Effective date: 10 June 2026
Version: 1.0
This Privacy Policy applies to individuals located in the European Economic Area (EEA), including the European Union, Iceland, Liechtenstein, and Norway. If you are located in Russia or another country, please refer to our Russian Privacy Policy.
Data Controller (EU):
E-com Solutions OÜ
Registry code: 16662128
Ida-Viru maakond, Lüganuse vald, Oandu küla, Allika, 42314, Estonia
Email: privacy@sellerden.ai
Website: https://sellerden.ai
E-com Solutions OÜ is the data controller responsible for processing the personal data of EEA users in connection with the SellerDen AI service ("Service"). The Service is operated under licence by ООО «Селлертех» (SellerTech LLC), Kazan, Russia, acting as a data processor on behalf of E-com Solutions OÜ.
We collect the following categories of personal data:
| Data | When collected |
|---|---|
| Email address | Registration |
| Phone number | Registration |
| Telegram username | Optional, profile or support |
| Data | Purpose |
|---|---|
| IP address | Security, geolocation |
| Browser type and version | Technical compatibility |
| Operating system | Technical compatibility |
| Device screen parameters | UI rendering |
| Pages visited, clicks, session duration | Analytics, UX improvement |
| Referring URL (entry/exit points) | Marketing attribution |
| Country and region | Analytics |
| Cookies and similar identifiers | See Section 8 |
When you use AI tools in the Service (photo generation, infographics, SEO copy, video), any images or text you upload or generate are transmitted to our AI sub-processors solely to perform the requested function. We recommend you do not upload images containing identifiable personal data of third parties.
Payment transactions are handled exclusively by Stripe, Inc. We do not store full card numbers or CVV codes. We retain a tokenised reference, transaction ID, amount, and date for billing and legal compliance purposes.
| Processing activity | Legal basis | GDPR article |
|---|---|---|
| Creating and managing your account | Performance of a contract | Art. 6(1)(b) |
| Providing the Service (AI tools, subscriptions) | Performance of a contract | Art. 6(1)(b) |
| Processing payments via Stripe | Performance of a contract | Art. 6(1)(b) |
| Sending transactional emails (receipts, password reset) | Performance of a contract | Art. 6(1)(b) |
| Analytics and service improvement | Legitimate interests | Art. 6(1)(f) |
| Fraud prevention and security | Legitimate interests | Art. 6(1)(f) |
| Sending marketing communications | Consent | Art. 6(1)(a) |
| Placing non-essential cookies (analytics, marketing) | Consent | Art. 6(1)(a) |
| Compliance with legal obligations | Legal obligation | Art. 6(1)(c) |
Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights. You may object to such processing at any time (see Section 6).
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
We use your personal data for the following purposes:
We engage the following third-party service providers who process personal data on our behalf. Each is bound by a Data Processing Agreement and is required to implement appropriate safeguards.
| Sub-processor | Role | Country | Safeguard |
|---|---|---|---|
| ООО «Селлертех» (SellerTech LLC) | Service operator / processor | Russia | Data Processing Agreement; SCCs (Art. 46(2)(c) GDPR) |
| Yandex Cloud (LLC) | Cloud infrastructure, data storage | Russia | SCCs (Art. 46(2)(c) GDPR) |
| Yandex LLC (Yandex.Metrica) | Web analytics | Russia | SCCs (Art. 46(2)(c) GDPR) |
| Google LLC (Tag Manager, Gemini API) | Analytics, AI image/text generation | USA | SCCs (Art. 46(2)(c) GDPR); Google DPA |
| OpenAI, Inc. | AI text and image generation | USA | SCCs; OpenAI DPA |
| Kuaishou Technology (Kling AI) | AI video generation | China / USA | SCCs |
| Claid.ai (Let's Enhance) | AI image enhancement | USA / EU | SCCs |
| Stripe, Inc. | Payment processing | USA / EU | SCCs; Stripe DPA; EU-US Data Privacy Framework |
| Bitrix24 | CRM, customer communications | Russia / EU | SCCs |
We do not sell your personal data to third parties. We do not share your data with advertisers for their own marketing purposes.
