Introduction and data controller
Selly is a worldwide classifieds marketplace that displays listings on an interactive map. Users post listings pinned to a location, browse nearby items, chat in the app, and pay to promote their listings. This policy applies to the Selly website, mobile apps, and related services (the "Service").
Selly acts as the data controller for the personal data described here. If you have any questions about this policy or how we handle your data, contact our privacy team at [email protected]. For general support, write to [email protected].
Please note that Selly is a venue connecting buyers and sellers. We are not a party to transactions between users and do not own the goods offered. Other users you interact with are independent and process the data you share with them under their own responsibility.
Data we collect
We collect the following categories of personal data:
- Account data — name or display name, email address, phone number, password (stored hashed), profile photo, language preference, and account settings.
- Listing data — the content you publish, including titles, descriptions, prices in euro (€) or hryvnia (₴), photos, category, attributes, and the location pin you set for the item.
- Messages and chat — the content of conversations you have with other users through the in-app chat, including text and any attachments.
- Usage and device data — IP address, device and browser type, operating system, app version, identifiers, pages and listings viewed, searches, clicks, and crash and diagnostic logs.
- Approximate location — a coarse or user-set location used to place map pins and show nearby listings (see the Location section below).
- Payment data — when you pay for promotion or paid features, billing details are processed by third-party payment processors; we receive a transaction reference and status, not your full card number.
- Support and correspondence — messages you send to support, fraud or abuse reports, and records of our replies.
How we use your data
We use your personal data to:
- Provide and operate the marketplace — create and manage your account, publish your listings, and place them on the map.
- Show listings on the map and power search, filtering, and "nearby" results.
- Enable communication — deliver in-app chat messages and related notifications between buyers and sellers.
- Moderate content and detect fraud — including our in-app AI assistant, which analyses messages and listings to warn you about likely scam or fraudulent activity.
- Provide customer support and respond to your requests, reports, and disputes.
- Offer paid features — process promotion purchases and other paid services and keep records for billing.
- Improve and secure the Service — analyse usage, fix bugs, prevent abuse, and develop new features.
- Comply with legal obligations and enforce our Terms of Service.
Legal bases for processing
Under the GDPR, we rely on the following legal bases to process your personal data:
- Performance of a contract — to create your account, publish your listings, deliver chat, and provide paid features you request (Art. 6(1)(b)).
- Legitimate interests — to keep the Service secure, prevent fraud and abuse (including AI-assisted detection), moderate content, improve features, and operate the marketplace, where these interests are not overridden by your rights (Art. 6(1)(f)).
- Consent — for optional cookies and similar technologies, certain marketing communications, and any precise location features, where required. You can withdraw consent at any time (Art. 6(1)(a)).
- Legal obligation — to comply with accounting, tax, consumer-protection, and lawful requests from authorities (Art. 6(1)(c)).
Location data
Location is central to Selly because listings are shown as pins on a map. We handle location data carefully and try to use the least precise data that still makes the map useful.
- When you create a listing, you set a location pin yourself. To protect sellers, the public pin may be shown at an approximate or slightly offset position rather than an exact address.
- To show "nearby" listings, we may estimate your approximate location from your IP address or from a location you enter manually.
- Precise device location (GPS) is used only if your device or browser permission allows it and you enable it; you can turn it off at any time in your device settings.
- We do not continuously track your background location.
Data retention
We keep personal data only as long as necessary for the purposes described in this policy, then delete or anonymise it.
- Account data — for as long as your account is active, and for a limited period after closure to handle disputes and meet legal duties.
- Listings — while published and for a reasonable period after they expire or are removed.
- Chat messages — for the duration of the conversation and a limited retention window to support moderation, safety, and dispute resolution.
- Payment and billing records — for the period required by tax and accounting law (typically several years).
- Usage and security logs — for a short period for security, troubleshooting, and abuse prevention.
How we protect your data
We use technical and organisational measures designed to protect your data, including encryption in transit, hashed storage of passwords, access controls, network protection, logging, and regular review of our systems.
No method of transmission or storage is completely secure. Please use a strong, unique password, keep your login details private, and be cautious of suspicious messages. If we become aware of a personal data breach that is likely to put your rights at risk, we will notify the relevant supervisory authority and, where required, affected users.
Your rights
Subject to applicable law, you have the following rights regarding your personal data:
- Access — obtain confirmation of whether we process your data and a copy of it.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data in certain circumstances (the "right to be forgotten").
- Restriction — ask us to limit processing in certain cases.
- Portability — receive your data in a structured, machine-readable format and transfer it.
- Objection — object to processing based on our legitimate interests, including profiling.
- Withdraw consent — withdraw any consent you gave, without affecting prior processing.
- Lodge a complaint — complain to a data-protection supervisory authority in your country (in Ukraine, the Ukrainian Parliament Commissioner for Human Rights).
To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before acting on a request.
International data transfers
Selly operates internationally, and your data may be processed in countries outside your own, including outside the European Economic Area and Ukraine. Where we transfer personal data internationally, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses or transfers to countries recognised as providing adequate protection.
You can request more information about these safeguards by contacting [email protected].
Children
Selly is not intended for children. The Service is available only to users aged 18 or older, and we do not knowingly collect personal data from anyone under 18.
If you believe a minor has provided us with personal data, contact [email protected] and we will take steps to delete it.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our Service, technology, or legal requirements. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you within the Service or by email.
Your continued use of Selly after an update means you accept the revised policy.
Contact and how to exercise your rights
If you have questions about this Privacy Policy or wish to exercise your data-protection rights, please contact us:
- Privacy and data requests: [email protected]
- General support: [email protected]
We will respond to your request within the time limits set by applicable law. If you are not satisfied with our response, you have the right to complain to a data-protection supervisory authority.