Terms and Conditions and Privacy Policy

1. Who operates the platform

"TBP", "we" or "the Company" operates Sella (sellapp.com.co, the business dashboard, the customer sign-up pages and the related digital passes; the "Platform"). This document is issued under Colombian data-protection law (Law 1581 of 2012 and related regulations). For users outside Colombia, applicable local privacy laws also apply where relevant. In case of discrepancy, the Spanish version prevails.

2. Definitions

• Business: a person or company that creates a Sella account to offer a loyalty program (including shopping centers, associations and their member stores).
• Customer: a person who gets a stamp card, passport or shopping-center card by scanning a Business's QR code.
• Cashier: a person authorized by a Business to record stamps and redeem rewards from Register mode.
• Data subject: any of the individuals above, regarding their own personal data.
• Reward: any product, service, discount, gift, access or advantage a Business promises its customers through the Platform.

By creating a Business account, signing up as a Customer, using Register mode or browsing the Platform, you accept this document.

3. Our role regarding personal data

1. Customer data (name, mobile, birthday, stamps, visits): the Business is the data controller, since it decides why the data is used (its loyalty program, its promotions). TBP acts as a data processor on the Business's behalf and under its instructions, for the purposes built into the Platform, and gives the Business the tools to honor its customers' rights. Each Business is responsible for obtaining its customers' consent and for lawful use of the data.
2. Business and Cashier account data (name, email, billing details) and technical usage data: TBP is the controller.

When a Business belongs to a shopping center within Sella, the shopping center receives only aggregated, anonymous information (visit counts, stores visited, hours, cross-visits). No Business ever sees another Business's customer contact details.

4. Data we process

• Customers: first and last name, mobile number with country code, birthday; email and gender are optional; if you give your gender, the Business sees it in its customer list and may use it to target its promotions and in statistics. Program data: business and location where the card was created; stamps with date, time, location, quantity and source (in store or delivery code); redemptions and rewards delivered (final and along the way); tier in the Business's or shopping center's program; passports and progress; and the history of each action with the account (owner or cashier) that made it, including corrections with their reason, undone stamps and merged duplicate cards. If the same mobile number signs up twice at a Business, we flag the cards as a possible duplicate so the Business can merge them after confirming with you in person; the number is never shown to them. Technical data: session identifier, language, whether the pass was saved to Google Wallet, and a record of your consent (date, policy version, business, IP address and browser). If you save the pass to Apple Wallet, the device identifier and the notification token Apple assigns to that pass. We do not access device location or contacts.
• Businesses and Cashiers: business name, owner's name and mobile number, city, card design, Google review link, the business profile they describe (goal, tone, star product, slow days, promotion limits), a record of accepting this policy (date, version, email, IP address and browser), how the Business reached Sella (the campaign, ambassador or invitation code it arrived with, kept in the browser without cookies for 90 days and sent only if it signs up, and the optional answer to "How did you hear about us?", used to measure our sales channels and pay ambassador commissions; if the Business arrived through a Sella ambassador's link, that ambassador sees in their portal the Business's name, sign-up date and whether a plan was activated or paid, only to track their commission, and never sees the Business's customer data), Sella's internal sales notes, sign-in email, password (hashed, never visible to us) or Google sign-in, country and time zone, uploaded logos and images; billing details for the plan; activity data (stamps, redemptions, promotions, statistics). Card payments are processed by the payment gateway; we never store card numbers.
• Technical: IP address, browser type and access logs for security and fraud prevention. In the business dashboard we record when each business signs in and which sections it opens (only the section name and how many times), to improve the service and provide support; never what it types or its customers’ data. We use browser local storage for preferences and session; we don't store the sign-up form's personal data on the device. On our website we use the Google Ads tag to measure our ad campaigns only if you accept cookies in the notice shown on entry. Your choice is stored in your browser and you can change it anytime under «Cookie preferences» at the bottom of the page. If you accept, Google Ads measures visits and business sign-ups; we never turn on personalized advertising. Browsers may also send us technical security reports (content security policy): we only keep the blocked domain, the directive and the page, with no personal data.
• Ambassador applicants: people who apply to be a Sella ambassador at sellapp.com.co/embajadores give us their name, ID number (cédula), mobile number, email, city, how they plan to recommend Sella and, optionally, their RUT (Colombian tax registration). We use them only to review the application, contact them by WhatsApp or email, sign the ambassador agreement, run the program and pay commissions with legal withholdings. The RUT is kept in private storage that only the Sella team can access; it is never public or shared with Businesses. Nothing is stored without the explicit consent in the form. Pending applications are deleted, with their RUT, after 180 days if not decided, and rejected ones after 90 days.
• Location: Sella does not track or store customers' location. If a Business on a paid plan turns on nearby notices, Sella stores only the location (address and coordinates) of that Business's locations and includes it in the pass. The customer's phone, through Apple Wallet, Google Wallet or Samsung Wallet and according to the location and notification permissions the customer gave those apps, compares its own location with the Business's and decides whether to show the notice; that location is never sent to Sella or the Business. Customers can turn it off anytime by removing their wallet's location or notification permission. Locations are included in the Apple, Google and Samsung passes. To place a location on the map, the Business may search its address on the OpenStreetMap map (a third-party service, © OpenStreetMap contributors), which receives the typed address, the Business's city and, like any website, the searcher's IP address.

5. Purposes

• Creating and operating stamp cards, passports and shopping-center cards; recording stamps; validating redemptions; showing Customers their progress.
• Issuing and updating the pass in the Customer's digital wallet (Google Wallet on Android, Samsung Wallet on Samsung phones, Apple Wallet on iPhone), including pass notifications. For Apple Wallet, the device registers with Sella using an anonymous identifier used only to tell it the pass changed.
• Sending, on the Business's behalf, automatic alerts (new stamp, reward ready, one stamp to go, birthday, we-miss-you), immediate or scheduled promotions and individual notices to that Business's customers, within the frequency limits set by the Platform (at most 3 notices a day per pass).
• Google review requests (if the Business turns it on, paid plans): 1 hour after redeeming a reward we send your wallet an invitation to review the Business on Google, the same for every customer, with no incentives and at most once every 90 days per Business. The link goes through sellapp.com.co/r/… to count clicks in total per Business (not per person); you post the review directly on Google, under its policies.
• Delivery codes (paid plans): the Business may hand out one-time codes you add at sellapp.com.co/c or from your card's private link. We record which card used each code, and the Business sees the first name of whoever used it. At most 3 a day per card.
• Gift cards (Sella Plus add-on): when a Business sells a gift card we store the recipient's name and, if entered, who gives it and a message, plus the balance and usage history (date, amount, location and cashier). We use that name only to deliver the card and send balance notices to the pass; the card link only shows the first name. Sella doesn't process payments: the Business charges at its register. If an email is entered at the sale (the recipient's, or the buyer's if they'll hand it over), we use it only to send the card and its balance notices; the Business sees it in its dashboard to resend the card, and we never use it for advertising. See section 14.
• Sign-up at the register: the cashier may show you a one-time QR (10 minutes); when you sign up, the register sees your first name to give you your first stamp.
• Bring a friend (if the Business turns it on): each customer's card carries an invite link with a random code that does not reveal their identity. If a friend signs up with that link, Sella records who invited whom to deliver the free stamp, and the inviter is only shown the friend's first name in their wallet notice.
• Providing the Business with its customer list (name, birthday, gender if given, last 4 digits of the mobile number, tier, activity in its program and a record of consent) and statistics; the Customer's mobile number and email are held by TBP and used only to run the program, send wallet notifications and honor the data subject's rights. The shopping center receives aggregated statistics only.
• Managing accounts, cashiers, plans, payments and invoicing; support.
• Security, fraud and abuse prevention, legal compliance and responding to lawful requests from authorities.
• Improving the Platform using aggregated, anonymous information.

We do not carry out profiling with legal effects or make automated decisions that affect data subjects' rights. Visitor "tiers" and promotion audiences are arithmetic calculations on visits that the Business uses for its own perks.

6. Consent

Customers authorize the processing of their data by filling in and submitting the sign-up form, which explains how the information will be used and links to this policy. Businesses authorize the processing of their data when they create their account. Consent can be withdrawn at any time as described in section 10, without affecting processing already carried out or data the law requires us to keep.