Our Service involves transfers of personal data to countries outside the EEA, including Russia, the United States, and China. These countries may not provide the same level of data protection as the EEA.
Where such transfers occur, we ensure that appropriate safeguards are in place, primarily through Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Article 46(2)(c) of the GDPR. For transfers to the United States, some processors additionally participate in the EU-US Data Privacy Framework.
You may request a copy of the relevant SCCs by writing to privacy@sellerden.ai.
We retain personal data only for as long as necessary for the purposes described in this Policy and to comply with our legal obligations.
| Category | Retention period |
|---|---|
| Account data (email, phone) | Duration of active account + 3 years after deletion |
| Generated content (images, video, text) | Until deleted by the user, or account deletion |
| Billing and payment records | 7 years (accounting and tax obligations) |
| Analytics and behavioural data | 26 months from collection |
| Support communications | 3 years from last interaction |
| Consent records | 5 years from consent or withdrawal |
When the retention period expires, data is securely deleted or anonymised.
We use cookies and similar tracking technologies on our website and in the Service.
Strictly necessary cookies are essential for the Service to function (session management, authentication, security). They do not require your consent.
Analytics cookies (Yandex.Metrica, Google Tag Manager / Google Analytics) help us understand how users interact with the Service. These are placed only after you have given your consent via our cookie banner.
Marketing cookies may be used to show you relevant advertising. These are also placed only with your consent.
You can manage your cookie preferences at any time through the cookie settings banner on our website. You may also opt out of Yandex.Metrica tracking at: https://yandex.com/support/metrica/general/opt-out.xml
For a full list of cookies we use (name, type, duration, third party), please see our Cookie Policy.
As an EEA resident, you have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Right of access (Art. 15) | Obtain a copy of the personal data we hold about you and information about how we process it. |
| Right to rectification (Art. 16) | Request correction of inaccurate or incomplete data. |
| Right to erasure (Art. 17) | Request deletion of your data where there is no legitimate reason for us to continue processing it. |
| Right to restriction (Art. 18) | Request that we restrict processing of your data in certain circumstances. |
| Right to data portability (Art. 20) | Receive a copy of your data in a structured, machine-readable format, or ask us to transfer it to another controller. |
| Right to object (Art. 21) | Object to processing based on legitimate interests or for direct marketing purposes. |
| Right to withdraw consent (Art. 7(3)) | Withdraw any consent you have given at any time, without affecting prior processing. |
| Right not to be subject to automated decisions (Art. 22) | Not be subject to decisions based solely on automated processing that significantly affect you. |
How to exercise your rights:
Send a request to privacy@sellerden.ai. We will respond within 30 days. In complex cases, this period may be extended by a further two months; we will inform you within the initial 30-day period if an extension is needed.
We may ask you to verify your identity before fulfilling a request.
The Service is not directed at persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact privacy@sellerden.ai and we will delete the data promptly.
If you believe that we have processed your personal data in violation of the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Väike-Ameerika 19, 10129 Tallinn, Estonia
Website: https://www.aki.ee
Email: info@aki.ee
You may also lodge a complaint with the supervisory authority of your country of habitual residence or place of work.
We may update this Policy from time to time. When we make material changes, we will notify you by email or by a prominent notice on the Service prior to the change becoming effective. The "Effective date" at the top of this page indicates when the Policy was last revised.
We encourage you to review this Policy periodically.
For any questions about this Privacy Policy or to exercise your rights, please contact:
E-com Solutions OÜ
Privacy Team
Email: privacy@sellerden.ai
Address: Ida-Viru maakond, Lüganuse vald, Oandu küla, Allika, 42314, Estonia
This Privacy Policy was last reviewed on 10 June 2026.