Sellopia Privacy Policy
Last updated: 30 October 2026
1. Who we are and what this policy covers
This policy explains how Utopia Group ApS ("Sellopia", "we", "us") handles personal data when you use Sellopia. Utopia Group ApS (CVR 45886808), Wilkensvej 32, 2000 Frederiksberg, Denmark, is the data controller. You can reach us at info@sellopia.ai.
The policy covers all of Sellopia:
- The connector for AI apps (an MCP server at
https://mcp.sellopia.ai), which gives an AI app such as Claude or ChatGPT market data and written negotiation briefs. - The training platform on the web and on iPhone (the Academy), where you upload documents and practise negotiations.
- Billing, when you pay for a plan.
- The sellopia.ai website (section 10).
We sell to businesses only. You sign up with a work e-mail address; public e-mail domains are blocked at sign-up.
The AI app you connect is operated by its own provider under its own privacy policy. We do not control what that provider does with your conversations.
If your organisation has signed a data processing agreement with us, that agreement also applies and takes precedence where it differs from this policy.
2. Information we collect
We collect only what we need to give you the service, bill for it and keep it safe.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Your name, work e-mail address, organisation, role and plan; the AI apps you have connected | You, when you sign in with Google, Microsoft or a work e-mail and password |
| Data questions | What your AI app sends for a data question: a commodity, dates, figures. Nothing else | Your AI app, when it calls a connector tool |
| Written briefs (Pro and above) | The negotiation details you give for a brief: the product, the prices, the supplier's ask or reply, and the brief we write | Your AI app, when you ask it for a brief |
| Saved tool results | Each connector request that succeeded and its result, with your plan at the time | Our servers, when a connector tool answers |
| Tool-call log | Who called which tool, and when; for all failed calls and 5% of successful ones, also the request and the result | Our servers |
| Training content | The documents you upload, the scenarios built from them, your voice and text sessions (audio and transcripts) and the coach notes on them | You, in the training platform on the web or on iPhone |
| Billing data | Your plan, seats, billing period, payment status and invoices | You, when you pay on our payment page |
| Technical data | IP address, request headers and timestamps in standard server logs | Your device or AI app when it connects to us |
What we do not receive. The connector never receives your files or your chat history with the AI app; it gets only what the AI app sends to a Sellopia tool. We never see your card details: you enter them on our payment page, and we do not store them. If you sign in with Google or Microsoft, we never see your password.
Please do not put personal data about other people into requests, briefs or uploaded documents unless you need to.
Is providing data required? Account data is needed to use Sellopia: without it we cannot verify who you are or which data your organisation may access. A signed-in account is also needed to pay. Requests, briefs and training content are needed to answer and train you.
3. How we use information
We use the information above only to run and improve Sellopia:
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Sign you in and check your access on every request | Account data | Performance of our contract with you or your organisation (Art. 6(1)(b)) |
| Answer data questions and write briefs | Data questions, written briefs, account data | Performance of contract (Art. 6(1)(b)) |
| Store briefs so your AI app can read them back | Written briefs | Performance of contract (Art. 6(1)(b)) |
| Keep your tool results for you and your organisation | Saved tool results | Performance of contract (Art. 6(1)(b)) |
| Improve Sellopia's products and train our models: always on the Free plan, and on paid plans only when your organisation turns this on | Saved tool results | Legitimate interest in improving the product (Art. 6(1)(f)); on paid plans, only on your organisation's choice |
| Build your scenarios, run role-plays and give coach notes | Training content | Performance of contract (Art. 6(1)(b)) |
| Count tool calls against your plan's allowance | Tool-call log | Performance of contract (Art. 6(1)(b)) |
| Bill for your plan and keep invoices | Billing data, account data | Performance of contract (Art. 6(1)(b)); legal obligation under Danish accounting law (Art. 6(1)(c)) |
| Protect the service against abuse, with rate limits and security monitoring | Tool-call log, technical data | Legitimate interest in security (Art. 6(1)(f)) |
| Understand which features are used, through product analytics | Usage events, user and organisation IDs, role and plan | Legitimate interest in improving the product (Art. 6(1)(f)) |
AI models. Data questions use no AI model; the connector answers them from stored market data and calculations. Written briefs, role-plays and coaching run on contracted AI model providers, under terms that do not let them use your data to train their models.
