LEGAL INFORMATION
Privacy Policy
At SellEasy, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our website, platform, AI agents, forms, and related services.
Last updated: May 2026
About Us
1.Who We Are
SellEasy is a conversational commerce and artificial intelligence platform designed to be the all-in-one solution for modern ecommerce. Our AI-powered sales agent acts as a virtual salesperson across any messaging channel (WhatsApp, Instagram, Messenger, web chat), understanding what the customer needs, recommending products, and closing sales autonomously. We also feature a financial agent that enables businesses to manage invoicing, payments, and metrics from the same platform. Coming soon, we will introduce logistics and marketing agents, completing a 360° vision that covers the entire business lifecycle: from customer acquisition to product delivery. If you have questions about this Privacy Policy or the processing of your data, you can contact us at the email address provided below.
2.What Information We Collect
We may collect the following categories of personal and usage information.
Data Collection
3.Information You Provide to Us
When you fill out forms, register, request a demo, subscribe to a plan, or communicate with us, we may collect: • First and last name • Business name • Email address • Phone number • Country or location • Billing information • Any other information you voluntarily provide
4.Automatically Collected Information
When you visit our website or use our platform, we may automatically collect: • IP address • Browser type and device • Operating system • Pages visited • Date and time of access • Online identifiers • Usage, activity, and performance logs • Cookies and similar technologies
5.Information Generated Through Platform Usage
If you use SellEasy to create or manage AI agents, sales assistants, or booking flows, we may process: • Messages sent through the bots • End customer inquiries • Catalog, product, or service data uploaded by you • Bot configurations • Usage metrics, analytics, and performance data • Data related to orders, bookings, or payments, when applicable
6.Information from Third Parties
We may receive information from integrations or external providers, for example: • Messaging platforms • Payment gateways • Analytics tools • Hosting and infrastructure services • CRM systems or user-connected integrations
Use of Information
7.How We Use Your Information
We use the information to: • Provide, operate, and maintain SellEasy • Create and manage accounts • Respond to inquiries, support, and business requests • Process subscriptions, payments, and billing • Enable customer service, sales, and booking features • Improve performance, security, and user experience • Monitor usage, prevent fraud, and detect abuse • Send operational, legal, or commercial communications • Comply with legal and regulatory obligations • Train, evaluate, or improve system features to the extent permitted by law and our applicable agreements
8.Legal Basis for Processing
When applicable data protection law requires it, we process your data on one or more of these bases: • Performance of a contract • Compliance with legal obligations • Legitimate interests of SellEasy • Your consent, when necessary
9.Cookies and Similar Technologies
We use cookies and similar technologies to: • Remember preferences • Maintain active sessions • Analyze site traffic and usage • Improve functionality • Measure campaigns and performance You can configure your browser to block or delete cookies. Note that some site features may not work properly if you disable certain cookies.
Sharing and AI
11.End User Data from Our Users
If you are a business using SellEasy to interact with your own customers, you may upload or process third-party information within our platform. In that case: • You are responsible for having a valid legal basis to collect and use that data • SellEasy may act as a service provider or data processor, as applicable • You are responsible for informing your end customers about the use of automated tools, AI, messaging, bookings, or associated processing
12.Artificial Intelligence and Automated Processing
SellEasy uses automated functions and artificial intelligence to respond to messages, classify inquiries, recommend products, assist with sales, bookings, and support. When you interact with a business through WhatsApp, Instagram, or Facebook Messenger, you may be communicating with an automated AI assistant powered by SellEasy. Businesses using our platform are required to disclose the use of automated tools to their end customers. While we strive for accuracy and quality, automatically generated responses may contain errors or may not be appropriate in all cases. We recommend human oversight when the interaction has significant impact on customers, payments, bookings, business decisions, or regulatory compliance.
