Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains how Sellbert collects, uses, shares, and protects personal data in connection with our website, web application, and AI sales assistant services. It also explains the roles we take under data-protection law and the rights you have. For how we use cookies and similar technologies, see our Cookies Policy; for the terms governing the Services, see our Terms of Service.

1. Who we are

Sellbert is operated by Mažoji Bendrija “Dekma”, a company registered in the Republic of Lithuania, legal entity code 307544235, registered at Sodžiaus g. 34, Macenių k., LT-90100 Plungės r. (“Sellbert”, “we”, “us”). Data about the company are collected and stored in the Register of Legal Entities; the register manager is the state enterprise Centre of Registers.

If you have any question about this policy or about how we handle personal data, or you want to exercise your rights, contact us at sylvester@sellbert.com.

2. Scope and the people this policy covers

This policy covers personal data we handle about:

• Website visitors: people who visit sellbert.com, including these legal pages and the free preview.
• Customers and their users: the businesses that sign up for the Services and the individual team members who use an account.
• Business contacts: the people our customers reach through their campaigns, and the people whose business details we compile into our company and contact data, such as names, job titles, work email addresses, LinkedIn profile links, and, where a customer enables it, business phone numbers.

Our Services are built for business-to-business use and are intended for business and professional users who are at least 18 years old.

3. Our roles: controller and processor

Who is responsible for personal data depends on the activity, and this mirrors our Terms of Service:

• Sellbert as processor. For the personal data in a customer's campaigns (the people they contact, the lists they upload, and the replies they receive), the customer is the data controller and Sellbert processes that data on the customer's behalf, only on the customer's instructions and to provide the Services. Where the GDPR applies, a data processing agreement applies and is available on request.
• Sellbert as controller. For our own website, account, and billing data, and for the business contact data we compile from public sources and third-party data providers to build and maintain our company and contact data, Sellbert acts as an independent controller and decides how and why that data is used, as described below.

Because the customer decides who to contact and on what basis, the customer is responsible for having a lawful basis to contact each person reached through the Services and for the accuracy and lawfulness of the data they provide, as set out in the Terms of Service.

4. What we collect, why, and our lawful bases

Where Sellbert acts as a controller, we rely on the following lawful bases under Article 6 of the GDPR.

Website visitors

Our marketing website runs no analytics, advertising, or tracking tools and sets no non-essential cookies. Our hosting and network providers process limited technical data, such as IP address and request logs, to deliver the site and keep it secure. Lawful basis: our legitimate interests (Article 6(1)(f)) in operating and securing our website. If you run the free preview, we process the website address you enter and the information the preview generates so we can show you the result.

Customers and their users

When you create an account and use the Services, we process account and profile details (such as name, work email, and login credentials), your business information, your campaign settings, the connections you authorize, billing and transaction records, support messages, and usage and log data about how the Services are used. We use this data to create and administer your account, provide and secure the Services, process payments, provide support, and communicate with you about the Services. Lawful bases: performance of our contract with you (Article 6(1)(b)); compliance with legal obligations, such as keeping accounting and tax records (Article 6(1)(c)); and our legitimate interests (Article 6(1)(f)) in securing, supporting, and improving the Services. As described in the Terms of Service, we may use aggregated or de-identified usage data, which does not identify you or any individual and does not contain your content, to operate, benchmark, and improve the Services.

Business contacts

To build and maintain our company and contact data, we compile business details about people in their professional capacity (such as name, job title, employer, work email address, LinkedIn profile link, and business phone number) from public sources and third-party data providers, together with a dated business reason to make contact, such as hiring, funding, or advertising activity. Lawful basis: our legitimate interests (Article 6(1)(f)) in compiling and offering a business-to-business sales dataset, balanced against the interests and rights of the people concerned. We handle this data as described in the Company and Contact Data section of our Terms of Service: it is licensed to customers only for their own outreach within the Services and for syncing to their own connected CRM, and it may not be resold, published, or used to build a separate database. A business contact can object to this processing at any time, as described in Your rights below. Where this data is then used inside a customer's campaign, Sellbert processes it on that customer's behalf as a processor.