Our use of saved tool results. On the Free plan, we use your saved tool requests and results to improve Sellopia's products and to train our models; this is a condition of the Free plan. On paid plans, we do not use them for this unless your organisation turns it on in its billing settings, and it can turn it off again at any time. Upgrading from Free stops this use for results saved on the Free plan too. Results already used to train a model stay part of that model. We never use training-platform content (your documents, scenarios, sessions and coach notes) to train AI models.
No selling, no advertising. We do not sell your personal data, share it for cross-context behavioural advertising, or use it to build advertising profiles.
No automated decisions about you. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing, including profiling. Coach notes are feedback on a practice session, not a decision about you. Enforcing your plan's allowance is an automatic check against the limit your plan sets.
4. How information is shared
With your AI app. Tool results and briefs go back to the AI app that asked for them. What that app does with them is governed by its provider's privacy policy.
Within your organisation. On a team plan, your organisation's admin or manager can see who has a seat and how much of the shared allowance is used.
With Sellopia. Only the two founders can access customer data, for support, under confidentiality.
With our service providers. We use sub-processors in the categories below. Each is bound by a data processing agreement and may use the data only to provide its service to us. The full list is available on request at info@sellopia.ai.
| Category | Purpose | Location |
|---|---|---|
| Authentication and database | Sign-in, account data, briefs, saved tool results, training content, tool-call log | EU (Frankfurt, Germany) |
| Application hosting | Runs the connector and the training platform | United States |
| Network | Carries requests to our servers | Global |
| Product analytics | Usage events | EU |
| AI model providers | Written briefs, role-plays and coaching, under no-training terms | United States |
| Payment processor | Takes card payments on our payment page | Listed on request |
| Booking calendar | Books a call, only when you open the calendar | Listed on request |
For legal reasons. We may disclose information if required by law, court order or a competent authority, or to protect the rights, safety or property of Sellopia, our customers or others.
Business transfers. If Utopia Group ApS is involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal. It stays protected by this policy, and we will tell you before it becomes subject to a different one.
5. How long we keep information
We keep personal data only as long as needed for the purposes in section 3, then delete or anonymise it.
| Data | Kept for | Then |
|---|---|---|
| Account data | While your account exists | Deleted when you or your organisation delete the account |
| Written briefs | Until you delete them or your account | Deleted |
| Training content (documents, scenarios, sessions, coach notes) | Until you delete it or your account | Deleted |
| Saved tool results | Until you delete them, or while your account and organisation exist | A result you delete is deleted. Within 90 days of deleting the account or organisation: results we may use (Free plan, or a paid organisation that turned this on) are anonymised, so they are no longer linked to you or your organisation, and kept; other results of a paid organisation are deleted. When one member of a paid organisation deletes their account, their results stay with the organisation without the link to that member |
| Usage counts (tool calls per period) | While your account exists | Deleted with the account |
| Tool-call log with request and result (all failed calls, 5% of successful ones) | 90 days | Anonymised: user, organisation and client identifiers are removed, along with any text that could identify you or your organisation. Deleted sooner if you delete your account |
| Invoices | 5 years, as Danish accounting law requires | Deleted |
| Product analytics events | Up to 24 months | Deleted |
| Server and security logs | Up to 30 days | Deleted |
Anonymised data can no longer be linked to you or your organisation, so it is not personal data. We may keep it and use it to improve our products and train our models.
