Privacy Policy
The short version
- We collect what we need to sell or deliver your things: your WhatsApp number and name, your messages and item photos, your postal code and address, and your PayNow number if you sell.
- We use it to run Selutiq. We never sell your personal data.
- We share only what's needed: buyers see the item, not your number; couriers get pickup and delivery details; our payment, AI and hosting providers process data for us.
- We follow Singapore's Personal Data Protection Act 2012 (PDPA).
- Message "DELETE" on WhatsApp, or email privacy@selutiq.com, to access, correct or delete your data.
- Who we are
- What we collect
- How we use it
- AI and automated decisions
- Who we share it with
- Data stored outside Singapore
- Marketing messages
- How long we keep it
- How we protect it
- Your choices and rights
- Our website
- Children
- Changes and contact
1. Who we are
Selutiq is currently a free, invite-only beta run by its founder in Singapore. Selutiq Pte. Ltd. is being registered and will take over running Selutiq once it is. We're responsible for your personal data under the PDPA. When the company takes over, we'll update this policy and tell you.
You can contact our Data Protection Officer (DPO) at privacy@selutiq.com or on the Selutiq WhatsApp number you chat with.
This policy explains what personal data we collect when you use Selutiq on WhatsApp or our website, why, and what you can do about it. It should be read with our Terms of Service.
2. What we collect
| Who | What | Where it comes from |
|---|---|---|
| Everyone | WhatsApp phone number and profile name; the messages, photos, button taps and voice notes you send us; when you consented to things | You, through WhatsApp |
| Sellers | Item photos and details (condition, defects, accessories), prices and floor price, postal code and pickup address, PayNow number, sales history | You |
| Buyers | Offers, delivery address, wishlist requests, purchase history, problem reports and photos | You |
| Payments | Payment status, amount, method, and the last 4 digits and brand of a card. We don't see or store full card numbers. For seller payouts, the payment provider may collect identity details to meet its legal checks. | Our payment provider |
| Delivery | Pickup and delivery status, tracking, and proof-of-pickup or delivery photos | Couriers |
| Waitlist | First name, WhatsApp number and/or email, what you'd sell, whether you mostly buy or sell, your consent | You, on our website |
| Technical | Message IDs and timestamps from WhatsApp; IP address, browser and pages visited on our website (in server logs) | WhatsApp, our hosting provider |
What we don't want. We don't need and won't ask for your NRIC number. Please don't send photos showing people, documents, addresses or anything else personal beyond the item. If you do, we may crop, blur or delete them.
3. How we use it
We use personal data only for these purposes, which we've told you about and which you consent to by using Selutiq, or where the PDPA otherwise allows:
- To list and sell your items: identifying items, writing listings, suggesting prices, showing listings on Selutiq and other places described in our Terms, and handling questions and offers.
- To complete purchases: taking payment, holding it, paying sellers out by PayNow, booking couriers, sending tracking updates and receipts.
- To remember you so we ask for each fact only once, such as your address or PayNow number.
- To keep Selutiq safe and fair: checking for prohibited items, fraud and abuse, resolving disputes, and enforcing our Terms.
- To send you service messages, such as offers, payment and delivery updates, and changes to our Terms.
- To send you marketing, only if you agreed (see section 7).
- To improve Selutiq: understanding how it's used and testing the AI agent on past conversations so it gets better. Where we can, we remove names and numbers first.
- To meet legal duties: keeping accounting and tax records, and responding to lawful requests from authorities.
If we want to use your data for a new purpose, we'll tell you and, where needed, ask for your consent first.
4. AI and automated decisions
- Selutiq's agent is an AI. Your messages and photos are processed by an AI model provider (currently Anthropic) to understand them and write replies. We use the provider's business service, under terms that don't allow it to use your data to train its models.
- Money decisions, such as fees, floor prices and whether an offer can be accepted, are made by fixed rules in our system, not by the AI.
- Some decisions are automatic, such as flagging a listing as a possible prohibited item. If an automatic decision affects you and you disagree, reply in the chat and a person will review it.
- Our team may read conversations to handle disputes, flagged cases or your requests, and to check the AI's quality.