13.Data from Messaging Platforms (WhatsApp, Instagram, Messenger)
When end customers interact with a business through WhatsApp, Instagram, or Facebook Messenger using SellEasy, we may receive and process the following data from Meta Platforms, Inc.: • Phone number (WhatsApp) or user profile identifier (Instagram, Messenger) • Display name and profile picture (as provided by the platform) • Message content, including text, images, audio, and documents sent by the end customer • Message metadata (timestamps, delivery/read status) • Conversation context and history within the active session This data is used exclusively to: • Deliver the automated AI assistant experience on behalf of the business • Process product inquiries, orders, and customer support requests • Improve service quality and response accuracy We do not sell messaging data. We do not use end customer messaging data for advertising purposes. Businesses using SellEasy are responsible for informing their customers that they may be interacting with an automated AI assistant.
Security and Storage
14.International Data Transfers
SellEasy is operated by Noetic Technologies FZCO, established in Dubai Silicon Oasis, United Arab Emirates. Our service relies on sub-processors located in the United States (Google Cloud Platform, Google Vertex AI, OpenAI, Upstash, Stripe) and, depending on the end customer's channel, on Meta Platforms, Inc. servers. This means your personal data is transferred outside the UAE for hosting, AI processing, and messaging delivery. We rely on the following safeguards for these international transfers: • Each sub-processor is bound by a Data Processing Addendum that incorporates Standard Contractual Clauses (SCCs) where applicable. • Data is encrypted at rest (AES-256) and in transit (TLS 1.2+) end-to-end. • We apply the principle of data minimization — only the data strictly necessary for each purpose is shared with each sub-processor (e.g., we never send Meta-scoped user IDs or access tokens to OpenAI or Vertex AI). • For users in the EEA/UK, transfers comply with GDPR Chapter V (Articles 44-50). For users in the UAE, transfers comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45/2021), Articles 22-23. By using SellEasy you acknowledge that your data may be processed in jurisdictions whose data protection laws may differ from those of your country of residence.
15.Data Retention
We retain personal data only for as long as necessary to: • Provide our services • Fulfill legitimate business purposes • Resolve disputes • Enforce agreements • Comply with legal, tax, accounting, or regulatory obligations After that period, we may delete, anonymize, or de-identify the information, unless the law requires us to retain it longer.
16.Security
We apply reasonable technical, administrative, and organizational measures to protect information against unauthorized access, loss, destruction, or alteration. However, no system is completely secure, and we cannot guarantee the absolute security of your data.
Your Rights
17.Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you • Rectification: Request correction of inaccurate or incomplete data • Deletion: Request deletion of your personal data, subject to legal retention requirements • Restriction: Request that we limit the processing of your data in certain circumstances • Portability: Request your data in a structured, commonly used, machine-readable format • Objection: Object to the processing of your data based on legitimate interests • Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing • Complaint: Lodge a complaint with a supervisory authority in your jurisdiction To exercise any of these rights, contact us at the email address provided in the Contact section below. We will respond within 30 days of receiving your request.
18.How to Request Data Deletion
You have the right to request the deletion of your personal data at any time. To do so: 1. Send an email to selleasy@noetictechnologies.org with the subject line "Data Deletion Request" 2. Include the email address or phone number associated with your account 3. Specify whether you want to delete your account data, messaging data, or all data We will process your request within 30 days and confirm the deletion by email. Please note that: • Some data may be retained as required by law (e.g., billing records, tax obligations) • Deletion of account data will result in termination of your SellEasy services • Data already shared with third parties prior to deletion may not be recoverable For end customers who interacted with a business through WhatsApp, Instagram, or Messenger: please contact the business directly, or email us at the address above to request deletion of your messaging data. Meta Platform Data deletion callback: When an end user removes our app from their Instagram, Facebook, or WhatsApp settings, Meta sends us a signed deletion request that we honor automatically. The callback endpoint is POST https://selleasy.lat/api/v1/webhooks/facebook/data-deletion. After validation we enqueue a background job that deletes or anonymizes every record tied to that user within 30 days. End users can track the live status of their deletion at https://selleasy.lat/data-deletion/status/{confirmation_code}, where the confirmation code is returned by the callback.
19.Children's Privacy
SellEasy is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe that a child under 16 has provided us with personal data, please contact us at the email address provided below.
