This policy describes how Techjedi LLP and Kyrovix Technologies (together, "we", "us", "our") handle personal data in connection with SELLOFY (the "Service"), a business software platform for customer messaging, CRM, automation, and related workflows, including optional third-party integrations such as Google Contacts sync and CRM connections, and platform review processes used to verify our service.
SELLOFY is owned and operated by Techjedi LLP and Kyrovix Technologies. We act as a data controller for account and product data associated with your organisation's use of the Service, subject to your agreement with us and applicable law.
Email: rajan@kyrovix.com
Address: Techjedi LLP, No 31, G1, 1st Cross St, Bharati Nagar, Ambattur, Chennai, Tamil Nadu 600053, India
Website: https://sellofy.app
This policy applies when you or your organisation use our website, web application, or APIs; configure messaging channels and automation features we make available; connect optional third-party services (for example, Google Contacts or CRM systems) through industry-standard OAuth authorisation flows; or import, synchronise, or otherwise process contact or customer records through the Service.
Where a third party processes data on our behalf, we require appropriate contractual safeguards. Where you connect a third-party account, that provider's terms and privacy notice may also apply to their processing outside our Service.
3.1 Account and organisation data: identity and contact details (e.g., name, business email, company name); authentication data (e.g., password hashes, session identifiers); role, permissions, billing identifiers, and support correspondence.
3.2 Service usage, configuration, and technical logs: product configuration, feature usage, and audit logs needed to operate and secure the Service; device, browser, and network metadata (e.g., IP address, approximate location, timestamps); error, performance, and security telemetry.
3.3 Messaging and customer interaction data: depending on features you enable, we may process message content, delivery metadata, conversation history, and contact identifiers necessary to deliver messaging workflows you configure.
3.4 Google Contacts integration (contacts.readonly scope): if you choose to connect your Google account, we request the OAuth scope https://www.googleapis.com/auth/contacts.readonly. This scope allows SELLOFY to read the contacts saved in a user's Google Contacts list. We never write, edit, or delete anything in a user's Google Contacts — access is read-only. We use this data solely to:
We do not use Google contact data for advertising, profiling, or marketing to contacts without your instruction; any purpose unrelated to features you have explicitly enabled in SELLOFY; or sale, transfer, or sharing with third parties for their independent use. OAuth tokens are stored securely and are never used to access any Google data beyond what this scope covers. You can revoke this access at any time from your Google Account permissions page at myaccount.google.com/permissions, or by disconnecting the integration inside SELLOFY.
3.5 Other optional integrations (CRM and OAuth connections): for other third-party integrations you activate (e.g., HubSpot CRM, Zoho CRM), we process only the categories of data required to provide the integration — typically authorisation tokens needed to maintain an authorised connection (we do not store third-party login passwords); imported or synchronised records such as contact names, phone numbers, email addresses, or CRM fields you select; and mapping metadata to reconcile updates and avoid duplicates.
3.6 Meta platforms (WhatsApp, Facebook and Instagram): if you connect a WhatsApp Business Account, a Facebook Page or an Instagram Business account, we process on your instructions: account identifiers and profile details (WhatsApp Business Account ID, phone number ID, Page ID and name, Instagram account ID and username); access tokens used to act on your behalf (stored securely, used only for your workspace, never sold); messages, message status events and contact details of people who message your business; and social content and engagement data such as posts, media, comments, replies and insights, plus posts you create, schedule or publish through the Service. We use this data only to provide the features you enable (messaging, campaigns, automations, publishing, comment replies, analytics). We do not use Meta platform data for advertising or sell it. Meta processes data under its own terms and privacy policies. You can disconnect a channel in the Service or remove SELLOFY in your Facebook Business Integrations or Instagram Apps and Websites settings. To delete data we hold, see our data deletion instructions.
3.7 LinkedIn: if you connect a LinkedIn profile, or a LinkedIn Company Page that you administer (through LinkedIn's sign-in and authorization screen), we receive and process, on your instructions: your name, profile photo and LinkedIn member identifier, shown in the Service so you can see which account is connected (LinkedIn also shares your email address when you sign in; we do not keep it); for a Company Page, the Page's name, logo and LinkedIn identifier and the fact that you administer it; an access token that lets us post on your behalf, or on behalf of the Page you connected (stored securely, used only for your workspace, and never sold; LinkedIn tokens last about 60 days, after which you reconnect); and the posts, captions and media you create, schedule, or publish to LinkedIn through the Service, with the identifier LinkedIn gives each post so we can show whether it went out. We use this data only to publish the posts you create and to show their status. We do not read your LinkedIn feed, connections, messages or notifications, we do not use LinkedIn data for advertising or profiling, and we do not sell it. LinkedIn processes this data under its own terms and privacy policy. You can disconnect LinkedIn at any time in the Service (connected accounts settings), or remove Sellofy in the Permitted Services settings of your LinkedIn account. To delete data we hold, follow our data deletion instructions.
