Privacy Policy — SellFlow
Legal

Privacy Policy

Effective: 3 July 2026 Operated by: CIE Marketing Jurisdiction: Australia
Your privacy matters. CIE Marketing operates SellFlow and is committed to protecting the personal information you share with us. This policy explains what we collect, how we use it, and your rights. We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).
01

Who We Are

SellFlow is operated by CIE Marketing ("we", "us", "our"), a digital marketing company based in Australia. We are the data controller for personal information collected through the SellFlow website and platform.

SellFlow is powered by a third-party AI infrastructure platform. That provider acts as a data processor on our behalf, processing data only to deliver the SellFlow service. Their processing is governed by a Data Processing Agreement that requires them to protect your data in accordance with applicable privacy laws.

Contact: support@ciemarketing.com.au


02

What We Collect

Account & Billing Information

  • Name, email address, phone number
  • Business name and address
  • Payment details (processed by Stripe — we do not store card numbers)
  • Tax identifiers where required

Platform Usage Data

  • AI agent configurations, instructions, and knowledge base content you create
  • Contacts imported into the platform
  • Conversation history between your AI agent and your customers
  • Channel connections (WhatsApp numbers, Instagram accounts, etc.)

Technical Data

  • IP address, browser type, device information
  • Usage logs and session data
  • Approximate location (country/city level)

Communications

  • Support messages and emails you send us
  • Feedback and survey responses

03

How We Use Your Data

We use the information we collect to:

  • Provide, operate, and improve the SellFlow platform
  • Process your subscription and payments
  • Deliver AI conversations across your connected messaging channels
  • Provide customer support and respond to your enquiries
  • Send service emails (billing, security alerts, platform updates)
  • Detect fraud and protect platform security
  • Comply with legal obligations
  • Send marketing communications where you have given consent (you can unsubscribe at any time)

We do not sell your personal data. We do not share your data with third-party advertisers.


04

Third-Party Processors

To deliver SellFlow, we work with the following categories of third-party service providers. Each is bound by data processing agreements and required to protect your data.

Provider Purpose Location
AI Platform ProviderCore platform, AI agents, messaging integrationsEU (Netherlands/Germany)
StripePayment processingUS / EU
AnthropicAI language model (Claude)US
GoogleAI processing (Gemini), OAuth integrationsUS / EU
Meta PlatformsWhatsApp, Instagram, Messenger channel deliveryUS / EU
TwilioSMS deliveryUS
HetznerServer hosting and infrastructureGermany (EU)

For international data transfers (particularly to the US), transfers occur under Standard Contractual Clauses or equivalent mechanisms as required by applicable privacy law.


05

AI Processing

SellFlow uses AI language models (including Anthropic Claude and Google Gemini) to power your sales agent. When your agent responds to a customer message, that conversation is processed by these AI systems.

Your data is not used to train AI models. Neither CIE Marketing nor our AI infrastructure provider uses your customer data or conversation content to train, fine-tune, or improve AI models — unless you have separately and explicitly agreed to such use in writing.

AI model providers (Anthropic and Google) operate under enterprise agreements that prohibit them from training on customer data processed through our platform.

AI-generated responses are not guaranteed to be accurate in all situations. For high-value or legally significant decisions, we recommend human review of AI outputs.


06

Data Storage & Security

Your data is stored on servers located in the EU (Germany), operated by our infrastructure provider. We implement the following security measures:

  • TLS 1.2+ encryption for all data in transit
  • Encryption at rest for credentials, tokens, and sensitive data
  • Role-based access controls limiting who can access your data
  • Automated backups retained for 90 days for disaster recovery
  • Regular security audits and vulnerability scanning

In the event of a data breach that affects your rights or freedoms, we will notify you and relevant authorities without undue delay, and in any event within 72 hours of becoming aware.


07

Data Retention

Data TypeRetention Period
Account & profile dataDuration of account, then deleted on request
Conversation & contact data3 years after last activity (or shorter if configured)
Financial / billing records7 years (Australian tax law)
Server logs12 months
Backup copies90 days after deletion from active systems
De-identified analyticsIndefinitely

After cancellation, you have 30 days to export your data. After this window, your data will be permanently deleted from active systems.


08

Your Rights

Under the Australian Privacy Act and applicable international privacy laws, you have the following rights regarding your personal information:

Access
Request a copy of the personal data we hold about you.
Correction
Ask us to correct inaccurate or incomplete information.
Deletion
Request deletion of your personal data (subject to legal obligations).
Portability
Receive your data in a machine-readable format.
Opt-out
Unsubscribe from marketing communications at any time.
Complaints
Lodge a complaint with the OAIC if you believe we've mishandled your data.

To exercise any of these rights, email us at support@ciemarketing.com.au. We will respond within 30 days.

You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.


09

Cookies

The SellFlow website uses cookies for the following purposes:

  • Essential cookies — required for login, session management, and security. Cannot be disabled.
  • Functional cookies — remember your preferences and settings.
  • Analytics cookies — help us understand how the platform is used (anonymous). Require your consent.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use SellFlow.


10

Children

SellFlow is a business tool intended for use by adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.


11

Policy Updates

We may update this Privacy Policy from time to time. For material changes, we will notify you by email or via an in-platform notice at least 30 days before the changes take effect.

Your continued use of SellFlow after the effective date of any update constitutes your acceptance of the revised policy. The "Effective" date at the top of this page will always reflect the most recent version.


12

Contact Us

For privacy-related questions, data requests, or complaints:

CIE Marketing — Privacy

📧 support@ciemarketing.com.au

🌐 ciemarketing.com.au

We aim to respond to all privacy requests within 30 days.