Privacy Policy

MODERN LUXURY CARPETS SARL, 12 Rue de Strasbourg, L-2560 Luxembourg City, Luxembourg. RCS: B174835. VAT: LU25933881. For data protection inquiries, contact: support@selavi.ai.

We collect the following categories of data:

Account data: Name, email address, region, authentication provider (Google, Apple, or email).

Conversation data: Messages exchanged with AI personas, including text and transcripts from voice interactions. Voice recordings are processed for transcription and immediately discarded — only transcripts are stored.

Wellness data (special category): Mood indicators, assessment results, and coaching context shared during sessions. This data is collected only with your separate explicit consent (see Section 4).

Usage data: Session timestamps, feature usage, and device information.

Payment data: Subscription tier and billing dates. Payment processing is handled by Stripe — we do not store credit card numbers or bank details.

We use your data to: (a) provide and personalize the Selavi service; (b) maintain conversation context across sessions; (c) process payments; (d) improve the service through aggregated, anonymized analytics; (e) communicate with you about your account; (f) if you opt in to marketing cookies, measure marketing performance via Google, Meta, and TikTok (never using your wellness, chat, or voice data). See Section 8 (Cookies) to opt out.

Consent: Wellness and mood data (GDPR Article 9 special category). You provide separate explicit consent during onboarding. You may withdraw consent at any time.

Contract performance: Account data and conversation data, necessary to provide the service you signed up for.

Legitimate interest: Usage analytics, security monitoring, fraud prevention.

We share data with the following service providers:

Stripe (payments) — processes subscription payments under their own privacy policy.

LLM Provider (AI processing) — conversation content is sent to our AI provider for response generation. No permanent storage by the provider.

Hetzner (hosting) — EU-based infrastructure provider, GDPR compliant.

Cloudflare R2 (CDN) — media and asset delivery.

Google, Meta, TikTok (analytics & advertising measurement) — loaded only if you opt in to marketing cookies. They receive limited identifiers/usage events for measurement and never your wellness, chat, or voice data. Opt out any time via "Essential only" in the cookie banner.

We do not sell your personal data for money. The optional marketing pixels above constitute "sharing" under the California CPRA; you control them through cookie consent (see Sections 8 and 10).

AI processing may involve data transfers to the United States. These transfers are covered by the EU-US Data Privacy Framework and Standard Contractual Clauses where applicable.

Active accounts: Data retained while your account is active.

Paused accounts: Data retained indefinitely until you reactivate or delete your account.

Deleted accounts: 90-day soft-delete by default (recoverable), or immediate deletion by request. After the retention period, all data is permanently and irreversibly deleted.

Selavi shows a cookie consent banner. Essential cookies (session tokens, authentication state, region preference) are always required for the service to function. Optional analytics & advertising cookies — Google Analytics, the Meta (Facebook/Instagram) pixel, and the TikTok pixel — load only if you choose "Accept all." Choosing "Essential only" loads none of them, and you can change your choice at any time by reopening the banner. We use Google Consent Mode v2 so no advertising/analytics tags fire before you opt in.

If you reside in the EU, you have the right to: (a) access your personal data; (b) rectify inaccurate data; (c) erase your data ("right to be forgotten"); (d) port your data to another service; (e) restrict processing; (f) object to processing; (g) withdraw consent at any time.

You can exercise most of these rights directly through your account settings (data export, account deletion). For other requests, contact support@selavi.ai.

You also have the right to lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg. Website: https://cnpd.public.lu.

If you reside in California, you have the right to: (a) know what personal information we collect; (b) delete your personal information; (c) correct inaccurate personal information; (d) opt out of the "sale" or "sharing" of personal information; (e) non-discrimination for exercising your rights.

Selavi does not sell personal information for money. We do "share" limited identifiers with Google, Meta, and TikTok for advertising measurement only if you opt in to marketing cookies. To exercise your "Do Not Sell or Share My Personal Information" right, choose "Essential only" in the cookie banner (this immediately stops all such sharing), or email support@selavi.ai with the subject "Do Not Sell or Share." We action requests within 15 business days and do not discriminate against you for opting out.

Selavi does not knowingly collect personal data from children under 16 (EU) or under 13 (US). If you believe a child has provided data to Selavi, contact support@selavi.ai.

You can download all your personal data at any time through Settings > Your Data > Download My Data. The export includes your profile, conversations, memory context, assessments, and billing history.