Privacy Policy

Selara is used by estate agencies and their agents (our “customers”). We handle two broad groups of information: (a) our customers’ account information, and (b) information about the property enquirers (“leads”) who contact those agencies. When an agency uses Selara to handle enquiries, the agency is the responsible party for its leads’ information, and Selara acts as its operator (processor).

• Account information: name, email, phone number, agency/branch details, and login credentials.
• Listing information: property details you enter to generate content and publish listings.
• Enquiry (lead) information:a lead’s name, WhatsApp or phone number, and the content of messages they send, so we can respond and arrange viewings.
• Review information: publicly available Google review content and author names, where the agency has connected its Google Business Profile.
• Calendar information:where an agent connects their Google Calendar, the times they are busy or free, and the viewing appointments Selara creates on their behalf — including the date, time, property address, and the lead’s name and email address as an invitee.
• Usage information: basic logs needed to operate and secure the service.

• To generate listing descriptions and marketing content at the agent’s request.
• To draft and, with approval, publish responses to reviews.
• To reply to property enquiries on the agency’s behalf, qualify enquiries, and schedule property viewings.
• To provide, secure, support, and improve the service.

AI-generated drafts pass through a human approval step before anything is published, and agents can take over any conversation at any time.

Where an agency connects a WhatsApp Business number, we receive messages that leads send to that number via the WhatsApp Business Platform (Meta) so that we can respond within WhatsApp’s service window. We use this content only to answer the enquiry and arrange a viewing. Your use of WhatsApp is also subject to Meta’s own terms and privacy policy.

If an agent chooses to connect their Google Calendar, Selara requests a single permission — the ability to see and edit calendar events (calendar.events). We use it for one purpose: to find times the agent is genuinely free, and to create, update or cancel viewing appointments they have agreed to.

We do not:

• use calendar information for advertising, or transfer it to anyone for advertising;
• sell it, or share it with third parties for their own purposes;
• use it to train generalised artificial-intelligence models;
• allow anyone to read it, except where you have asked us to, or where it is necessary for security, to resolve a support issue you have raised, or to comply with the law.

Selara’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including its Limited Use requirements.

An agent can disconnect their calendar at any time in Selara’s settings, or revoke access directly at myaccount.google.com/permissions. On disconnecting, we delete the stored access and refresh tokens and stop receiving calendar updates. Appointments already created remain on the agent’s own calendar, which stays theirs to edit or delete.

We share information with trusted providers who process it on our behalf, only as needed to run the service:

• Hosting & database (application hosting and a database in the European Union).
• AI providers that generate drafts and interpret messages.
• Messaging (Meta / WhatsApp Business Platform) for enquiry conversations.
• Google for review data and, where an agent connects it, calendar scheduling.
• Payments for subscription billing.

Some providers process information outside South Africa (including in the European Union and other countries). Where information is transferred across borders, we take reasonable steps to ensure it remains adequately protected, consistent with POPIA.

We keep personal information for as long as needed to provide the service to the agency, and thereafter only as required for legal, accounting, or security reasons. Agencies can request deletion of their data.

We use technical and organisational measures to protect personal information, including access controls, encryption in transit, and tenant isolation so each agency’s data is kept separate. No system is perfectly secure, but we work to protect information against loss, misuse, and unauthorised access.

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and object to certain processing. If you are a lead who contacted an agency, please contact that agency directly, as they control your information; we will support them in fulfilling your request.

We may receive requests from public authorities — such as law enforcement, courts, or regulators — for personal information. We disclose personal information to an authority only where we are legally compelled to do so, and only after reviewing the request’s legal validity. We challenge requests we consider unlawful or overbroad, disclose only the minimum information necessary to comply with a valid request, and keep a record of each request and our response. Where the law permits, we will notify the affected person.

For privacy questions or requests, contact Induna Software (Pty) Ltd at support@indunasoftware.com.