5. AI processing

The Services use AI to read the public pages of a website, work out which companies fit, find the right people to contact, and draft emails and messages for the customer to review. As set out in the Terms of Service, by default nothing is sent until the customer approves it, and we do not use your content to train general-purpose or third-party AI models. AI-generated matches, reasons, and drafts may be wrong and are a working aid that the customer is responsible for reviewing.

6. Payments

Payments are processed by Stripe. On the checkout page, your card details are entered into payment fields hosted by Stripe and are sent directly to Stripe; they do not pass through or get stored on our servers. We receive from Stripe the information we need to manage your subscription, such as a payment reference, the result of the charge, and billing details. Express payment options such as Apple Pay and Google Pay, where offered, are handled through Stripe. Stripe's processing of your payment data is governed by Stripe's own privacy policy.

7. Processors and recipients

We share personal data with service providers who process it on our behalf and on our instructions, under contracts that require them to protect it. The providers we rely on for our website, account, billing, and communications are:

• Vercel: website and application hosting.
• Stripe: payment processing.
• Resend: sending our transactional email (using its EU region).
• Cloudflare: DNS and inbound email routing.
• Google Workspace: the mailbox that our contact address forwards to.

We may also disclose personal data where we are required to by law, to a competent authority, or to establish, exercise, or defend legal claims, and in connection with a merger, acquisition, or sale of assets, in which case we will tell you if your data becomes subject to a different privacy policy. We do not sell personal data, and we do not use it for advertising. A current list of the processors we use is available on request.

8. International transfers

Some of our processors are located outside the European Economic Area, or process data in other countries. Where personal data is transferred outside the EEA, we rely on an adequacy decision of the European Commission where one applies, or otherwise on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with any additional measures needed to protect the data. You can ask us for more information about the safeguards we use.

9. Retention

We keep personal data only for as long as we need it for the purposes described in this policy, and then delete it or irreversibly anonymize it. Account and profile data is kept for the life of your account and for a limited period afterwards. Billing and transaction records are kept for as long as required by applicable accounting and tax law. Personal data we process as a processor in a customer's campaigns is kept while the customer uses the Services and is deleted, as described in the Terms of Service, when the account is terminated. Business contact data in our company and contact data is reviewed and updated over time, and is removed when it is no longer accurate or relevant or when a valid objection or deletion request applies.

10. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, and alteration, including encryption of data in transit, access controls, and the use of reputable service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential, as set out in the Terms of Service.

11. Your rights

Subject to the conditions and exceptions in the law, you have the following rights under Articles 15 to 22 of the GDPR in relation to personal data for which we are the controller:

• Access: to be told whether we process your personal data and to receive a copy of it.
• Rectification: to have inaccurate or incomplete data corrected.
• Erasure: to have your data deleted in certain circumstances.
• Restriction: to have our processing restricted in certain circumstances.
• Portability: to receive certain data in a portable format and have it transmitted to another controller where technically feasible.
• Objection: to object to processing based on our legitimate interests, on grounds relating to your situation.
• Objection to direct marketing: to object at any time to processing of your personal data for direct marketing, after which we will stop using it for that purpose.
• Rights relating to automated decision-making that produces legal or similarly significant effects; we do not make such decisions about you.

If you are a business contact and you do not want to be contacted through outreach run with the Services, you can opt out at any time by replying to ask the sender to stop, by using any opt-out in a message, or by emailing us at sylvester@sellbert.com. Where the outreach was run by one of our customers, we will act on your request as the processor and will pass it to the customer, who is the controller for that campaign, and we will remove your details from our company and contact data where we are the controller. To exercise any right, email us at sylvester@sellbert.com. We may need to verify your identity, and we will respond within the time the law allows. Exercising these rights is free unless your request is manifestly unfounded or excessive.

12. Complaints

If you have a concern about how we handle your personal data, please contact us first at sylvester@sellbert.com so we can try to resolve it. You also have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija, VDAI), vdai.lrv.lt. If you are in another country, you may also complain to the supervisory authority where you live or work.

13. Children

The Services are for business and professional use and are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time, for example when we change how the Services work or which providers we use. The date at the top of this page shows when it was last revised. For significant changes we will take reasonable steps to let you know. Continued use of the Services after a change takes effect means you are aware of the updated policy.

15. Contact us

For any privacy question or request, contact: