How Sellee handles your information.

1. Introduction

We love our community at Sellee. It's extremely important to us that you feel comfortable letting Sellee list, describe, negotiate and conclude the sale of your things on your behalf and that you understand exactly what we do with your information while it does.

This Privacy Policy explains what personal information Sellee collects, why, who we share it with, and the choices and rights you have. It applies to your use of Text Sellee (the hosted service you access by messaging Sellee), to a much more limited extent, Sellee Local (the open-source, self-hosted version, see Section 2 for why) and the use of our websites, mobile and services (“Services”). This Policy supplements, and should be read together with, the Sellee Terms of Service and, the carousell.ai Privacy Policy and carousell.ai Terms of Service. Using Sellee automatically creates a linked guest account for you on carousell.ai (identified by your mobile number or Apple ID if you use Text Sellee, or only by your country if you use Sellee Local). The carousell.ai Privacy Policy governs that account, your published Listings and the transaction itself.

This Privacy Policy is provided by Carousell Inc., a corporation incorporated in the United States ("we," "us," or "our"). Text Sellee is currently offered only to individuals in California, United States; see Section 4 (Geographic Scope) of the Sellee Terms of Service. We do not offer Text Sellee to, or knowingly collect the personal data of, individuals in the United Kingdom or European Union. Sellee Local can be run by anyone, anywhere, but because it runs on your own equipment, we receive only the limited information described in Section 2.

Capitalised terms used but not otherwise defined in this Privacy Policy have the meaning given to them in our Sellee Terms of Service.

2. Information We Collect and Receive

We may collect and receive information from you in the following situations:

• When you establish your Sellee Identity.
• When you choose to connect with a Third-Party Marketplace or an external third-party service or application, such as Facebook or Google.
• When you use the features and functions available on our Services, for example, by creating Listings, interacting with other users through our chat feature, or transacting with other users.
• If you contact us, for example, with a query or to report a problem.
• When you interact with us offline or through an external third party.

You are under no obligation to provide the information to us. However, if you choose to withhold the information or to revoke permission for us to receive the information, we may be unable to provide certain aspects of our Services to you.

We may collect and receive the following information. Please note that not all of our Services collect all of the information listed below:

From Sellers using Text Sellee

When you message Sellee to list an item, we collect:

• The mobile number or Apple ID you message us from, which is how we recognise you (your "Sellee Identity"), and profile information such as your country and timezone.
• The chat messages with other users, messages you exchange with Sellee, the photographs you send, and the item details our software derives from them.
• A record of your preferences and past activity (for example, your previous Listings and how you like to negotiate), linked to your Sellee Identity, so that Sellee can personalise how it acts for you. This record is kept separately for each user and is not used to respond to other users.
• Usage counters and message delivery records, so we can apply fair usage limits and keep the service running reliably.
• Your general location (such as your city or neighbourhood), which Sellee may share with prospective buyers who ask where an item ships from. Sellee does not share your exact pickup address with buyers.
• If you share another person's personal data with us through Sellee (for example, forwarding a buyer's message), see the note at the end of this section.

From Buyers

When someone buys an item that is facilitated through Sellee, we collect their delivery address and mobile number to facilitate the delivery of the item purchased and any personal data they choose to share with the seller in chat. If you use Text Sellee and your Listing is published on a Third-Party Marketplace, we also receive prospective buyers' messages, and the profile information that marketplace shows us (such as their display name), through the account we hold on that marketplace, so that Sellee can respond and negotiate on your behalf.

From Sellee Local

If you run Sellee Local (the self-hosted, open-source version) instead of Text Sellee, your data such as floor price, conversation and your photographs before upload stay on your own equipment and are never sent to us. The only thing that reaches us is the Listing you choose to publish, submitted the same way any other seller's Listings would be. We have no visibility into, and no responsibility for, anything that happens on your own machine before that point. The AI model or subscription you connect to Sellee Local, and the messaging platform you use with it (such as Telegram or Discord), process your information under their own terms and privacy policies, which we do not control.

