Security at Sellopia

1. Overview

Sellopia holds two kinds of data: the documents and sessions a training customer gives us, and the questions and negotiation details an AI app sends the connector.

• Training (Academy) receives the documents you upload, the scenarios built from them, and your voice and text sessions.
• Connector (all plans) receives only the question an AI app sends it, and, for a written brief, what you give it for that negotiation.

2. Data we hold

3. Principles

Your documents are yours. What you upload is used to build your own training and nothing else. It is never used to train a model, ours or anyone's, and never shown to another customer.

One organisation, walled off. Every row of data is tied to your organisation. The database denies all access by default; the only path in is our server, acting on your behalf after you have signed in.

Read-only where it can be. The connector reads market data and computes on it; it writes nothing into your systems. For a written brief it receives what you give it for that negotiation, and never your files or your chat history.

Known providers, business terms. Hosting, database, sign-in, payments and models all run on contracted providers, listed on request, under contracts that exclude training on our customers' data.

Deletion you control. You can delete your account from the iPhone app; organisation-wide deletion is done on request within 30 days, except invoices. Saved connector results we may use (Free plan, or an organisation that turned this on) are kept only in anonymised form.

Marked done only when it is. We do not list a certification or a badge we do not hold.

4. Controls

Sign-in. Google or Microsoft sign-in, or a work e-mail and password. Each person has their own login; access is per person and rate-limited.

Tenant isolation. Row-level security on every tenant table, default-deny with no permissive policies. Our server is the only client with access, and it scopes every query to your organisation.

Encryption. TLS for everything in transit. Encryption at rest by our database and storage providers.

Hosting. Your documents and sessions are stored in the EU (Frankfurt) on SOC 2 Type II certified infrastructure. Application servers run in the United States. Payments go through a PCI-certified processor; we never see card numbers. The full list of sub-processors is available on request.

Models. Role-plays, coaching and written negotiation briefs run on contracted model providers under business terms that exclude using the data to train their models. Market data questions and calculations use no model.

Access. The two founders, for support, under confidentiality. There is no offshore support team.

Logging. Access is logged on the database side. The connector keeps a log of tool calls (who, which tool, when) for quotas and abuse prevention.

5. Compliance and operations

Certification. We hold no security certification of our own. Our infrastructure providers are SOC 2 Type II or ISO 27001 certified.

GDPR. For the personal data in your account and content, you are the controller and we are the processor. Our data processing agreement comes with every paid plan.

Sub-processors. Authentication and database (EU), application hosting (US), network (global), product analytics (EU), AI model providers (US, barred by contract from training on your data), a payment processor and a booking calendar (only when you open it). Names on request. We tell you 30 days before we add a new one, and you can object.

Breach notification. If a personal data breach affects you, we tell you without undue delay and within 72 hours of becoming aware of it.

Retention.

• Written briefs: until you delete them or the account.
• Tool-call log (who, which tool, when): while the account exists.
• When an account closes, we delete everything within 30 days, except invoices, which Danish bookkeeping law requires us to keep for 5 years.

Deletion. Delete your account in the iPhone app, or by e-mail to info@sellopia.ai. We delete a whole organisation within 30 days of its request.

Reporting a vulnerability. E-mail info@sellopia.ai with the subject "Security".

6. Questions

What exactly does the connector receive?

For a data question: what your AI app sends it, a commodity, a date range, a claimed move, a tonnage. For a written brief: what you give it for that negotiation, the product, the prices, the supplier's ask or reply. Never your files or the rest of the conversation.

What does the training platform store?

The documents you upload, the scenarios built from them, your sessions (audio and transcript) and the signals tagged on them. All of it is scoped to your organisation and deletable.

Where is our data hosted?

Your documents and sessions are stored in the EU (Frankfurt). Application servers and AI processing run in the United States.

Is our data used to train models?

Your documents and practice sessions, never. Saved connector requests and results: on the Free plan, we use them to improve Sellopia and train our models, as a condition of the plan; on paid plans, only if your organisation turns this on in its billing settings. The model providers we use may not train on any of your data, under their business terms.

Who at Sellopia can see our data?

The two founders, for support, under confidentiality. There is no offshore support team. Access is logged on the database side.

Can we delete everything?

Yes. Account deletion from the iPhone app or on request; organisation-wide deletion within 30 days. We keep only invoices, and an anonymised copy of saved connector results we may use.

Do you have a security questionnaire or DPA?

Ask and we fill yours in. A data processing agreement comes with every paid plan; Enterprise customers can negotiate their own.

7. Contact

Send us your questionnaire and we fill it in. E-mail info@sellopia.ai, or book a call.