7. Sharing

We do not sell, rent or trade personal data. We share data only with: the Business a Customer signed up with (name, birthday, gender if given, last 4 digits of the mobile number, tier, activity in that Business's own program and the consent record; not the full mobile number or email, and messages from the Business reach the customer through the Platform); the shopping center a Business belongs to (aggregated data only); Google LLC (Firebase infrastructure, App Check/reCAPTCHA, Google Wallet) under the Google Privacy Policy; Meta Platforms, Inc. (WhatsApp Business Platform: only if the Business turns on automatic WhatsApp notices and the Customer accepts them when signing up; it receives the Customer's mobile number, name and the notice text, and the Customer can stop them by replying "STOP") under the WhatsApp Privacy Policy; Samsung Electronics Co., Ltd. (Samsung Wallet: issuing and updating the stamp card on Samsung phones when the Customer chooses to save it there; it receives the business name, the Customer's name on the card, their stamps and rewards, and the card code) under the Samsung Privacy Policy; Apple Inc. (Apple Wallet: issuing and updating passes on iPhone, including pass notifications through the Apple Push Notification service, APNs) under the Apple Privacy Policy; ePayco S.A.S. (Colombian payment gateway) to process Business plan payments by card, PSE or Nequi; it receives the payment details you enter in its checkout, which Sella never sees or stores; Alegra (Soluciones Alegra S.A.S.) to issue the plan's electronic invoice with the Business's billing data; Resend, Inc. (United States), as processor for gift card emails, receiving the recipient's email and name, the Business name and the email content, only to deliver it; Anthropic PBC for the dashboard's AI features, receiving only aggregated program statistics and the profile the Business writes about itself (goal, slow days, tone, star product and promotion limits), never customers' name, mobile, email or birthday; goQR.me (api.qrserver.com) to render some QR images, receiving only the public web address; Google Ads, on our website only and only with your consent; Expo (Sella mobile app notifications), Google Fonts and jsDelivr (page fonts and libraries), which receive your device IP address when the page or app loads; and authorities when legally required. Google and Resend may store and process data in the United States or other countries; these transfers are made under Colombian Law 1581 of 2012, and by accepting this policy you consent to them.

8. Security

All traffic is encrypted (HTTPS/TLS). Stamps, redemptions, plan changes and other sensitive operations are validated on our servers, not on the user's device. Access rules prevent any user from reading or modifying data that is not theirs; cashiers can only record stamps and redemptions. Third-party credentials are stored in a secrets manager. We keep daily backups with limited retention. No system is infallible: if we detect a security incident affecting personal data, we will notify affected individuals and the competent authority (in Colombia, the Superintendence of Industry and Commerce, SIC) as required by law.

9. Retention and deletion

Customer data is kept while the Customer has a card at any Business; a Business can delete a customer from its program from the dashboard, which removes their cards, stamps and history there (visits, invitations, review requests, used delivery codes and the consent record for that Business); if no card or passport is left, their profile (name, mobile, email and birthday) is automatically deleted within days. Business data is kept while the account is active; a Business may request deletion of its account, which permanently removes its business, cards, customers (with their history, invitations, review requests and delivery codes there), promotions, cashiers and images. When a card is deleted, the Google Wallet pass is marked expired and the Apple Wallet pass is voided; you can remove it from your wallet. To void the Apple pass we keep only a technical pass code, with no personal data, for 30 days. Passport redemptions are kept without the customer's name or identifier, as support for reimbursements between businesses. Backups are purged within 30 days after production deletion. Billing and transaction records are kept for the periods required by Colombian accounting and tax law. If a Business turns on the welcome stamp, we keep an encrypted fingerprint of the phone number (not the number itself) for 24 months so that gift is given only once per person; if the customer is deleted or deletes their account, the fingerprint is kept without their name or card until it expires, and it is deleted if the Business is deleted.

10. Your rights

You may access, update, correct and delete your data, request proof of consent, be informed about how your data is used, withdraw consent where no legal or contractual duty to retain exists, and file complaints with the Colombian Superintendence of Industry and Commerce (SIC). Customers may contact the Business they signed up with (the controller) or write to us at admin@tbpconsulting.com.co stating the registered mobile number and the Business name. Businesses and Cashiers write to the same address from the registered email. Queries are answered within 10 business days and complaints within 15 business days, extendable as permitted by law. We may request additional information to verify identity. Residents of other jurisdictions (for example, California or the European Union) may exercise the rights granted by their local laws through the same address.

11. Minors

The Platform is intended for adults. We do not knowingly collect data from children under 14; minors between 14 and 18 are deemed to act with their legal guardian's authorization. A guardian may request deletion through the channels above.

12. Terms and Conditions of use

12.1 Purpose

TBP provides Businesses with a technology tool to run digital loyalty programs and communicate with their customers. TBP does not sell products or services to Customers and is not a party to the commercial relationship between a Business and its customers.

12.2 Accounts and credentials

The Business is responsible for the accuracy of its account information, for safeguarding its credentials and those of the cashiers it creates, and for everything done through them. Unauthorized use must be reported to us immediately.

12.3 Business obligations

• Obtain its customers' consent and use their data solely for its loyalty program, in line with this policy and the law.
• Honor the rewards, promotions and perks it announces through the Platform, as announced.
• Not send promotions that are illegal, misleading, offensive, discriminatory or unrelated to its activity, nor use the Platform for purposes other than building loyalty among its own customers.
• Not manipulate stamps or redemptions or attempt to bypass the Platform's controls.
• Pay for the contracted plan on time.

