Selto privacy policy

1. Data controller

The Selto platform is published by:

When a client company uses Selto, Techsoft Web Agency generally acts as a technical service provider or processor for the data processed on behalf of that company.

The client company remains responsible for its relationship with its own prospects, customers, users, employees, sales people and business contacts.

2. Data we collect

Depending on how you use Selto, we may collect the following categories of data.

2.1 User account data

• first and last name;
• e-mail address;
• phone number;
• company or organisation;
• role or job title;
• login credentials;
• account preferences;
• login history;
• IP address;
• information about the device, browser or session.

2.2 Client company data

• company name;
• line of business;
• business address;
• billing details;
• internal users;
• teams, roles and permissions;
• sales settings;
• pipelines, statuses, tags, segments and follow-up rules;
• information related to the integrations that are enabled.

2.3 WhatsApp Business and Meta data

When you connect a WhatsApp Business account to Selto through Meta’s official API, we may collect and keep certain technical information needed for the service to work, in particular:

• Meta Business Portfolio identifier;
• WhatsApp Business Account identifier;
• WhatsApp number identifier;
• connected business WhatsApp number;
• verified name or display name;
• number status;
• quality or restriction information, where available;
• access tokens needed for the integration;
• webhook statuses;
• approved or submitted WhatsApp message templates.

This data is used only to allow the connection, sending, receiving, follow-up and management of WhatsApp Business conversations in Selto.

2.4 Sales conversation data

Selto may process data from business exchanges between the client company and its prospects or customers, in particular:

• incoming and outgoing messages;
• contacts’ phone numbers;
• contacts’ names or identifiers;
• dates and times of messages;
• delivery or read statuses, where available;
• files, images, documents or media that are shared;
• internal notes;
• tasks, reminders and follow-ups;
• sales pipeline stages;
• history of the actions taken by users.

The client company must make sure it has the right to use, import or process this data in Selto.

2.5 Sales and CRM data

• prospect or customer name;
• phone number;
• e-mail;
• company;
• line of business;
• need expressed;
• history of exchanges;
• sales status;
• sales owner;
• potential or estimated amount;
• date of the next follow-up;
• related documents;
• qualification results;
• internal comments.

2.6 Support and communication data

• name;
• e-mail;
• phone number;
• company;
• content of your request;
• exchanges with our team;
• screenshots or files you send;
• history of incidents or support requests.

2.7 Technical and security data

• technical logs;
• IP address;
• browser type;
• operating system;
• application errors;
• security events;
• login attempts;
• actions taken in the application;
• information related to webhooks, APIs and integrations.

3. Why we use this data

• create and manage user accounts;
• provide access to the Selto platform;
• connect authorised WhatsApp Business accounts;
• send, receive and organise business conversations;
• create prospect or customer records;
• follow leads, follow-ups, tasks and sales pipelines;
• provide manager views and activity reports;
• automate certain actions when the company enables them;
• provide artificial intelligence features when they are enabled;
• manage security, access, roles and permissions;
• prevent abuse, fraud, unauthorised use or technical incidents;
• provide customer support;
• improve the performance and quality of the service;
• manage billing, subscriptions and the commercial relationship;
• meet our legal, regulatory and contractual obligations.

4. Legal basis for processing

Depending on the case, we process personal data on the basis of:

• performance of a contract or pre-contractual measures;
• consent given by the user or by the end customer;
• the legitimate interest of Techsoft Web Agency or of the client company in providing, securing and improving the service;
• compliance with a legal or regulatory obligation;
• instructions given by the client company when it acts as data controller.

The client company is responsible for obtaining the necessary consents from its prospects, customers or contacts where required, in particular for commercial messages, campaigns, follow-ups or communications through WhatsApp.

5. Role of the client company

When your company uses Selto to manage its prospects, customers or sales conversations, it remains responsible for:

• informing its prospects and customers that Selto is used;
• obtaining the necessary consents;
• complying with the rules that apply to commercial prospecting;
• complying with the WhatsApp Business and Meta rules;
• handling objection, unsubscribe or deletion requests;
• making sure the data imported into Selto is accurate, relevant and legitimate;
• defining the access rights of its staff;
• not using Selto to send unsolicited, abusive, fraudulent or unlawful messages.

Selto must not be used to collect, store or use personal data without a legal basis or appropriate authorisation.

6. Use of WhatsApp Business and Meta

Selto may allow businesses to connect their WhatsApp Business account through Meta’s official API. When this integration is enabled, some technical and conversation data may pass through the infrastructure of Meta or of the WhatsApp Business Platform.

The use of WhatsApp Business remains subject to the applicable terms, policies and rules of Meta and WhatsApp, in particular on consent, message quality, approved templates, opt-out and the fight against spam.

Selto does not control Meta’s or WhatsApp’s decisions about the quality, restriction, suspension or deactivation of a WhatsApp number.

7. Artificial intelligence

Selto may include artificial intelligence features to assist users, for example to:

• answer certain questions;
• qualify a prospect;
• suggest a follow-up;
• summarise a conversation;
• create a task;
• suggest a sales action;
• help organise customer information.

When these features are enabled, some of the data needed for processing may be sent to technical AI providers.

We put reasonable measures in place to limit the data that is sent, secure the exchanges and avoid using data that is not necessary.

The client company is responsible for deciding whether to enable AI features and for making sure their use respects its own obligations of confidentiality, compliance and information of its users.

Selto must not be used to make automated decisions that have legal or significant effects on a person without appropriate human intervention.

8. Sharing data with third parties

We do not sell personal data.

We may share some data, only when necessary, with:

• hosting providers;
• cloud infrastructure providers;
• messaging API providers;
• Meta / WhatsApp Business Platform;
• artificial intelligence providers, if the feature is enabled;
• payment or billing providers;
• customer support tools;
• e-mail or notification providers;
• administrative, judicial or regulatory authorities where the law requires it.

