Sello Privacy Policy

Updated 9 November 2026 · in force since Sello opened to the public

Sello is run by PT IZAAJA SOLUSI DIGITAL. This policy explains what data we keep, why, and your rights as a business owner, as well as the rights of customers whose data you keep in Sello.

1. Our two roles

For your data as a business owner (account, staff, subscription), we are the controller.

For customer data you keep in Sello, you are the controller and we are the processor. We only process it to run Sello for you; we do not sell it, use it for advertising, or contact your customers on our own behalf.

2. Owner and staff data

Account: name, email, phone number, password (stored as a one-way hash), language and time zone — the same account as Lamxo and Izaaja.
Business: outlet name, address and receipt settings.
Staff: name, role and PIN (stored as a one-way hash).
Subscription: plan, dates and purchase status from Google Play.
Technical records: IP address, device type and error logs, for security and fixes.

3. Order and customer data

Orders: service, quantity, price, promised date, status, deposit, final payment, payment method, staff member, outlet and order number.
Customers: name and phone number, plus address if you use pickup and delivery.
Item photos you take, up to 10 per order, and cost approval records.

4. What we do not keep

Card numbers, card PINs or card terminal data — payments are recorded by type and amount only.
Money from customers: payments go straight to you.
WhatsApp message content: messages are sent from the WhatsApp app on your phone, not from our servers.
Subscription card details: payment is processed by Google Play.

5. What the data is used for

Running Sello: recording orders, printing labels and receipts, showing the order board and building reports.
Counting the free plan allowance and managing subscriptions.
Security, answering help requests and meeting legal duties including bookkeeping and tax.

We do not sell data, do not use your customers' data for advertising, and do not profile you or your customers.

6. Legal basis

We process data because it is needed to perform our agreement with you, because of legal duties (bookkeeping and tax), because of our legitimate interest in keeping the service secure, and — for customer data — on your instructions as controller.

7. Retention

Account data is kept while the account is active and deleted permanently 14 days after a deletion request. Transaction and tax records are kept for 10 years, because Indonesian bookkeeping rules require it, without customer names, phone numbers or addresses.

8. Location and recipients

Data is stored on servers of Contabo GmbH in Germany. Other recipients only as needed: Cloudflare (network and security) and Google Play (subscription payments). The full list of providers shared with Izaaja is in the Izaaja Privacy Policy.

9. Security

All connections use HTTPS. Secret data is stored encrypted, passwords and PINs are stored as one-way hashes, and staff access is limited by the roles you set.

10. If a breach happens

For your account data, we notify you and the competent authority within 72 hours (3×24 hours under Indonesia's Personal Data Protection Law). For customer data, we notify you without undue delay so you can meet your duties as controller.

11. Cookies

The sello.izaaja.com site uses no advertising or tracking cookies and has no sign-in page.

12. Your rights and your customers' rights

You have the right to see, correct, export and delete your data. Send requests to dpo@izaaja.com from your account email; we answer within 14 days.

Customers who want to see or delete their data contact the business where they left their item. If such a request reaches us, we pass it to that business.

If you are not satisfied with our answer, you may complain to the data protection authority of your country — in Indonesia the Ministry of Communication and Digital Affairs (komdigi.go.id), in Malaysia pdp.gov.my, in the Philippines privacy.gov.ph, in Singapore pdpc.gov.sg, in Thailand pdpc.or.th, in Vietnam the A05 department of the Ministry of Public Security (bocongan.gov.vn), and in Taiwan pdpc.gov.tw. If you use Sello from a region with laws like the GDPR (EU/UK), you have the rights that law gives you and we handle them through the same address.

13. Children and changes

Sello accounts are for people aged 18 and over. We announce important changes to this policy at least 30 days before they take effect, by email or in the app.

14. Contact

Data protection officer: dpo@izaaja.com
Sello help: support@izaaja.com