Privacy Policy

Selspart ("Selspart", "we", "us" or "our") is an AI-powered e-commerce platform operated by Hyperbird Technologies Limited, designed to help Nigerian vendors manage their businesses across WhatsApp, their online storefronts, and connected social platforms.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, create a vendor or customer account, use our storefronts, or interact with our services through connected platforms such as WhatsApp, YouTube, TikTok, Instagram, and Facebook (collectively, the "Services").

We are committed to complying with the Nigeria Data Protection Act 2023 (NDPA) and its implementing regulations, as well as other applicable data protection laws.

This policy applies to two broad groups of users:

• Vendors — businesses and individuals who create Selspart accounts to manage products, orders, payments, marketing and customer conversations.
• Customers — end users who browse vendor storefronts, place orders, or interact with a vendor's AI-assisted channel (for example by messaging or calling a vendor's business WhatsApp number powered by Selspart).

Where you are a Customer interacting with a vendor, please note that the vendor is generally the controller of your information, and Selspart acts as a processor acting on the vendor's instructions. This policy describes our practices as a processor and as a controller of our own data.

3.1 Information you provide directly

• Account information: name, email address, phone number, business name, store description, password, and billing details.
• Store and product content: product images, prices, descriptions, categories, and promotional materials (including flyers and videos you upload or generate on the platform).
• Customer information: name, delivery address, phone number, email, and order details you submit at checkout.
• Support communications: messages, emails, or complaints you send to us.

3.2 Information collected automatically

• Usage data: pages visited, features used, buttons clicked, and timestamps.
• Device and log data: IP address, browser type, device identifiers, and operating system.
• Cookies and similar technologies: see section 9 below.

3.3 Information from your use of connected platforms

• WhatsApp: When a vendor connects their business WhatsApp number to Selspart, we process the messages, media, voice notes, and contact identifiers (such as phone numbers and display names) exchanged through that number, strictly to provide the requested services — for example answering customer questions, taking orders, sending order updates, and posting product updates to the vendor's WhatsApp status to their opted-in contacts. Vendors control which of their contacts receive status updates and other communications.
• YouTube, TikTok, Instagram and Facebook: Where a vendor connects these platforms to Selspart, we process the account identifiers and content permissions the vendor authorises (for example, to publish or schedule vendor-generated video ads, flyers, or product content on their behalf). We only access the scopes the vendor explicitly grants and can revoke at any time.
• Payments: Payment card details are collected and processed by our licensed payment processors, not by Selspart. We receive limited transaction metadata (amounts, references, and status) needed to record orders and payouts.

We do not sell your personal data, and we do not read, use, or share the content of vendors' connected messaging accounts for any purpose other than providing, securing, and improving the Services the vendor has requested.

We use personal data to:

• Provide, operate, and maintain the Services.
• Power the vendor's AI-assisted assistant — answering customer enquiries, negotiating, taking orders, and escalating to the vendor when a human is needed.
• Process orders, payments, refunds, and vendor payouts.
• Send transactional notifications such as order confirmations, delivery updates, and follow-up messages.
• Publish vendor-approved content (status updates, flyers, video ads) to connected platforms on the vendor's behalf.
• Provide analytics to vendors about their store performance.
• Detect, prevent, and address fraud, abuse, spam, and security incidents.
• Comply with legal obligations and enforce our terms and policies.

We do not use customer conversations or connected-platform content to train third-party AI models. Vendor content is only used to provide the vendor's own services.

Under the NDPA, we rely on the following legal bases depending on the purpose:

• Performance of a contract — to operate your account, process orders, and deliver the Services you requested.
• Consent — for optional marketing communications, optional status-posting to contacts, and optional platform connections (e.g. WhatsApp, YouTube, TikTok, Instagram, Facebook). You may withdraw consent at any time.
• Legitimate interests — to secure the platform, prevent fraud and abuse, and improve our Services, provided your rights are not overridden.
• Compliance with legal obligations — where processing is required by law, regulation, or a lawful order.

Selspart uses artificial intelligence to transcribe voice notes, understand customer messages, generate product descriptions, flyers, and video ads, and produce voice responses. When these features are used:

• Only the content necessary for the requested task (for example a voice note or a product description) is processed by our AI providers.
• AI processing is used to fulfil the vendor's or customer's request — we do not use your content to build general-purpose public models.
• Vendors can disable AI features for their store, and customers can always ask to speak to a human.

We share personal data only as follows:

• Service providers: cloud hosting, messaging and platform APIs, payment processors, AI providers, delivery partners, and analytics providers — each under contractual confidentiality and data-protection obligations.
• Connected platforms: where a vendor authorises a connection (e.g. WhatsApp, YouTube, TikTok, Instagram, Facebook), content and identifiers necessary to perform the authorised actions are processed through that platform under its own terms and privacy policy.
• Vendors: customer order details and messages are made available to the relevant vendor to fulfil the order.
• Legal and safety: to comply with law, respond to lawful requests, or protect the rights, property, and safety of Selspart, our users, and the public.
• Business transfers: in connection with a merger, acquisition, or asset sale, with notice to affected users where required.

We never sell personal data to third parties for their own marketing.

We retain personal data only as long as necessary for the purposes described in this policy:

• Account and store data: for the life of the account and up to 24 months after closure, to satisfy legal, accounting, and dispute-resolution needs.
• Order records: for the period required by Nigerian tax and accounting laws.
• Messages and conversation logs: for as long as needed to provide the conversation history to the vendor and resolve disputes, after which they are deleted or anonymised.
• Backup copies: may persist for a limited period in secure backups before being permanently deleted.

We use essential cookies and local storage to keep you signed in and keep your cart working, plus optional analytics cookies to understand how the Services are used. You can control cookies through your browser settings. See our Cookie Policy for details.

We implement technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access controls, least- privilege internal access, audit logging, and regular review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we take incidents seriously and will notify affected individuals and regulators as required by law.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent for optional processing (including marketing and connected-platform integrations) at any time.
• Request portability of data you provided to us.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us at privacy@selspart.com. We will respond within the timelines required by applicable law.

The Services are not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Some of our service providers and platform connections are located outside Nigeria. Where personal data is transferred outside Nigeria, we take steps to ensure it receives an adequate level of protection consistent with the NDPA, including contractual safeguards with our providers.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. For material changes, we will provide more prominent notice where required.

If you have questions about this Privacy Policy or our data practices, contact:

Hyperbird Technologies Limited (Selspart)
Email: privacy@selspart.com
Phone: +234 805 902 3594