Browser control (Sellee Local only)

Where Sellee Local operates a browser on your device to access a Third-Party Marketplace, it does so only after you sign in to that marketplace yourself, and we never receive your login details. Text Sellee does not access your browser or your own marketplace accounts.

The Sellee Chrome extension connects your own Sellee gateway to your Chrome browser. It has a single purpose: let Sellee see and operate the specific tabs you explicitly share with it, and send page text to that agent when you ask.

• The extension requests no host permissions. It cannot read arbitrary pages you visit.
• Tabs you place in the Sellee tab group are the consent boundary: the extension attaches Chrome's debugging interface only to those tabs so your gateway can read and drive them. Removing a tab from the group, clicking the toolbar toggle, or dismissing Chrome's debugging banner revokes access immediately.

By providing us with any information relating to a third party (e.g. if you forward a message containing information about a third person), you represent to us that you have validly obtained the consent of the third party to provide us with their information for the respective purposes. See Section 11 of the Sellee Terms of Service for the commitments you make about that.

3. Your Interactions with Others

Our Services offer features that allow users to connect and communicate on platforms that are public or semi-public, and to share information with each other to complete a transaction. Please use common sense and exercise good judgment when sharing information in these groups or with others. We generally do not monitor or remove the information that you share and such information may remain available on our Services after your Account has been deactivated, terminated, or is otherwise closed. You are responsible for the information you choose to share on these platforms or with other users.

As set forth in Sellee Terms of Service, if you come in possession of another user’s (“Disclosing Party”) personal data through the use of the Services you agree that you will, among other things:

1. comply with all applicable personal data protection laws with respect to any such data, including any collection, processing, storage or transfer of such data;
2. allow Sellee or the Disclosing Party whose personal data you have collected to remove his or her data so collected; and
3. not retain it for longer than necessary to complete the transaction, and delete or return it upon request, except where a legal or regulatory requirement requires you to keep it longer. Also, where applicable, instruct any third party to whom you have disclosed that personal data for the agreed purpose to return it to the Disclosing Party or delete it, in each case, in compliance with, and where required by, applicable law.

We act solely as your data intermediary with respect to any buyer personal data processed through the Services, have no direct relationship with your buyers, and are not responsible for your compliance with the applicable data protection laws.

4. Why We Collect Your Information and How We Use It

We may use the information collected and received from you for the following purposes and any other purposes that we notify you of at the time of obtaining your consent:

• Recognise you when you message us again, and maintain your Sellee Identity.
• Keep a record of your preferences and past activity, linked to your Sellee Identity, so that Sellee can personalise how it acts for you.
• To develop, operate, improve, deliver and maintain our Services.
• Work out what your item is from your photographs, research recent selling prices, and write your Listings.
• Negotiate with prospective buyers on your behalf, within the limits you set.
• Check your Listings against relevant Prohibited Items guidelines before it's published.
• Publish your Listing to carousell.ai and any Third-Party Marketplace (if you use Text Sellee, using an account we hold on that marketplace).
• Facilitate delivery, by passing the necessary details to our courier partners.
• Apply usage limits, investigate misuse, and keep the Service secure.
• Respond to your messages, queries and resolving complaints.
• To detect or monitor any frauds or other prohibited content, businesses or activities. We retain a copy of all communications, which may be utilised to address such issues.
• Comply with our legal and regulatory obligations, including under anti-money-laundering and sanctions law.
• To enhance your customer service experience. This includes using AI to provide real-time answers in chat interactions, analyse customer service conversations to identify areas for improvement and understand common customer issues, and assist our support team in responding to your inquiries more efficiently and effectively.
• To facilitate, confirm and/or provide updates or notifications in relation to any transactions, update you on your Listings and send you service-related messages including, without limitation, a welcome/confirmation email when you register your Sellee Identity and to enforce our Sellee Terms of Service and other policies. These messages are not promotional in nature. These messages will be sent by email and/or through the messaging channel you use to contact us (for example Apple’s messaging app or Telegram) and you may not opt-out of receiving service-related messages from us, unless you deactivate your account. You can stop all messages at any time by replying "STOP" (or telling Sellee in your own words), as described in Section 9 of the Sellee Terms of Service.
• Perform functions or services as otherwise notified to you at the time of collection such as to publish and/or use for our marketing purposes, your feedback, and stories.
• In de-identified, aggregated form only ("Anonymised Data"), to train and improve Sellee's own pricing, negotiation, and Listings-generation logic, including using feedback you send us (see Section 21 of the Sellee Terms of Service). Anonymised Data cannot reasonably be used to identify you or any buyer. We will keep and use it only in that form, will not attempt to re-identify it, and require any Group company or other party we share it with to do the same.

