Privacy Policy

Who we are

Sellit (sellit.ge) is operated by SHPS SAINAPS STUDIO (tax ID 406555829), registered in Tbilisi, Georgia. For data about your Sellit account and your use of the platform, SHPS SAINAPS STUDIO is the data controller. You can reach us at contact@sellit.ge.

Each shop on Sellit is run by an independent seller. When you buy from a shop, that seller is a separate controller of your order data and is responsible for fulfilling and supporting your order under their own policies and Georgian law.

What we collect

Account details you give us (name, email, phone, password — stored hashed); delivery and contact addresses; orders and their status; messages you send to support; and, with your consent, anonymous usage analytics. We do not collect card numbers — see Payments below.

Why we use it (legal bases)

To run your account and process orders — performance of a contract with you.

Analytics and any marketing — your consent, which you can withdraw at any time.

Accounting, tax, and responding to lawful requests — compliance with a legal obligation.

Keeping the platform secure and preventing fraud and abuse — our legitimate interests.

Payments and sellers

Card payments are processed directly by the seller's payment provider (such as Bank of Georgia or TBC). Your full card details go to the bank, not to Sellit — we never see or store them. We receive only the payment result (paid / failed) and the order reference.

To complete an order, we share the data the seller needs to fulfill it (your order, delivery details, and contact) with that seller and, where used, the delivery provider (such as QuickShipper). Sellers' own credentials are stored encrypted and are never exposed in the interface.

Who we share data with

Only as needed: the seller you order from; payment providers (BOG/TBC); delivery providers; Microsoft Azure (API, database, and secure infrastructure hosting); and Vercel (website hosting and request routing). These providers process data on our behalf. We do not sell your personal data.

Storage and security

Authentication is handled with secure, server-side cookies. Sensitive credentials are encrypted and the master key is held in a dedicated key-management service, never in the app. We keep personal data for as long as your account is active and as required by accounting and tax law, then delete or anonymise it.

Facebook and Instagram (Meta) data

If you are a seller and connect your Facebook Page or Instagram Business account, Sellit accesses that data solely to operate your own shop and your own message inbox — on your behalf and in line with the Meta Platform Terms and Developer Policies. We never use it to build advertising profiles, and we never share it with other sellers.

For a connected account we store: your Facebook Page ID and Instagram Business Account ID; the Page access token that lets us receive and send your messages (stored AES-256 envelope-encrypted, with the master key held in AWS KMS and never in the app or in logs); and, delivered to us by Meta webhooks, the content of the messages your customers send you together with the sender's basic information (their Meta-scoped ID and name). This is used only to show and answer those conversations inside your Sellit inbox.

We keep this Meta data only while your account stays connected and you need it to run your shop and inbox. Disconnecting (dashboard → Settings → Integrations → Disconnect) removes the encrypted connection and access tokens, stored Messenger/Instagram conversations, and the business profile obtained from Meta, and stops further imports and webhook data. Products you already approved into your Sellit shop remain. To request full account deletion, see our Data Deletion page.

Your rights

Under the Law of Georgia on Personal Data Protection you can ask us to: access your data; correct it; delete it; restrict or object to processing; receive a copy in a portable format; and withdraw consent at any time. To exercise these, email contact@sellit.ge — we respond within the timeframe the law requires.

If you believe we've mishandled your data, you may lodge a complaint with the Personal Data Protection Service of Georgia (personaldata.ge).

Your choices

Update your profile, saved addresses, and security settings from your account page. Manage cookies any time via “Cookie settings” in the footer.

Changes

We may update this policy as the platform or the law changes. We'll revise the “last updated” date above and, for significant changes, tell you in the app.