Privacy Policy
Effective date: July 9, 2026
1. Who we are
The operator (controller) of personal data processing is SELLAI Limited Liability Company (SELLAI LLC / SELLAI MChJ), TIN 312530703, registered at: Republic of Karakalpakstan, Nukus, "Xaliqlar Dosligʻi" mahalla, Aleksandr Sergeyevich Pushkin street, 91/7 (the "Operator," "we"). The Sellai service is available at sellai-cosmetics.uz.
2. What data we process
- Face / skin images that you upload for analysis. A face image is biometric personal data and is processed with enhanced protection measures.
- Account data: email address, account settings.
- Payment data: processed by the Click and Payme payment services; we do not store bank card data.
- Usage data: number of analyses, request/token consumption, technical information (device type, IP address, cookies).
3. Legal basis and consent
Processing of the face image is carried out on the basis of your explicit consent, which you give by uploading the image and accepting this Policy. You may withdraw consent at any time (see "Your rights").
Processing is carried out in accordance with the Law of the Republic of Uzbekistan "On Personal Data" (O'RQ-547).
4. Purposes of processing
- providing AI skin analysis and generating the analysis;
- account, tariff, and billing operation;
- user support;
- security and abuse prevention;
- analytics and Service improvement.
5. Transfer to third parties
To operate the Service, data may be transferred to:
- the artificial intelligence service (Tanabe AI) that generates the analysis: the image is transmitted for processing at the moment of analysis and is not stored afterward;
- the hosting and infrastructure provider — Hetzner Online GmbH (data center in Helsinki, Finland);
- the Click and Payme payment services — to process payments.
We do not sell your personal data.
6. Cross-border transfer
The Service infrastructure, account data, and analysis results are hosted on servers in Finland (Hetzner, Helsinki). Image processing by artificial intelligence may be performed on the infrastructure of engaged providers outside the Republic of Uzbekistan. Transfer and processing of data outside the Republic of Uzbekistan is carried out on the basis of your consent given when using the Service.
7. Storage and deletion of data
- Uploaded images are not stored: the image is processed to generate the analysis and is deleted immediately after processing is complete.
- Images are not used to train or fine-tune AI models.
- Analysis results are stored for 30 days from creation, after which they are deleted automatically.
- Account data (email, settings) is stored for the duration of your use of the Service.
- To delete your data before the expiry of this period, send a request to —.
8. Your rights
You have the right to: access your data; correct it; delete it; withdraw consent to the processing of biometric data; obtain a copy; restrict processing. To exercise your rights, write to —.
9. Security
We apply technical and organizational protection measures (encryption in transit, access control). Complete security of data transmission over the internet cannot be guaranteed.
10. Children
The Service is not intended for persons under 18. We do not intentionally collect data of minors.
11. Use of photographs
Uploaded photos are stored securely and linked to your analysis history. We use them: (a) to perform the analysis and show you your history; (b) to improve the analyser — assessing its accuracy and tuning the algorithms, including based on your feedback on analyses. Photos are never published or shared with third parties for their own purposes. You can request deletion of your photos by contacting support — they will be removed together with your analysis history.
12. Changes
We may update this Policy. The current version is published on this page with the effective date.
13. Contact
For personal data matters: —; Republic of Karakalpakstan, Nukus, Aleksandr Sergeyevich Pushkin street, 91/7.