5. Use of Artificial Intelligence Tools

We may use artificial intelligence tools (“AI Tools”) to provide our Services, such as to help us manage and generate responses to you and analyse chat messages, photographs, generate Listings content, publish Listings and negotiate and finalise transactions with prospective buyers on your behalf. Where a response you receive from us has been generated by or with the assistance of AI Tools, we will let you know that you may be corresponding with an AI-assisted service. If you use Text Sellee, you may, at any time, let us know that you would prefer to speak with a member of our team rather than our AI-assisted agent and we will arrange for a member of our team to assist you directly. If you use Text Sellee, we share your Content with our AI providers only to the extent needed to provide the Service. If you use Sellee Local, the AI functionality is provided by the AI model or subscription you connect, under that provider's own terms. No personal information is or will be used to train or fine-tune any underlying generative AI model. Where we use information to improve Sellee's own logic, we use Anonymised Data only (see Section 4).

6. Who We Share Your Information With

Sellee sends commands, content, and device capability data to the gateway you configure. That gateway may be local, on your tailnet, self-hosted, or operated by someone else. We share your information only where it's necessary to provide the Services or for purposes to which you have consented, and we do not sell or share your personal information with advertisers or data brokers, and we do not share it for cross-context behavioral advertising.

We may disclose your personal information to third parties, such as the following:

• Our AI providers, to enable us to provide and maintain the Services. Such AI providers may see your Content and relevant conversation only to the extent needed to provide the Services, for example to recognise your item, write your Listings and negotiate with buyers on your behalf.
• The messaging provider you choose to use to contact us (for Text Sellee, Apple, through its Messages app). When you message Sellee, your messages, and our replies to you, are carried and stored by that provider at your direction and under its own terms and privacy policy, which we do not control.
• Contractors, agents, service providers and other third parties who assist us in performing certain aspects of our Services on our behalf, such as processing or hosting of the Services and Content, receiving and sending communications, updating marketing lists, analysing data, providing support services or in other tasks.
• Enabling us to use customer relationship management, communications, and marketing tools, including AI Tools, to manage our relationship with you and respond to your enquiries and, where you have consented, to facilitate marketing and re-engagement communications with you.
• Buyers or sellers you have transacted with or interacted with on carousell.ai or any other Third-Party Marketplace or in connection with your use of the Services for the above-stated purposes;
• Third-Party Marketplaces (currently Facebook Marketplace and Craigslist), where you have instructed Sellee to publish your Listing. If you use Text Sellee, we publish and manage your Listing using an account we hold on that marketplace, so your Listing content (such as photographs, description and price) and Sellee's messages with prospective buyers are shared with, and held by, that marketplace under its own terms of service and privacy policy. Any sale is completed through checkout on carousell.ai unless you choose to arrange payment and delivery yourself. If you use Sellee Local, Sellee publishes your Listing using your own account on that marketplace, which you sign in to yourself. These Third-Party Marketplaces are not our vendors and we cannot require them to sign a data processing agreement with us. We do not at any time collect or have access to your login information for any of these Third-Party Marketplaces.
• Related companies within our Group for the purposes of performing certain aspects of our Services and the purposes as stated in this Privacy Policy, including other companies within our Group which provide customer relationship management, communications, and marketing tools (including AI Tools) used to operate aspects of our Services, and subject to obligations of confidentiality and data protection no less protective than this Privacy Policy;
• If we are involved in strategic transactions, reorganisation, bankruptcy, receivership, or transition of service to another provider (collectively, a “Transaction”), your personal information may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
• Regulators, law enforcement, or other parties, where required by law, to protect our rights or the safety of our users, or to enforce our terms.

