Privacy Policy

Who we are

Selda ("we", "us") is operated by Selda Oy, a limited company registered in Finland (business ID 3546628-1), registered address Viipurinkatu 12 L 122, 00510 Helsinki, Finland. Our website is selda.ai. Selda Oy is the data controller for the personal data described in this policy, except where we act as a processor on your behalf (see "Data roles" in our Terms of Service). This policy explains what data we collect, how we use it, and your rights. For any privacy matter, contact privacy@selda.ai.

What we collect

• Account data: email address, name, and organization details when you sign up.
• Website data: URLs you submit for analysis and the content we extract from them (page text, branding, metadata).
• Lead data: contact information discovered during research (names, emails, titles, companies) from publicly available sources.
• Outreach data: messages you send through Selda, delivery status, opens, replies, and meeting bookings.
• Social channel data: when you connect social accounts (LinkedIn, Reddit, Discord) via our provider partner, we store connection status and account identifiers. We do not store your social media passwords.
• Usage data: pages visited, features used, session duration, and device information for product improvement.
• Payment data: handled by our payment processor. We do not store credit card numbers.

How we use it

• Provide the Selda service: business analysis, market research, lead discovery, message generation, email sending, social channel outreach, and meeting scheduling.
• Improve the product using aggregated, anonymized analytics.
• Send transactional emails (account confirmations, billing receipts, campaign notifications).
• Detect and prevent abuse, fraud, and spam.

We do not sell your data to third parties.

Business contact database

Selda maintains a database of business contact and company information (names, job titles, work email addresses, company details) collected from publicly available sources such as company websites and public business registries, and from licensed data providers. For this database, Selda acts as the data controller. We process this data on the basis of our legitimate interest in facilitating relevant business-to-business communication.

• We store professional information only: name, job title, work contact details, and company information. We do not collect information about private life.
• Company facts and business contact details may be reused across Selda customers to improve lead discovery. Customer campaign content, messages, replies, and results are never shared between customers.
• Records are refreshed against their sources, and inactive records are deleted after 18 months.
• If your contact information appears in this database, you may object to processing or request deletion at any time by emailing privacy@selda.ai. Removed contacts are excluded from future collection.

Legal bases

• Performance of contract: providing the Selda service to you (account, campaigns, billing).
• Legitimate interest: the business contact database described above, service security, abuse prevention, and product improvement.
• Consent: analytics cookies and optional integrations you connect.

Third-party services

Selda uses trusted third-party services to provide the product, including:

• Cloud infrastructure: database, hosting, and real-time processing on EU-based infrastructure (Convex, Vercel).
• Authentication provider: secure login and user management (Clerk).
• Email delivery: sending outreach emails and tracking delivery (Mailgun, EU region).
• Payment processing: secure payment handling (Stripe). We do not store credit card numbers.
• AI models: research, analysis, and message generation. Prompts may include business and lead data; AI providers are contractually restricted from training on this data where such controls are available.
• Lead discovery and enrichment: finding publicly available business contact information (e.g. Hunter, web crawling, public company registries such as PRH).
• Social channel connections: connecting LinkedIn and other social accounts via an integration partner.
• Calendar integration: meeting scheduling.

Each provider processes data according to their own privacy policy. We only share the minimum data necessary for each service to function. We may update this list as the service evolves; material changes are reflected on this page.

International transfers

Primary data storage is in the EU. Some service providers (such as AI model providers and authentication) process data in the United States or other countries outside the EEA. Where data is transferred outside the EEA, we rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework as the transfer mechanism.

Outreach tracking

Emails sent through Selda may include open and click tracking so that you and our customers can see whether messages were delivered, opened, and responded to. Replies to outreach are processed in the sender's Selda inbox. If a Selda customer installs our tracking snippet on their own website, Selda processes that website's visitor data on the customer's behalf as a processor; the customer is responsible for their own visitor disclosures.

Automated processing

Selda uses AI to analyze businesses, score leads, and draft messages. Outreach is not sent fully automatically: a human reviews and approves campaigns before sending. We do not make automated decisions that produce legal or similarly significant effects on individuals.

Data storage and retention

All primary data is stored on EU-based infrastructure. Data is encrypted at rest (AES-256) and in transit (TLS 1.3). We retain your data for as long as your account is active. After account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g. bookkeeping under the Finnish Accounting Act) or for fraud prevention or legal defense. Backups may persist for a limited period before being overwritten. Operational logs (IP address, device/browser, events, timestamps) are retained for up to 90 days for security and troubleshooting. Business contact database records follow the 18-month retention described above. Waitlist and marketing list entries are removed on unsubscribe or on request.

Security and breach notification

Access to production data is restricted and logged. Our team accesses customer account data only for support, troubleshooting, and quality assurance. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected customers without undue delay, as required by GDPR.

Cookies & tracking

We use cookies and similar technologies in the following categories:

• Strictly necessary: sign-in, session, security, and consent storage. Set on the basis of legitimate interest / contract; no consent required.
• Analytics & performance: understanding product usage and diagnosing errors. Set only with your prior consent.
• Functional: remembering preferences such as language and layout.
• Marketing: measuring campaigns, where applicable, only with your consent. We do not sell or share personal data for cross-context behavioral advertising.

You can give, manage, or withdraw consent at any time through our cookie banner or your browser settings. Disabling non-essential cookies does not affect core functionality. Analytics cookie identifiers are kept no longer than 13 months, after which they are deleted or anonymized.

Your rights

Under GDPR and applicable data protection laws, you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Object to or restrict processing.
• Withdraw consent at any time.

These rights apply both to Selda users and to individuals whose business contact information appears in our business contact database. To exercise any of these rights, email privacy@selda.ai. We respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).

Legal disclosure

We may access, retain, and disclose personal data if we believe in good faith that doing so is necessary to comply with a valid legal process or government request, to enforce our terms, to detect or prevent fraud or security issues, or to protect the rights, property, or safety of Selda, our users, or the public. Where permitted by law, we will notify the affected customer before disclosing their data. Disclosures are limited to what is necessary.

Notices & communications

By using the service you consent to receive transactional and administrative communications (account, security, and billing messages). You may opt out of non-essential marketing emails at any time via the unsubscribe link or your account settings; this does not affect core service communications.

Children

Selda is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

We may update this policy from time to time. Material changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.

Contact

Controller: Selda Oy, Viipurinkatu 12 L 122, 00510 Helsinki, Finland (business ID 3546628-1). Questions or data-subject requests: privacy@selda.ai. We have not appointed a Data Protection Officer as we are not required to; privacy@selda.ai is our contact point for all privacy matters.