Privacy Policy

Who is responsible

Socialbug Apps LLC, a limited liability company registered in the State of Wyoming, United States (30 N Gould St Ste 56488, Sheridan, WY 82801, USA), operates sellwise.ly. We decide how account data and data about visitors to sellwise.ly are used, so we are responsible for that data.

When a merchant installs sellwise.ly on its own website, we process data about that website’s visitors on the merchant’s behalf and under its instructions. The merchant decides what is collected and is responsible for informing its visitors and for obtaining any consent its law requires.

Data we collect

Accounts: your email address, name, password (stored only as a hash), two-step verification settings, workspace and site settings, and a security log of sign-ins and account changes.

Demo requests: the name, email address, company and optional website you send us.

Visitors to sellwise.ly: the cookies and measurement described in our Cookie Policy.

Merchant websites: a random visitor ID, page views, product, cart and order events, approximate location (country, region and city derived from the IP address, which is not stored), device type and browser family. Where the merchant turns it on, session recordings with everything typed into form fields masked. The sellwise.ly script does not collect names, email addresses or payment details.

Google user data

You can connect Google Analytics, Google Search Console and Google Tag Manager to your sellwise.ly workspace. We request read-only access only: analytics.readonly, webmasters.readonly and tagmanager.readonly.

What we access: for the Google Analytics properties you choose, account and property names and report figures such as sessions, users, conversions, revenue and traffic sources; for the Search Console properties you choose, search queries, pages, clicks, impressions, click-through rate and average position; in Tag Manager, container and tag settings, to check that measurement is installed correctly.

How we use it: only to show these figures in your sellwise.ly dashboard next to sellwise.ly’s own measurements, and to check tag installation. We do not use Google user data for advertising, do not sell it, and do not use it to train general-purpose AI or machine-learning models.

Storage and deletion: the access token Google issues is encrypted at rest. Imported figures are kept while the connection is active. When you disconnect or delete your workspace we delete the token at once and the imported figures within 30 days.

Sharing: Google user data is not shared with anyone except the hosting providers listed below, which process it only to run the service. Our staff read it only with your permission for support, for security, or where the law requires.

sellwise.ly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time in sellwise.ly or at myaccount.google.com/permissions.

Meta advertising data

You can connect a Meta ad account to your sellwise.ly workspace through Facebook Login for Business. We request read-only access only (ads_read).

What we access: the names, IDs and currencies of the ad accounts you can read, and, for the ad account you choose, daily account-level figures: spend, impressions, clicks, and the purchases and purchase value Meta attributes to its ads. We do not access ad creatives, audiences, Pages or personal data about the people who saw your ads.

How we use it: only to show these figures in your sellwise.ly dashboard next to what sellwise.ly observed. We do not use Meta data for advertising, do not sell it, and do not use it to train general-purpose AI or machine-learning models.

Storage and deletion: the access token Meta issues is encrypted at rest. Imported figures are kept while the connection is active. When you disconnect or delete your workspace we delete the token at once and the imported figures within 30 days. Disconnecting also removes sellwise.ly from your Facebook Business integrations, unless another sellwise.ly workspace still uses the same Facebook login; you can remove it there yourself at any time.

Advertising identifier links

A merchant can turn on identifier links for a site. They are off by default, and the merchant confirms the choice when turning them on. While they are on, the sellwise.ly script reads the Google Analytics client ID (_ga) and the Meta browser and click IDs (_fbp, _fbc) that those tools have already set on the merchant’s website, and stores them next to the sellwise.ly visitor ID. The sellwise.ly script does not set these cookies itself.

How we use them: only to show the merchant, for that one site, how many purchases sellwise.ly observed from visitors who arrived through a Meta ad, next to Meta’s own figures. Links are never combined across sites or merchants, never used to build profiles across sites and never sent to Google, Meta or anyone else.

Storage and deletion: links are kept for 90 days. Turning the setting off deletes the site’s links at once, and a visitor deletion request removes that visitor’s links together with the rest of their data.

How we use data

To provide and secure the service, give support, send service emails such as password resets and security alerts, and improve sellwise.ly using aggregated figures. We do not sell personal data and we do not use it for advertising.

Legal bases

Where the GDPR or Türkiye’s KVKK applies, we rely on our contract with you, our legitimate interests in security and improving the service, your consent for optional cookies, and legal obligations.

Service providers and transfers

sellwise.ly is hosted by DigitalOcean in Frankfurt, Germany, and delivered and protected by Cloudflare. Service emails are sent by our mail provider. Google, Meta and Shopify receive requests only when you connect them. We disclose data to authorities only where the law requires.

Some providers are based in the United States. Transfers rely on the EU–US Data Privacy Framework or standard contractual clauses and, for Türkiye, on the standard contracts required by the KVKK.

Retention

Visitor events are kept for 90 days, session recordings for 30 days and demo requests for 30 days. Account data is kept while your account is open; after it is closed we delete or anonymize it, except security and legal records we must keep. Backups are kept for up to 14 days.

Security

We encrypt traffic with TLS, store passwords only as hashes, encrypt connection credentials, offer two-step verification, limit access by role and keep an audit log of sensitive changes.

Your rights

You can ask to access, correct, delete, restrict or export your data, object to its use, and withdraw consent at any time. Write to [email protected]. If you visited a merchant’s website, contact the merchant first; we will help it answer.

You can also complain to a data protection authority, such as the Personal Data Protection Authority in Türkiye or the authority in your EU country.

Children

sellwise.ly is a business service and is not directed at children under 16.

Changes

We update the date at the top when this policy changes and tell account holders by email about material changes.