violations.
Comply with legal obligations and enforce our Terms of Service and policies.

3. Tracking Technologies and Advertising

The App uses mobile SDKs and similar technologies to collect information about how you use the Services and, only if you grant tracking permission, to support advertising measurement and optimization.

Permission-Gated Tracking

On iOSwe ask for your consent through the standard App Tracking Transparency (ATT) prompt before any cross-app or advertising-purpose tracking happens. If you choose "Ask App Not to Track", no advertising identifier (IDFA) is shared with our advertising partners, and Meta, Google, and similar partners receive no personalized event data from your device.
On Android we respect your Advertising ID setting. If you opt out of personalized ads, ad-related events are not associated with your advertising identifier.

Types of Tracking We Use

Strictly Necessary (always on): Required for the App to function — authentication, session management, crash handling, secure communication with our backend. These cannot be disabled.
Analytics (always on, no advertising identifier): Firebase Analytics and Crashlytics collect anonymized usage and stability data so we can understand which features are used, fix bugs, and improve the App.
Advertising Measurement & Optimization (only with your tracking permission): When you grant tracking permission, we use Meta Analytics (Meta App Events / SDK), Google Ads / Firebase conversion tracking, and similar attribution tools to measure conversions (e.g., install → first generation, subscription start), optimize our ad campaigns, and reach audiences with similar profiles. These partners may receive hashed identifiers, event names (e.g., "purchase", "subscribe"), and aggregate transaction values, in line with their own privacy policies and the consent signal you provided.

Managing Tracking

You can change your tracking choice at any time:

iOS:Settings → Privacy & Security → Tracking → Sellio AI.
Android: Settings → Privacy → Ads → reset / opt out of personalized ads.

Revoking tracking permission stops further advertising-purpose data from being sent. Previously sent events are processed under the consent signal that applied when they occurred.

4. Data Sharing and Third-Party Services

We do not sell your personal data. We may share your information with the following categories of third parties:

AI Infrastructure Providers: We use third-party AI providers (including FAL AI and the underlying model providers it routes to) to run generations. Uploaded product images and generation prompts are transmitted to these providers solely to produce your output and are subject to their security and confidentiality obligations.
Cloud Hosting:Generation results, account data, and account-linked metadata are stored on Google Cloud / Firebase infrastructure under Google's security and data-protection commitments.
Payment Processors: Apple In-App Purchase and Google Play Billing handle payments; RevenueCat manages our subscription state across both stores. We receive transaction confirmations and receipts but not your card details.
Analytics & Crash Reporting: Firebase Analytics and Crashlytics — always on, anonymized.
Advertising Measurement (only with your tracking permission): Meta Analytics, Google Ads / Firebase conversion tracking, and similar attribution partners. See Section 3.
Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect our rights, privacy, safety, or property, or that of our users or the public.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to this Privacy Policy.

5. Data Storage, Security, and Retention

Industry-Standard Security: Your data is protected using encrypted storage (AES-256 at rest), TLS/SSL in transit, and Firebase security rules that scope access to your own account data.
Short-Term Image Retention: Product images uploaded for AI processing are stored temporarily. Once the AI generation has completed, the original uploaded source images are removed from active processing servers within a reasonable period (typically within 24 hours). Generated outputs you choose to keep are stored in your account history until you delete them.
Account Data Retention: We retain your account information for as long as your account is active or as needed to provide you with our Services. You may request deletion at any time as described in Section 9.
Access Control: Access to processing servers and user data is strictly limited to authorized personnel and subject to regular security review.

6. Visual Content & No Biometric Collection

Sellio AI is designed for product imagery (apparel, accessories, electronics, home goods, etc.) — not for identifying people.

No Biometric Identifiers: We do not extract biometric templates, facial recognition signatures, or any identifier intended to recognize a specific individual.
Incidental People in Photos: Where uploaded product photos incidentally include a person (for example, a hand modeling a watch or a torso wearing a garment), we use that data strictly as a visual reference for the AI generation step and do not retain it as a biometric record.
Deletion: Any incidental personal-likeness data contained in an uploaded source image is deleted on the same retention schedule as the source image itself (Section 5).
No Sale or Sharing: We never sell, rent, or share image-derived personal-likeness data with third-party advertisers or data brokers. Processing is performed by Sellio AI and our vetted AI/cloud infrastructure partners under strict confidentiality.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own — primarily the United States and the European Union, where our cloud and AI infrastructure operates. We rely on appropriate legal safeguards for international data transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent transfer mechanisms. By using the Services you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal obligations.
Right to Restrict Processing: Request that we limit the processing of your personal data under certain circumstances.
Right to Data Portability: Request your personal data in a structured, commonly used, machine-readable format.
Right to Object: Object to processing of your personal data for direct marketing or based on legitimate interests.
Right to Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to withdrawal.
Right to Non-Discrimination (CCPA): You will not receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, please contact us at aiandthehuman@gmail.com. We will respond to your request within 30 days.

9. Account and Data Deletion

You may request deletion of your account and all associated data at any time by contacting us at aiandthehuman@gmail.com, or — where supported — using the in-app "Delete Account" option. Upon receiving a verified deletion request we will delete your personal data from our active systems within 30 days. Some data may be retained in encrypted backups for a limited period as required by law or for legitimate business purposes, after which it will be permanently deleted.

10. Subscriptions and In-App Purchases

Sellio AI Plans & Diamonds: Our Services operate on a combined subscription and Diamond-credit model. Subscriptions grant periodic Diamonds that expire with the plan; one-time Diamond packs do not expire.
Secure Transactions: All purchases are handled exclusively through Apple In-App Purchase or Google Play Billing (managed via RevenueCat). We never see or store your payment card details.

11. Children's Privacy

The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If we become aware that a child under 18 has provided us with personal data, we will take immediate steps to delete that information. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at aiandthehuman@gmail.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes we will notify you via email or in-app notification. The "Last Updated" date at the top of this policy indicates when the latest revision was made. Your continued use of the Services after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Sellio AI Support

Email: aiandthehuman@gmail.com