Privacy Policy

1. Who we are

ATXO Labs(“ATXO,” “we,” “us”) is the developer of Selam, a personal AI companion for macOS distributed at heyselam.app. This Privacy Policy explains what data we collect when you visit heyselam.app, purchase a license, or use the Selam application.

If you have questions, contact support@heyselam.app.

2. What this Policy covers

This Policy applies to:

• the marketing website at heyselam.app
• the license services at api.heyselam.app (validation, recovery, purchase)
• the Selam desktop application for macOS

It does not cover the third-party AI providers your copy of Selam connects to with your own API keys — those are governed by their own privacy policies (see Section 6).

3. Information we collect

3.1 Information you give us

• Purchase information (when you buy a license): your email address, billing address, country, and Stripe-issued tax identifiers. Payment card details go directly to Stripe — we never see or store them.
• Support correspondence: any email you send to support@heyselam.app.

3.2 Information collected automatically

• License validation: when the Selam app launches, it makes an HTTPS request to api.heyselam.app/validate carrying your license key so we can confirm the key is active. We log the request timestamp and source IP for fraud prevention; we do not store the IP long-term.
• Update checks: when the Selam app checks for updates, it makes an HTTPS request to updates.heyselam.app for a manifest. Server logs capture standard request metadata (URL, IP, user-agent) for ~30 days.

3.3 Information we deliberately do NOT collect

• Your conversations. Voice input, transcripts, and AI responses remain on your device or in your own AI provider accounts (Anthropic, OpenAI, ElevenLabs, Simli, etc.). Selam does not transmit them to ATXO.
• Your screen captures or webcam frames. Vision features process these locally and send them only to the AI provider you've configured.
• Behavioural analytics. We do not embed any client-side analytics trackers (no Google Analytics, no Mixpanel, no Segment, no fingerprinting libraries).

4. How we use information

We process the data above to:

• deliver the licenses you purchase,
• validate your active license at app launch,
• recover your license key when you ask via heyselam.app/recover,
• fulfil tax and accounting obligations on the sale (invoices, VAT/GST),
• respond to your support requests,
• detect and respond to fraud or abuse,
• comply with applicable laws.

Under GDPR Article 6, our legal bases are:

• Contractual necessity for license issuance, validation, and recovery
• Legal obligation for tax records and invoice retention
• Legitimate interest for fraud prevention and security logging

5. How long we keep it

• License records (key, email, status, Stripe session ID): kept for the lifetime of the license and for 7 years after revocation or refund, to satisfy tax/accounting record-keeping requirements.
• Server access logs (IPs, timestamps): 30 days, then deleted.
• Support email: 2 years from the last reply, then deleted.

6. Third parties (sub-processors)

We use the following third parties to deliver the service. None of them have access to your conversations or device data.

Your local copy of Selam connects directly to AI providers using API keys you provide (Anthropic, OpenAI, ElevenLabs, Simli, DeepSeek, Google Gemini). Their privacy policies govern those interactions.

7. International transfers

Our servers and sub-processors are based primarily in the United States. If you access Selam from the EU/EEA or UK, your data is transferred to the US under Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data (subject to our legal retention obligations)
• Restrict or object to certain processing
• Receive a copy of your data in a portable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data-protection authority

If you're in California, the CCPA/CPRA grants additional rights including the right to know what personal information is sold or shared (we don't sell personal information).

To exercise any of these rights, email support@heyselam.app. We respond within 30 days.

9. Cookies

heyselam.app and api.heyselam.app use only the minimal cookies required to keep the site working (session, CSRF). We do not use advertising or tracking cookies. The Selam desktop application does not use cookies.

10. Children

Selam is not intended for children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced on heyselam.app and via email to active license holders at least 30 days before they take effect.

12. Contact

ATXO Labs
support@heyselam.app