Privacy Notice

Effective: 15 July 2026

Selsela collects only the information needed to search its public supplier network, register a procurement request, contact the requester, and operate the private beta. A form submission creates a managed request; it does not place an order.

1. Who operates Selsela

Selsela is operated by Selsela For Communications & IT LLC (“Selsela”, “we”, or “us”), with registered address at RHRA7069. Questions and privacy requests may be sent to ceo@selsela.co.

2. Information we collect

• Contact information: name, work email, phone number, role, and preferred contact method.
• Business information: business name, type, website, city, and delivery location.
• Procurement information: requested items, quantities, timing, preferences, selected supplier profiles, and notes.
• App and technical information: the search or request information sent to Selsela's app tools, request identifiers, timestamps, security events, and limited technical logs needed to prevent abuse and diagnose failures.

We collect this information directly from you through the website or ChatGPT form and may associate it with an existing Selsela/Attio business record. Providing the form is voluntary, but we cannot process or answer a request without the fields marked required. When you use the ChatGPT app, Selsela receives the tool inputs needed for the search or form submission; we do not ask ChatGPT to send your entire conversation. Do not include unnecessary personal, financial, health, or confidential information.

3. How we use information

• Search public, allowlisted supplier profiles and present possible matches.
• Register you as a prototype user and record your Procurement Desk request.
• Contact you, clarify the need, approach relevant suppliers, support account opening, and coordinate next steps.
• Operate, secure, audit, troubleshoot, and improve Selsela's workflows.
• Comply with applicable legal obligations and respond to lawful requests.

Your consent is the primary basis for recording and acting on a private-beta inquiry. Where permitted, we may also process limited information to meet a legal obligation or a legitimate operational or security interest. Supplier matching uses automated ranking, but it does not make a legally binding decision, place an order, approve credit, or prevent founder review.

4. Who receives information

Access is limited to the Selsela founding/operations team and service providers needed to run the beta, including the hosting provider, OpenAI as the ChatGPT app host, Attio as Selsela's CRM/workflow provider, and any configured notification provider. A supplier receives only the information necessary to evaluate or respond to a request. We do not sell personal data.

5. Supplier confidentiality

The app exposes only fields specifically allowlisted for public discovery. Internal Attio records, private contacts, customer-specific prices, credit limits, and commercial terms are not returned by supplier-search tools.

6. Retention

• Active user and procurement records are retained while the request or service relationship remains active.
• Closed private-beta inquiries are deleted or anonymized 12 months after the last activity, unless a longer period is needed for a continuing relationship, dispute, or legal obligation.
• Routine technical logs are retained for up to 30 days.
• Consent and essential audit records may be retained for up to five years where reasonably necessary to demonstrate compliance or protect legal rights.

7. Your choices and rights

Subject to applicable law and exceptions, you may ask to be informed about our processing, access or receive a copy of your information, correct it, request restriction or destruction, or withdraw consent by emailing ceo@selsela.co. Withdrawal does not affect processing already carried out lawfully. We may verify your identity before acting. You may also raise a complaint with the Saudi Data & AI Authority through its data-protection channels.

8. International processing

Some configured service providers may process information outside Saudi Arabia. Before such a transfer, Selsela assesses the applicable Saudi requirements and uses required contractual, organizational, and technical safeguards, including data minimization. The actual provider locations and safeguards must be reviewed as the deployment changes.

9. Security

We use access controls, scoped credentials, input validation, restricted supplier sources, redacted logs, and other reasonable safeguards. No system is completely secure; submit only information needed for the procurement request and do not send payment-card details or sensitive personal data.

10. Children

Selsela is a business service and is not intended for children.

11. Changes

We may update this notice as the beta develops. The effective date above will change when a material update is published.