Deleting your data. You can see, delete and export your saved tool results in the web app under Saved results. You can delete your account from the iPhone app, or by e-mail to info@sellopia.ai. Your organisation can ask us to delete all of its data; we do so within 30 days, except invoices, which we must keep for 5 years.
Disconnecting. You can disconnect the Sellopia connector in your AI app at any time. Access stops at once. Disconnecting does not delete data we already hold.
6. Security
We protect your data with technical and organisational measures appropriate to the risk, including:
- Encryption. All connections use HTTPS (TLS), and stored data is encrypted at rest.
- Per-person access. Each person signs in with their own login, and every request is checked against a live session, so revoked access stops working at once.
- Organisation isolation. All data is tied to your organisation. The database denies all access by default; the only path in is our server, acting for you after you sign in.
- Read-only connector. All 22 connector tools are read-only towards your systems: the connector writes nothing into them.
- Restricted staff access. Only the two founders can access customer data, for support, under confidentiality.
- Rate limits and quotas to prevent abuse.
We hold no security certification of our own; our infrastructure runs on certified providers. No system is perfectly secure. If a personal data breach occurs, we will notify affected customers and the competent authority as the law requires.
7. Your rights and choices
Under the GDPR you have these rights over your personal data:
- Access: get a copy of the personal data we hold about you.
- Correction: have inaccurate data corrected.
- Deletion: have your data deleted, unless we must keep it by law (see section 5).
- Restriction and objection: limit how we use your data, or object to uses based on our legitimate interests, including product analytics.
- Portability: receive your data in a machine-readable format.
- Withdraw consent: change your cookie choice on this page at any time.
- Use of saved results: on a paid plan, your organisation's billing owner can turn Sellopia's use of saved tool results on or off in the billing settings. On the Free plan, this use is a condition of the plan; to stop it, upgrade to a paid plan or delete your account.
You can also complain to a data protection authority. Our lead authority is the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.
To use any of these rights, e-mail info@sellopia.ai. We will answer within one month and may need to verify your identity first. If your account is managed by your organisation, we may refer your request to it.
Data processing agreement. Our data processing agreement comes with every paid plan; ask for a signed copy at info@sellopia.ai.
8. International transfers
Your documents, sessions and our database are stored in the EU (Frankfurt). Our application servers and AI processing are in the United States, and our network provider may route requests through data centres outside the EEA. Your data may therefore be processed outside the European Economic Area. We protect these transfers with the European Commission's Standard Contractual Clauses or, where the provider is certified, the EU-US Data Privacy Framework.
9. Children
Sellopia is a business service and is not meant for anyone under 16. We do not knowingly collect children's personal data.
10. The sellopia.ai website
On sellopia.ai we use an analytics service hosted in the EU to understand how visitors move through the site: pages viewed, clicks, referrer and campaign parameters, and browser and device type.
Until you accept analytics, visits are only counted anonymously. Nothing is stored on your device, and you are counted using a hash that changes daily, so visits cannot be linked back to you or followed from one day to the next.
Only after you accept analytics cookies do we recognise return visits, derive an approximate location from your IP address, and record session replays with all form inputs masked. You can change your choice at any time under "Cookie settings" on this page; declining clears the analytics cookies.
Cookies we set. Essential: one browser storage entry that remembers your cookie choice, plus the cookies the booking calendar sets when you open it. Analytics: an identifier, only after you accept. When you book a call, we record that a booking was made, without your name or e-mail address.
We do not sell your data and do not use advertising trackers.
11. Changes to this policy
We may update this policy as Sellopia changes. We will post the new version at this address with a new "last updated" date, and tell account holders by e-mail about material changes before they take effect. Our Sellopia Terms of Service set out the terms of use.
12. Contact
Utopia Group ApS · CVR 45886808
Wilkensvej 32
2000 Frederiksberg
Denmark
E-mail: info@sellopia.ai
We have not appointed a data protection officer, as the law does not require one for our processing. Privacy questions go to the address above.