Privacy Policy

Salesy (“Salesy,” “we,” “us,” “our”) operates salesy.link, a platform that lets entrepreneurs create an online store with a unique, shareable URL (for example, salesy.link/yourstore) and accept payments by card, bank transfer, or USSD. This Privacy Policy explains what information we collect from sellers who open a store, the customers who buy from those stores, and anyone who visits salesy.link; how we use and share it; and the choices available to you.

We collect the information described below when you create an account, set up a store, place an order, leave a review, or otherwise use Salesy.

Account information

• First and last name, email address, and phone number.
• A password (stored only as a one-way hash, never in plain text) if you sign up with email — or, if you choose “Continue with Google,” the basic Google profile described in Sign in with Google below.
• Whether your email address has been verified.

Store / business information

• Business name, business email and phone, description, and optional physical address.
• Optional logo and social-share image you upload for your storefront, and the store’s unique URL handle.
• Owner details (name, role, email, phone) and, if you tell us your business is registered, its CAC registration number.
• If you enable live chat, which third-party provider you chose (e.g. Smartsupp, Tawk.to, Crisp, Tidio, JivoChat) and the widget code you pasted in.

Product content

• Listings you create — names, descriptions, prices, categories, stock levels, and photos you upload.

Order and customer information

• When someone checks out on a Salesy store (as a guest — no buyer account is required), we collect their name, email, phone number, delivery address or pickup note, order notes, and the items and amount ordered.
• This information is shared with the seller whose store received the order, so they can fulfill and communicate about it.

Reviews

• A reviewer’s name, star rating, and review text, linked to the order they’re reviewing.

Payment information

• Payments are processed by Paystack. Salesy never receives or stores full card numbers, CVVs, or bank login credentials — we only receive a transaction reference, status, and amount from Paystack to confirm your order.
• To pay out a seller’s balance, we collect the bank name and account number they enter, which we send to Paystack to resolve the account holder’s name and process the transfer.
• Sellers set a payout PIN to authorize withdrawals; it is used only to confirm withdrawal requests are made by the account owner.

Cookies and local storage

• A session cookie that keeps you signed in, and short-lived cookies used only during the “Continue with Google” flow (to prevent request forgery and to briefly hold your verified Google profile while you finish setting up your account).
• Your browser’s local storage holds your shopping cart, theme preference (light/dark/system), and session state — this stays on your device and is not sent to our servers except as part of normal page requests.

Usage and log data

• Standard web server logs — IP address, browser and device type, pages visited, and timestamps — used for security, abuse prevention, and diagnosing issues.

If you choose “Continue with Google,” we ask Google for your name, email address, and whether Google has verified that email — the minimum needed to create or sign you into your Salesy account. We do not request access to your Gmail, Drive, Contacts, or any other Google service, and we do not receive your Google password.

We use this information only to identify you and create or match your Salesy account — never for advertising, and never shared with third parties except the service providers described in How we share information who help us run the platform (for example, our database host, strictly to store your account record).

Salesy’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Create, secure, and let you sign into your Salesy account.
• Publish and operate your storefront at your chosen URL.
• Process orders and payments, verify bank accounts for payouts, and pay sellers their balance.
• Send transactional emails and one-time verification codes (account verification, password resets, order confirmations).
• Generate the preview image and description shown when a store or product link is shared on social media.
• Provide optional live chat on your storefront, if you enable it.
• Detect and prevent fraud, abuse, and security incidents, and enforce our Terms of Service.
• Improve Salesy’s features and reliability.
• Comply with legal obligations.

We do not sell personal information. We share it only:

• With the relevant seller — a buyer’s order details go to the store they ordered from, so it can be fulfilled.
• With service providers who process data on our behalf, under agreements limiting them to the services they provide us:
  • MongoDB Atlas — database hosting.
  • Cloudinary — image hosting for logos and product photos.
  • Paystack — payment processing and bank account verification.
  • Brevo (Sendinblue) — transactional email and OTP delivery.
  • Google — “Continue with Google” authentication.
  • A seller’s chosen live-chat provider (Smartsupp, Tawk.to, Crisp, Tidio, JivoChat, or another widget) — only on stores where the seller has turned this on; that provider’s own privacy policy governs what it collects from your visitors.
• For legal reasons — to comply with law, respond to lawful requests, or protect the rights, safety, or property of Salesy, our users, or the public.
• In a business transfer — if Salesy is involved in a merger, acquisition, or sale of assets, with notice to affected users.

We use a minimal set of cookies described in Information we collect, all necessary for signing in and completing the Google sign-in flow — we don’t use third-party advertising or cross-site tracking cookies. A seller who enables live chat may cause that provider to set its own cookies on the storefront; that’s between the visitor and the provider under its own policy.

We keep account, store, and order records for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and dispute-resolution obligations (for example, transaction records). Short-lived sign-in cookies expire automatically within minutes. You can request deletion of your account as described in Your rights and choices.

We use industry-standard safeguards — encrypted connections (HTTPS), hashed passwords, signed and HTTP-only session cookies, and access controls on our database — to protect your information. No method of transmission or storage is 100% secure, so we can’t guarantee absolute security, but we work to protect your data and to respond quickly if something goes wrong.

• Access or correct your account and store information any time from your dashboard.
• Request a copy of your data, or ask us to delete your account and associated personal information, by contacting us below — we’ll respond within a reasonable time, subject to any records we’re required to keep by law.
• Turn off live chat on your store at any time from Settings.
• Clear your browser’s cookies and local storage to remove your session and cart data from that device.

Salesy is intended for entrepreneurs and shoppers who are at least 18 years old, or the age of majority in their jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we’ll delete it.

Salesy is built for entrepreneurs in Nigeria, and our service providers may process and store data outside your home country (for example, on cloud infrastructure operated internationally). We require our service providers to protect your information consistent with this policy wherever it’s processed.

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last updated” date above and, for significant changes, provide additional notice (such as an email or an in-app notice).

Questions about this policy or your information? Email us at privacy@salesy.link.