20.Region-Specific Rights
United Arab Emirates (UAE PDPL — primary jurisdiction): SellEasy is operated by Noetic Technologies FZCO, registered in Dubai, United Arab Emirates. Our processing of personal data is governed primarily by the UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (PDPL) and its Executive Regulations. As a data subject under the UAE PDPL you have the right to: (a) obtain information about the controller and the processing; (b) access, correct, delete or restrict your personal data; (c) object to processing based on legitimate interests; (d) request data portability; (e) withdraw consent at any time; (f) lodge a complaint with the UAE Data Office (the Federal authority overseeing PDPL compliance). To exercise any of these rights, contact us at the email address in the Contact section. European Economic Area (GDPR): If you are located in the EEA, you have the rights described in the "Your Rights" section above. Our legal bases for processing are: contract performance, legal obligations, legitimate interests, and consent. Because Noetic Technologies FZCO is established outside the EEA, we voluntarily honor GDPR-equivalent rights for EEA users and use Standard Contractual Clauses for transfers. You may also lodge a complaint with your local supervisory authority. For questions, contact us at the email address below. California (CCPA/CPRA): If you are a California resident, you have the right to: (a) know what personal information we collect, use, and disclose; (b) request deletion of your personal information; (c) opt out of the sale or sharing of personal information. We do not sell personal information. To exercise your rights, contact us at the email address below. Brazil (LGPD): If you are located in Brazil, you have the right to: (a) confirm whether your data is being processed; (b) access, correct, anonymize, block, or delete unnecessary data; (c) obtain information about sharing with third parties; (d) revoke consent. To exercise your rights, contact us at the email address below.
21.Government and Law Enforcement Requests
Noetic Technologies FZCO is established in Dubai, United Arab Emirates. Our primary legal framework for responding to government and law enforcement requests is the UAE Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL) and any applicable UAE federal laws (including those governing Free Zone entities in Dubai Silicon Oasis). For users in other jurisdictions, we additionally honor international data protection standards (GDPR, CCPA, LGPD). When a government, court, or law enforcement authority — whether UAE or foreign — asks us for personal data, we apply the following policies: • Mandatory legality review — every request is reviewed by qualified personnel (and external counsel when needed) to confirm it is issued by a competent authority with jurisdiction over Noetic Technologies FZCO, is properly served, and complies with the UAE PDPL and any applicable cross-border legal assistance treaties before any disclosure. • Disposition to challenge — we have written procedures to legally challenge requests that we consider unlawful, overbroad, or inconsistent with the UAE PDPL or with international human rights and data protection standards. Foreign requests that bypass MLAT processes are systematically challenged. • Data minimization — when we are legally required to disclose information, we provide only the strictly necessary minimum that responds to the specific request. We do not over-disclose. • Documentation — we keep an internal record of every request received, including the requesting authority, the legal basis cited, our legal analysis, the response we provided, and the date. We do not provide bulk access, backdoors, or unrestricted access to personal data, including Platform Data received from Meta. In the 12 months preceding this Policy update we have not disclosed user data to public authorities. When we are legally permitted to do so, we will notify affected users so they may seek legal remedy.
22.Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by: • Posting the updated policy on our website with a new "Last updated" date • Sending an email notification to registered users, when appropriate We encourage you to review this Privacy Policy periodically. Your continued use of SellEasy after changes are posted constitutes acceptance of the updated policy.
23.Do Not Track
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. There is currently no universally accepted standard for how companies should respond to DNT signals. At this time, SellEasy does not respond to DNT signals, but we respect your privacy choices through the other mechanisms described in this policy.
24.Governing Law and Jurisdiction
This Privacy Policy and any matter relating to the processing of personal data by SellEasy are governed by the laws of the United Arab Emirates, including UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (PDPL), its Executive Regulations, and the regulations applicable to Free Zone entities established in Dubai Silicon Oasis Authority. Any dispute, controversy, or claim arising out of or in connection with this Privacy Policy shall be resolved by the competent courts of Dubai, United Arab Emirates, unless mandatory local consumer protection law of your country of residence grants you the non-waivable right to bring proceedings in your local courts. Nothing in this clause limits the right of users in the European Economic Area, the United Kingdom, California, Brazil, or other jurisdictions with mandatory data protection laws, to lodge a complaint with their local supervisory authority or to seek the remedies provided by their local law.
Contact Us
- Business name:
- SellEasy
- Address:
- Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates