Privacy

Who handles your data?

MF-BS, the sole proprietorship operating Selvup, is the data controller for account and service data. Its details are in the legal notice. For questions or requests about your data: contact@selvup.com.

Basis for processing

• Creating and managing your account, guides and subscription relies on performing our contract or taking steps at your request before entering into it.
• Security, abuse prevention and assistance outside the contract rely on our legitimate interests, subject to your rights and freedoms.
• Optional statistics rely on your consent, which you can withdraw at any time.
• Keeping required supporting records relies on applicable legal obligations.

Account and guides

Your account stores your email address, first and last name, a password hash, your guides and their versions, and usage counters. These details are used to identify you, retrieve your work and apply your trial or subscription access.

Your first and last name remain in your private account: they do not automatically become your public creator name. Information you choose to publish in a guide or on your creator page becomes accessible to people visiting its link.

Your email address is used to verify your account, send the access links provided by the account journey and help you recover access. Required fields are identified during sign-up.

Guide answers and statistics

A visitor’s answers are used in the browser to calculate a recommendation from the guide’s rules. They are not recorded as an individual answer history in the service database.

The service does retain technical session information and events for visits, questionnaire starts, completions and clicks. Technical identifiers, including hashes, help manage sessions and avoid some duplicate counts. Counters support guide statistics and usage limits; they do not measure unique people or sales.

When you open a creator’s offer, you leave the Selvup journey for its destination page. Data collected there are covered by that operator’s practices.

Operation and security

Technical connection information is processed to display pages, maintain a session and protect accounts. It may include the IP address processed by the infrastructure, request information and session tokens.

Cookies and browser storage are used for the session, language preference, local draft and optional statistics choice. You can clear them through your browser; doing so may sign you out or remove a draft stored only on that device.

Optional usage statistics

Cloudflare Web Analytics (Insights) is disabled on Selvup. No Insights script or beacon is loaded or sent. The optional Selvup statistics described here are separate and remain subject to your choice.

Optional usage statistics are off by default. You can enable or disable them using the footer controls without changing your access to the service. They are separate from the counters needed for guides and quotas.

With your permission, Selvup counts events grouped by day: page views, trial-link clicks and completed steps such as finishing a preview, creating an account, saving a draft or publishing. These totals do not include your email address, an account identifier, your text, your answers or your offer links.

These optional counters are retained for up to 90 days. They do not track people across websites or measure unique visitors or sales in your store.

Subscription and support

Paddle processes the information needed to take payment and bill your subscription. Selvup keeps the subscription references and status needed to grant account access. Payment details are entered with Paddle, not in Studio forms.

When you email us, we receive your email address, message and any attachments you choose to provide so we can handle your request. Do not send passwords or payment card details.

Guide translation

A guide can display a translation once one has been prepared. Available translations are stored by Selvup for reuse, without requesting a new translation on every visit. They do not replace your recommendation rules.

When translation generation is enabled, text fields are sent to Google Cloud Translation: titles, offer descriptions, questions and answer options. This processing does not require your password, card details or visitors’ personal answers. Avoid adding confidential information to those texts.

Providers and processing locations

• Cloudflare provides hosting and technical protection for the service.
• Resend delivers automated account emails.
• Zoho hosts the mailbox used to respond to support requests.
• Paddle processes billing and payment data under its own policy.
• Google Cloud Translation processes text when translation generation is enabled.

These providers may process data in several countries. The links above describe their practices. Use of the service is not a promise that all data remain in one country or region.

Retention and deletion

Ending a trial or cancelling a subscription does not automatically delete guides or the account. You can export your data and use the account deletion process in the Studio, or contact us to exercise your rights.

An unfinished sign-up link expires after 30 minutes. This period concerns the validity of the sign-up journey, not the general retention of account data.

For other information, retention depends on its purpose: managing the account, handling a support request, security, documenting a transaction or resolving a dispute. Some information may need to be kept where legally required. Account deletion does not necessarily erase records held by Paddle or every backup copy at the same moment.

Your choices and rights

Depending on the rules that apply to your circumstances, you can request access to your data, correction or deletion, object to certain processing, request a restriction or obtain a portable copy. You can withdraw your permission for optional statistics through the footer controls.

Send your request to contact@selvup.com and identify the data or account concerned, without sending a password. Limited information may be requested to verify that the request comes from the person concerned. You may also contact the data protection authority competent for your circumstances.