Such third parties will only have access to your personal information to the extent necessary to perform their functions or required by law.

Third-party service providers we work with include:

• Google: Gemini and Google Cloud (hosting and storage)
• Anthropic: AI provider for Text Sellee
• Stripe: payment service provider

7. Transfer of Information

Several of the parties described in Section 6, such as our AI providers, companies within our Group, and our cloud infrastructure provider operate outside California, and your information may accordingly be processed outside the United States.

By using our Services, you authorise us to use your information in Singapore, the United States, Taiwan and other countries where our Group operates for the purposes mentioned above. Where that happens, we require those parties to protect your information to a standard comparable to what this Privacy Policy describes.

8. Protecting Your Information

The security of your information is important to us. We put in place reasonable security arrangements to protect your privacy and personal information in such manner and to such extent as we deem reasonably appropriate to prevent unauthorised access, collection, use, disclosure, processing, copying, modification, disposal or similar risks. However, no method of transmission or storage is 100% secure and while we strive to use commercially acceptable means to protect your information, we do not guarantee absolute security in any way, and you should not expect, that your personal information or private communications will always remain private and/or safe from any unauthorised access or misuse by third parties.

Your personal information to be used by us is stored on our and/or its data centre providers’, and cloud service providers’ and other service providers’ servers located in Taiwan. We use such procedural and technical safeguards as we deem reasonably necessary to protect your privacy and to protect your personal information against loss, theft and unauthorised access, collection, use, disclosure, processing, copying, modification, disposal, or similar risks. Such safeguards include but are not limited to the use of encryption and firewalls. We will also employ appropriate security techniques to reasonably protect your personal information against loss, theft, and unauthorised access, collection, use, disclosure, processing, copying, modification, disposal, or similar risks.

We do not represent or warrant that there will not be any loss, theft, or unauthorised access, collection, use, disclosure, processing, copying, modification, disposal or similar actions with regard to any data held or maintained by us.

9. How Long We Keep Your Information

We retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Data depends on the type of data, how we use it, and in certain cases your settings. Retention periods (where applicable) include:

• Order and transaction records: retained for a minimum of 7 years to comply with tax, accounting, and legal obligations
• Sellee Identity: retained for the duration of your active account plus 3 years after account closure
• Marketing preferences: retained until you withdraw consent or unsubscribe
• Customer support communications: retained for the duration of your active account plus such period after account closure in accordance with our internal policies.
• Website analytics data: retained per our service providers’ standard retention schedules (typically 14–26 months)
• When you ask us to delete your personal data, we retain the audit record of the erasure request to be able to verify that we have complied with the request.

If you are using Text Sellee:

• Your prompts and conversations will remain available to you via the channel you use to contact us (such as Apple's Messages app (iMessage)) so that you can see your conversation history. Copies of your conversations held by your messaging provider (for example, Apple) are governed by that provider's own policies. Deleting a conversation in your messaging app does not delete the copy we hold; to ask us to delete it, reply "DELETE" (see below).
• You can request for us to delete your personal information by replying "DELETE," we will then remove your carousell.ai Listings, use reasonable efforts to request removal of any Listings we placed on Third-Party Marketplaces on your behalf, and delete or de-identify your Content and Sellee Identity within the time required by applicable law, except where we need to keep information to resolve an open dispute, to meet tax, legal or regulatory requirements, or to enforce our Sellee Terms of Service.