These providers must process the data in accordance with our instructions, the contractual obligations that apply and appropriate security measures.

9. International data transfers

The data processed by Selto may be hosted or processed in Cameroon or in other countries, depending on the technical providers used.

When data is transferred outside Cameroon, we take reasonable measures to ensure an appropriate level of protection, in particular through contractual commitments, security measures and limited access.

The client company acknowledges that some third-party services, in particular Meta, the WhatsApp Business Platform, cloud providers or AI providers, may process data in several jurisdictions.

10. Data retention

We keep data only for as long as needed for the purposes described in this policy, unless a legal or contractual obligation requires otherwise.

In general:

• account data is kept while the service is used;
• sales and conversation data is kept for the duration of the contract with the client company;
• technical logs may be kept for a limited time for security, diagnostics and audit purposes;
• billing data may be kept longer where the law requires it;
• backups may be kept temporarily before final deletion, according to our technical cycles.

At the end of the contract, the client company may ask for its data to be exported or deleted, subject to legal, contractual or security obligations.

11. Data security

We put reasonable technical and organisational measures in place to protect data against:

• unauthorised access;
• loss;
• disclosure;
• alteration;
• destruction;
• misuse.

These measures may include:

• access control;
• roles and permissions;
• encryption or protection of sensitive credentials;
• logging of important actions;
• backups;
• technical monitoring;
• separation of environments;
• limited internal access;
• incident management procedures.

No system is entirely free of risk, however. The client company must also protect its own access, passwords, devices, users and settings.

12. Rights of data subjects

Depending on the applicable law, any person concerned may have rights over their personal data, in particular:

• right of access;
• right to rectification;
• right to deletion;
• right to object;
• right to restriction of processing;
• right to withdraw consent;
• right to portability, where applicable;
• right to lodge a complaint with the competent authority.

To exercise these rights, you can contact us at: privacy@selto.cm.

When the request concerns data processed on behalf of a client company, we may pass the request on to that company or act on its instructions.

13. Data deletion

A user or a client company can ask for their data to be deleted by contacting us at: privacy@selto.cm

or through the dedicated page:

https://selto.cm/en/data-deletion

The request must state:

• who is making the request;
• which company it concerns;
• which account or number it concerns;
• which data is to be deleted;
• anything that lets us check that the request is legitimate.

We may refuse or postpone a deletion when keeping the data is necessary to:

• comply with a legal obligation;
• prevent fraud or abuse;
• ensure the security of the service;
• settle a dispute;
• comply with a contract;
• protect the rights of Techsoft Web Agency, of the client company or of third parties.

14. Privacy of conversations and manager access

Selto lets businesses structure and supervise business conversations.

The client company is responsible for defining the access rules of its users, sales people, managers and administrators.

Depending on the configuration chosen by the company, some users may have access to:

• business conversations;
• customer records;
• tasks;
• follow-ups;
• internal notes;
• documents;
• activity reports.

Selto recommends that client companies clearly inform their staff when business conversations are managed or followed in the platform.

Selto is not designed to monitor the private life of staff or to collect personal conversations without authorisation.

15. Sensitive data

Selto is not intended to knowingly collect sensitive data that is not necessary.

Client companies must avoid importing or processing sensitive data in Selto, in particular data about health, ethnic origin, political opinions, religion, sex life, biometric data or any other sensitive category, unless strictly necessary, legally permitted and properly framed.

When sensitive documents are shared by prospects or customers, the client company must make sure their processing is legitimate, secure and limited to authorised people.

16. Prospecting, campaigns and opt-out

Businesses that use Selto to send commercial messages must make sure the recipients have given their agreement or that an appropriate legal basis exists.

Each client company is responsible for:

• complying with the rules on prospecting;
• avoiding unsolicited messages;
• handling unsubscribes;
• respecting requests to stop;
• keeping a clean contact base;
• using approved message templates where required;
• complying with the WhatsApp Business and Meta policies.

When a contact asks not to be contacted any more, this request must be respected.

17. Cookies and similar technologies

Selto uses a limited number of cookies and local storage items, only to run the service and remember your preferences:

• session: keeps you signed in to the application and secures access. A strictly necessary cookie, valid for up to 24 hours and renewed as long as you use the application, deleted when you sign out;
• NEXT_LOCALE: remembers the language you chose;
• selto_currency: remembers the currency in which the prices of the public site are shown (FCFA or USD), for one year;
• selto_plan_interest: remembers the plan viewed before registration for 30 days, so you can find it again on the pricing page, without starting a payment;
• browser local storage: display preferences of the application (for example the side panel, sounds, muted conversations);
• third-party cookies: when you connect a WhatsApp Business account through Meta, or when you pay through a payment provider, these services may set their own cookies, which are governed by their own policies.

We use no advertising cookies, no cross-site tracking cookies and no third-party audience measurement tool on the public site.

You can configure your browser to block or delete cookies. However, some Selto features may not work properly without the essential cookies.

18. Minors

Selto is intended for businesses and professional users. The platform is not intended for children or minors.

We do not knowingly collect personal data from minors. If we find that such data has been collected without an appropriate legal basis, we will take the necessary steps to delete it.

19. Changes to this policy

We may change this privacy policy to reflect:

• changes to Selto;
• legal or regulatory changes;
• requirements of Meta, WhatsApp or other partners;
• security improvements;
• changes in our internal practices.

The most recent version will be available on our website.

In the event of a significant change, we may inform users or client companies by e-mail, notification or a message in the application.

20. Contact

For any question about this policy or the protection of personal data, you can contact us: