We have written this page to explain Sellio clearly. It should be read together with any plan, checkout, merchant agreement or service notice that applies to you.
Who we are and what this policy covers
Sellio is a commerce platform operated by Apptélier in Singapore. It helps merchants create public storefronts, manage products, inventory, tables, staff and orders, review reports, and participate in Sellio World.
This policy applies when you visit sellio.sg, create or use a Sellio account, use a merchant workspace, browse or order from a Sellio-powered storefront, contact us, or otherwise interact with Sellio.
A merchant may have its own privacy notice for its customers and staff. Where a merchant decides what customer or staff information to collect through its storefront or operations, that merchant is responsible for its own privacy obligations and Sellio processes the relevant information to provide the platform.
Information we collect
Account and profile information
We may collect your name, email address, phone number, sign-in details, profile preferences, account role, merchant membership and onboarding information. Authentication credentials are handled through our authentication services; we do not display your password to merchants or other users.
Merchant and storefront information
Merchants may provide business names, contact details, branch information, logos, banners, themes, product or service listings, descriptions, prices, categories, stock information, table details, operating settings and other material used to run or display a storefront.
Orders and customer information
When an order is placed or managed, Sellio may process order items, quantities, prices, fulfilment status, table or takeaway details, payment method or payment status, customer name and any contact or order information submitted for that transaction.
Billing information
Merchant plan purchases and subscription management are processed through Stripe. We receive billing records such as the plan, subscription status, billing period, currency, transaction identifiers and limited payment status information. Stripe, rather than Sellio, handles full card details.
Device, usage and support information
We may receive IP address, browser and device type, operating system, referring page, app activity, error and security logs, cookie identifiers, language and interface preferences, and information you provide when asking for support.
AI feature inputs
If you use Sellio AI features, we process the prompts, product images, business questions and related context you submit so the requested result can be generated. Please do not submit confidential, sensitive or unnecessary personal information to an AI feature.
How we collect information
We collect information directly from you, from merchants and their authorised staff, automatically through the website and app, and from services you choose to connect or use.
If you sign in with Google, Google provides the account information needed to authenticate you, such as your name, email address and profile identifier, according to the permissions shown during sign-in. You can manage the connection through your Google account.
Merchants may enter information about staff, customers, products or orders. Merchants are responsible for having an appropriate reason and, where required, permission to provide that information to Sellio.
How we use information
We use information where reasonably necessary to:
- create, authenticate, secure and administer accounts;
- provide storefronts, QR ordering, order management, inventory, reporting, staff permissions and merchant tools;
- process merchant subscriptions and maintain billing status;
- display merchant-provided content to customers and route order information to the relevant merchant;
- provide AI-assisted features requested by the user;
- send service, account, security, billing and support communications;
- detect misuse, investigate incidents and protect Sellio, merchants and customers;
- understand performance and improve the platform, where allowed by your cookie choice;
- comply with applicable law, enforce our terms and resolve disputes; and
- carry out another purpose explained at collection or authorised by you.
Under Singapore's Personal Data Protection Act 2012 (PDPA), we rely on consent and on other grounds permitted by law, including what is reasonably necessary to provide a service you requested, manage a contractual relationship, protect legitimate interests or comply with legal obligations.
Merchant, staff and customer data
For storefront customers: the merchant whose storefront you use is responsible for its products, fulfilment and customer relationship. Contact that merchant first about an order or its use of your information. You may also contact us where your request concerns the Sellio platform.
Merchant owners control who is invited to their workspace and what permissions staff receive. Staff should use only their own authorised account and access business or customer information only for legitimate work purposes.
Some merchant storefront details, product information and branding are intentionally public. Merchants should not publish personal information or content they do not have the right to make public.
International data transfers
Sellio is operated from Singapore, but some service providers may process or store information in other countries. Those countries may have privacy laws different from Singapore's.
Where the PDPA requires it, we take reasonable steps to ensure transferred personal data receives a standard of protection comparable to the protection under the PDPA, including through provider terms, contractual protections and security controls appropriate to the service.
How long we keep information
We keep information only for as long as it is reasonably needed to provide Sellio, administer an account or merchant relationship, maintain accurate business and transaction records, meet legal or tax obligations, resolve disputes, enforce agreements and protect the service.
Retention periods vary by data type. Account and active merchant data generally remain while the account or relationship is active. Order, billing, audit, fraud-prevention and backup records may be retained longer where reasonably necessary or legally required. When information is no longer required, we delete, anonymise or securely isolate it in accordance with our processes.
How we protect information
We use reasonable administrative, technical and organisational safeguards designed for the nature of the information and service, including authentication controls, role-based access, encrypted network connections, restricted administrative access, monitoring and service-provider security controls.
No online service can guarantee absolute security. You are responsible for using a strong password, protecting your sign-in method and devices, keeping staff access current, and promptly notifying us if you suspect unauthorised access.
Your rights and choices
Subject to the PDPA and its exceptions, you may ask to access personal data we hold about you, learn how it has been used or disclosed, correct an error or omission, or withdraw consent for future collection, use or disclosure. You may also ask us to close your account, delete information that is no longer needed, or stop optional processing.
Some requests may be limited where we must retain information, protect another person's rights, preserve security or transaction records, or comply with law. Withdrawing consent may affect our ability to continue providing features that depend on that information.
To delete your Sellio account, email sellio@apptelier.sg from the email address you sign in with, tell us it is a deletion request and why (see how to request account deletion). We will confirm with you before anything is deleted. If your account owns a store, we will also agree with you what happens to the store and its records so shared business data is protected.
To make another privacy request, email sellio@apptelier.sg with enough detail for us to identify you and understand the request. We may take reasonable steps to verify your identity. If the information is controlled by a merchant, we may direct the request to that merchant or assist it in responding.
Children
Sellio merchant accounts and administrative tools are intended for adults and authorised business users. We do not knowingly invite children to open merchant accounts or provide personal information through those tools.
Public storefronts may be browsed by a general audience. Merchants are responsible for ensuring their offerings and any customer information they request are suitable and lawful for their audience. If you believe a child has provided personal data to Sellio inappropriately, contact us so we can review it.
External links and third-party services
Sellio may link to merchant websites, payment pages, social platforms, maps or other third-party services. We do not control those services and this policy does not govern their independent privacy practices. Review the relevant third party's notice before providing information.
Changes to this policy
We may update this policy when Sellio, our providers or applicable requirements change. We will post the revised policy here and update the date above. If a change is material, we may also provide an in-app, account or email notice where appropriate.
Contact us
For privacy questions, requests or complaints concerning Sellio, contact:
Apptélier — Sellio Privacy
Singapore
sellio@apptelier.sg
We will review your message and respond within a reasonable period. If you remain dissatisfied, you may have the right to contact Singapore's Personal Data Protection Commission.