If you use Sellee Local, this section largely does not apply to you: your personal information stays on your own equipment, under your own control and generally remains there until you remove it. The Listing you publish to carousell.ai and the country identifying your carousell.ai guest account are governed by the carousell.ai Privacy Policy.

When retention periods expire, we securely delete or anonymise personal information. You may request earlier deletion subject to applicable legal requirements.

In determining these retention periods, we consider a number of factors, such as:

• Our purpose for processing the personal information (such as whether we need to retain it to provide our Services);
• The amount, nature, and sensitivity of the information;
• The potential risk of harm from unauthorised use or disclosure;
• Any legal requirements that we are subject to.

Notwithstanding the generality of the foregoing, data handled by your gateway or any connected third-party service is retained according to that service's own configuration and policies. We cannot guarantee deletion of copies held by other Third-Party Marketplaces where we listed an item on your behalf. Taking a Listing down removes it from public view on that marketplace, but we do not control, and cannot compel deletion from, systems operated by those other companies. Our partners may keep their own records for their own reasons and retention periods.

10. What We Do Not Do

We do not:

• Sell your personal information.
• Share, rent, release, disclose, disseminate, make available, transfer or otherwise communicate orally, in writing, or by electronic or other means, your personal information) to any third party) for cross-context behavioral advertising).
• Collect any Sensitive Personal Data (as defined under the California Consumer Privacy Act).

11. US State-Specific Rights and Choices

If you are a California resident, you have the following rights under the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”):

• Right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes for collecting it, and the categories of third parties we have disclosed it to.
• Right to delete personal information we have collected from you, subject to certain exceptions (for example, to complete a transaction you requested, or to comply with a legal obligation).
• Right to correct inaccurate personal information we hold about you.
• Right to opt out of the sale or sharing of your personal information. We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising, so there is currently nothing to opt out of, we'll update this Policy if that changes.
• Right to limit the use of sensitive personal information. Using Sellee does not involve sensitive personal information: we do not require payment card details and the identity document Stripe requires for its own compliance with relevant regulations is collected and held by Stripe directly, not by us, for the purpose of processing your payment.
• Right to non-discrimination for exercising any of these rights.

To submit a request, contact us at dpo@sellee.ai or, if you use Text Sellee, reply "PRIVACY" (or tell Sellee in your own words) and we will pass your request to our data protection team. We will respond within the timeframe required by applicable law. We may verify your identity before processing your request.

12. Children

Sellee is not directed to, and we do not knowingly collect personal information from, anyone under 18 years old. By using Sellee, you represent that you are at least 18. If we learn that we have collected personal information from someone under 18, we will take steps to delete it. If you believe a minor has used Sellee, please contact us at dpo@sellee.ai.

13. Third-Party Marketplaces and Sites

Where you've chosen to have your Listing published on a Third-Party Marketplace, that marketplace's own privacy policy and terms govern how it handles the information visible there, and this Privacy Policy does not apply to it. We are not responsible for the privacy practices of any Third-Party Marketplace or other site linked from the Service.

14. Tracking Technologies

We and our service providers use cookies, pixels and similar technologies on our websites. These include standard cookies needed for our websites to work, Google Analytics to help us understand how visitors use our websites. These technologies may collect information such as your IP address, browser and device type, the pages you visit and how you interact with them. You can block or delete cookies through your browser settings, although some parts of our websites may not work properly if you do.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make a material change, we will notify you by posting an updated notice on the Service or by message or email. The "Last Updated" date at the top of this Privacy Policy tells you when it was last revised.

16. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact our Data Protection Officer at dpo@sellee.ai or, when using Text Sellee, reply "PRIVACY".

17. Conflict

This Privacy Policy is prepared in English. If it is translated into another language and there is a conflict between the English version and the translated version, the English version will prevail.