12.4 Plans, payments and renewal

Plans, limits and prices are those published at sellapp.com.co and in the dashboard. Paid plans activate when payment is confirmed for the contracted period and do not auto-renew unless the Business opts in; on expiry without renewal the account returns to the free plan and keeps its data. No pro-rated refunds are made for unused periods unless required by law. We may change prices with at least 30 days' notice, effective from the next renewal.

12.5 Availability

The Platform is provided "as is" and "as available". We make reasonable efforts to keep it running but do not guarantee uninterrupted availability. Features that depend on third parties (Google Wallet, Apple Wallet, payment gateways, mobile networks) may be affected by changes or failures outside our control.

12.6 Intellectual property

The Sella brand, software, design and content belong to TBP or its licensors. The Business retains ownership of its brands, logos and images and grants us a limited license to display them on passes, in the dashboard and in the print kit while it uses the Platform.

12.7 Suspension and termination

We may suspend or terminate an account, with or without notice, for fraud, abuse, unlawful use, breach of these terms or non-payment. A Business may cancel its account at any time. Termination does not waive amounts already due.

13. Rewards, promotions and perks

Messages such as "Reward ready" are shown based on the Business's configuration and the stamps recorded; they do not create any obligation on TBP.

14. Gift cards (Sella Plus)

• The Business is the sole issuer and is responsible to the consumer for charging, honoring the balance, expiry, exchanges, refunds and warranties, invoicing and taxes, and compliance with Colombia's Consumer Statute (Law 1480 of 2011) and other applicable rules.
• If the Business closes, cancels its account or stops paying for the add-on, the obligations on the balance remain the Business's. Sella keeps cards already sold working while the Business has an account on the Platform, and does not refund balances.
• The card code works like a physical card: whoever has it can use it. Sella is not liable for misuse of the code by third parties when the holder shares or loses it; it provides a notice of each use and the option to cancel the card or issue a new link through the Business.
• For gift cards, TBP's total liability to the Business is limited to the amount the Business paid for the service in the twelve (12) months before the event giving rise to it, except where the law does not allow such a limit.
• Business acceptance: when activating the add-on (or before its first sale, if its plan includes it) the Business accepts these terms by ticking "I understand my business is the issuer of the gift cards and is responsible for them and their balance". We keep the date, version, IP address and browser of that acceptance.
• Data: the recipient's name and, if given, email are used only to deliver the card and send its balance notices. Email is sent through Resend (United States) as data processor, with an international transfer under Law 1581 of 2012. We never use this data for advertising.

15. Business referral program

• Each Business has an invitation link and code. For every 3 new businesses that sign up with that link or code and meet the conditions, the inviting Business gets 1 month of Premium free, up to 6 months per calendar year. The month is added to the end of its current plan or, if it's on the Free plan, activates Premium for one month.
• An invited business counts when it is new to Sella, confirms its email, has a different owner (it doesn't share an account, email or mobile number with the inviter or other invitees) and registers at least 3 real customers with a stamp in its first 14 days. These values may change; the current ones are shown in the dashboard.
• The invited business gets the regular 30-day Premium trial.
• Fake accounts, self-invitations or any manipulation void the invitations and related rewards. Sella may review invitations and void those that don't qualify.
• Free months can't be exchanged for money or transferred. For plans agreed separately (set manually or sponsored by a shopping center), the reward is applied under that agreement.
• Sella may change or end the program at any time; months already earned are honored.
• Data: we keep who invited whom, the invited business name (visible to the inviter) and, to prevent abuse, an encrypted digest of each owner's email, mobile number and internet network, compared only with each other.

16. Limitation of liability

To the fullest extent permitted by law, TBP is not liable for indirect damages, loss of profits, loss of customers, data loss caused by third parties or by the user, or losses arising from use of or inability to use the Platform, from a Business's configuration errors, from stamps granted or refused by cashiers, or from the relationship between a Business and its customers. TBP's total liability to a Business for any cause is limited to the amounts actually paid by that Business to TBP in the three (3) months preceding the event giving rise to the claim. Nothing herein limits liability that cannot be limited by law.

17. Changes

We may update this policy and these terms. The current version and its date are published on this page; material changes are announced in the Business dashboard. Continued use of the Platform after a change constitutes acceptance.

18. Governing law

This document is governed by the laws of the Republic of Colombia. Disputes are subject to the competent courts of Bogotá D.C., without prejudice to non-waivable consumer rights in the user's place of residence.

19. Contact