5. Who we share it with
We never sell your personal data. We share it only as follows:
| With | What and why |
|---|---|
| Buyers (if you sell) | Your listing: photos, description, price, and the general area for delivery estimates. Not your phone number, name, PayNow number or full address. The courier sees your pickup address. |
| Sellers (if you buy) | Your offer and the questions you ask. Not your phone number. Your delivery address is shared with the courier, not the seller, unless you choose a meetup. |
| Couriers | Name, phone number, pickup or delivery address and order code, so they can collect and deliver. Currently Ninja Van, J&T, uParcel, Lalamove or GrabExpress, depending on the delivery option. |
| Payment providers | Payment and payout details, to take and hold payments and pay sellers. Currently Stripe, and possibly HitPay later. |
| Meta (WhatsApp) | Our chats with you go through the WhatsApp Business Platform. Meta's own privacy policy also applies to your use of WhatsApp. |
| Service providers | Companies that run parts of Selutiq for us: AI processing (Anthropic), hosting and databases (Render), photo storage (Cloudflare), our website and waitlist (Netlify), postal code lookup (OneMap, run by the Singapore Land Authority), email, and our internal team alerts. They may use the data only to provide their service to us. |
| Other marketplaces | If your item is also listed elsewhere (for example eBay), we share the item's photos, description and price only. We list it under Selutiq's account, not your name. |
| Social media | We may feature listed items in posts on Instagram, TikTok and similar channels. We use item photos and details only, never your name or number, unless you agree. |
| Authorities and advisers | Where the law requires it, to prevent fraud or harm, to deal with legal claims, or with our lawyers, accountants and auditors. |
| A new owner | If Selutiq is merged or sold, your data may pass to the new owner, who must keep protecting it under this policy. |
6. Data stored outside Singapore
We keep our main database and servers in Singapore where we can. Some providers, including Meta, Anthropic, Stripe, Cloudflare and Netlify, may process data in other countries such as the United States. When data leaves Singapore, we make sure it gets protection comparable to the PDPA, using contracts with the provider and checking its security, as the PDPA requires.
7. Marketing messages
- We send marketing messages (for example new features, promotions or "anything else to sell?" reminders) only if you've agreed to receive them.
- Wishlist alerts you ask for, and messages about a sale in progress, aren't marketing.
- Send "STOP" at any time and we'll stop marketing messages and reminders straight away. STOP also cancels any listing you're in the middle of creating. You'll still get messages about sales in progress and anything you ask us for.
- We follow Singapore's Do Not Call rules. We won't send marketing to a number on the Do Not Call Registry unless you've clearly agreed to hear from us.
8. How long we keep it
We keep personal data only as long as we need it for the purposes above or the law requires, then delete it or make it anonymous.
| Data | How long |
|---|---|
| Waitlist signups | Until 12 months after launch, or until you ask us to delete them |
| Conversations and listings | 2 years after your last activity |
| Item photos | 90 days after the listing ends, unless needed for a dispute |
| Saved address and PayNow number | Until you ask us to delete them, or 2 years after your last activity |
| Orders, payments and fees | 5 years after the end of the financial year of the sale, as needed for tax and accounting records |
| Disputes and fraud records | Up to 5 years after the matter is closed |
| Website server logs | As set by our hosting provider, usually under 30 days |
9. How we protect it
- Data is encrypted when it travels over the internet, and stored with access limited to the people and systems that need it.
- Sensitive details like your address and PayNow number get extra encryption in our database.
- We check every WhatsApp message really comes from WhatsApp, use two-factor sign-in on all our accounts, and keep an audit log of important actions.
- Our AI agent is designed so other users' messages can't make it reveal your data.
No system is perfectly secure. If a data breach is likely to cause you significant harm, or affects 500 or more people, we'll notify the Personal Data Protection Commission within 3 calendar days of confirming it, and tell affected people as soon as we can, as the PDPA requires.
10. Your choices and rights
Under the PDPA, you can:
- Access your personal data, and ask how it's been used or shared in the past year.
- Correct data that's wrong or incomplete. You can also just tell the agent the right details.
- Withdraw consent to us using your data. We'll tell you what that means first. For example, we can't keep selling your items without it.
- Ask us to delete your data. Send "DELETE" on WhatsApp and confirm. We'll remove your listings and their photos, your saved postal code, address and PayNow number, and our chat history, and unlink your number so any later message starts fresh. If a sale is in progress, we'll ask you to send DELETE again once it's finished. We keep records of finished sales, without delivery addresses, for tax and legal purposes.
- Move your data to another organisation, once the PDPA's data portability rules come into force.
To do any of these, message us on WhatsApp or email privacy@selutiq.com. We may need to confirm it's really you, usually by replying from the same WhatsApp number. We'll reply within 30 days, or tell you within that time when we can. Access requests are free unless they're unusually large, in which case we'll tell you any fee upfront.
If you're not happy with our response, you can complain to the Personal Data Protection Commission.
11. Our website
- Our website doesn't use advertising or tracking cookies. [Update this if analytics or ad pixels are added.]
- It loads fonts from Google Fonts, which means your browser connects to Google and shares your IP address with it.
- Our hosting provider (Netlify) keeps basic server logs and stores waitlist form entries.
12. Children
Selutiq is meant for adults. If you're under 18, please use it only with a parent or guardian's permission. If we learn we've collected data from a child without that permission, we'll delete it.
13. Changes and contact
We may update this policy as Selutiq changes. We'll post the new version here with its date, and tell you on WhatsApp about important changes before they apply.
Questions or requests: privacy@selutiq.com · the Selutiq WhatsApp number you chat with · Data Protection Officer, Selutiq, Singapore.