3.8 YouTube (Google): the Service uses YouTube API Services. If you connect a YouTube channel (through Google's sign-in and authorization screen, where you choose the channel) we receive and process, on your instructions:
We use this data only to publish the videos you create and to show their status and numbers to you. We do not read your other videos, comments, subscribers or analytics, we do not use YouTube data for advertising or profiling, we do not share it with anyone else, and we do not sell it. Numbers we learn from YouTube are refreshed at least every 24 hours and are deleted when the connection ends.
By using the YouTube features of the Service you also agree to be bound by the YouTube Terms of Service. Google processes data under the Google Privacy Policy.
You can disconnect a channel at any time in the Service (Social Media, Accounts): we then tell Google, delete the tokens, and delete what we learned from YouTube (the channel's picture and handle, and the numbers on its videos). You can also remove SELLOFY's access at any time on Google's security settings page; when you do, we delete that data within 30 calendar days (in practice the next time we try the connection). We keep only the channel's name, so your past posts still say where they went; ask us to delete it too if you wish. For questions or complaints about our privacy practices write to rajan@kyrovix.com. To delete other data we hold, follow our data deletion instructions.
3.9 Knowledge base and uploaded materials: if you upload files or other materials, we process and store them to provide search, automation, or AI-assisted features you configure. We segregate tenant data and apply access controls designed to prevent unauthorised cross-tenant access.
3.10 Verification and compliance materials: where we submit our product for review by platforms or regulators, we may process a limited subset of documentation and product metadata necessary to demonstrate compliance. Such materials are handled confidentially and retained only as long as needed for the review process.
We process personal data to: provide, operate, and improve the Service; authenticate users and enforce multi-tenant data isolation; operate optional integrations you enable, including Google Contacts sync; detect abuse and protect security; comply with applicable law; and communicate about billing, incidents, and product changes. Depending on jurisdiction, legal bases include: performance of a contract, legitimate interests (balanced against your rights), legal obligation, and consent where required.
If you enable AI-assisted features, limited excerpts of content you submit may be transmitted to model providers strictly to generate responses or embeddings for your workspace. We do not sell personal data. We use infrastructure and service providers (hosting, databases, email delivery, security monitoring) under appropriate data processing agreements.
We may share personal data with messaging or channel providers you connect, to the extent required to deliver messages; with professional advisers, auditors, or authorities when required by law or lawful process; or in connection with a merger, acquisition, or asset transfer, subject to notice where practicable. We do not sell, rent, or share Google user data with third parties for their independent use. Google contact data is used only to provide SELLOFY features you have explicitly requested.
We retain information for as long as your account is active and for a reasonable period thereafter to resolve disputes, enforce agreements, and meet legal or security requirements. Integration tokens (including Google OAuth tokens) are refreshed or revoked according to provider rules and your account settings. You may request deletion at any time via sellofy.app/data-deletion. Aggregated or de-identified analytics may be retained longer where permitted by law.
We implement administrative, technical, and organisational measures appropriate to the risk, including access controls, encryption in transit and at rest, and continuous monitoring. No system is perfectly secure; please protect your credentials and report suspected incidents promptly to rajan@kyrovix.com.
Subject to applicable law, you may have rights to access, rectify, delete, restrict, object to, or port your personal data; disconnect third-party integrations (including Google) within the product; revoke Google account access directly at myaccount.google.com/permissions; or submit a full data deletion request at sellofy.app/data-deletion. To exercise your rights, contact us at info@techjedi.in. We will verify reasonable requests and respond within the timeframe required by applicable law.
Our use of Google APIs strictly complies with the Google API Services User Data Policy, including the Limited Use requirements.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Specifically:
contacts.readonly scope, which provides read-only access to a user's saved contacts in Google Contacts. For YouTube, and only if you connect a YouTube channel: the youtube.upload scope (upload videos and set thumbnails on your behalf) and the youtube.readonly scope (view your YouTube account: the channel's name and picture, and the public numbers of the videos you published through the Service). We never request write access to your contacts and no other Google permission;Where you enable other third-party API integrations (e.g., HubSpot, Zoho), your use of those features is also subject to the applicable provider's developer terms and data policies.
We may process data in multiple jurisdictions including India and other countries where our infrastructure providers operate. Where transfers require safeguards, we implement appropriate mechanisms (such as standard contractual clauses) consistent with applicable data protection laws.
The Service is intended for business users aged 18 and above. It is not directed to children. We do not knowingly collect personal information from children below the age at which parental consent is required in your region.
We may update this policy to reflect product, legal, or regulatory changes. We will revise the "Last updated" date and, where appropriate, provide additional notice (for example, in-product notification or by email) for material changes. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
Email: rajan@kyrovix.com
Address: Techjedi LLP, No 31, G1, 1st Cross St, Bharati Nagar, Ambattur, Chennai, Tamil Nadu 600053, India
Website: https://sellofy.app
Data deletion requests: https://sellofy.app/data-deletion