Privacy Policy

1. Account Information

When you create a SelaZen account, we collect the information needed to identify you and set up your access:

• Your name and email address.
• Your role in the platform — rider, dealer, saddlemaker, or saddle fitter — which determines what features and records you can access.
• Authentication identifiers, such as your login credentials and the security tokens used to keep you signed in and to verify your identity.

2. Device Data

To operate the app reliably and diagnose problems, we collect limited technical information about the device you use:

• Device model and operating system version (for example, iOS or Android and its version).
• The version of the SelaZen app you are running.
• Diagnostic and technical identifiers, including crash reports, error logs, and identifiers used to troubleshoot and improve app stability.

3. Location & GPS Data

Location data in SelaZen is optional and permission-based. We only collect it when a feature you choose to use requires it, and only after your device grants the relevant permission.

• Approximate or precise location from your phone may be used to record where a saddle was scanned or to support location-aware features. You can decline or revoke this permission at any time in your device settings.
• Embedded GPS-module data from a saddle's optional GPS tracking module is used to support theft protection and stolen-mode tracking. This data is only processed when the module is present and tracking is enabled, for example after a saddle has been reported stolen.

If you do not grant location permission or do not use the GPS tracking module, the rest of the SelaZen app continues to work.

4. NFC / NTAG424 Tag Data

SelaZen uses NXP NTAG424 DNA secure NFC chips embedded in saddles. When you tap a saddle's chip with the app, we process the data needed to authenticate the tag and link the scan to the correct saddle:

• Chip identifiers that uniquely identify the NTAG424 tag.
• Cryptographic tap and authentication data, including the AES-128 CMAC message authentication code and the tag's rolling read counter, which together prove that a tap is genuine and prevent cloning or replay.
• Scan records associated with a saddle, such as the time of a tap and the account that performed it, so that scans can be tied to the saddle's history.

5. How We Use Your Data

We use the data described above for the following purposes:

• Providing the service — establishing and verifying saddle ownership, maintaining a saddle's maintenance and service history, generating its EU Digital Product Passport, powering loyalty rewards, and enabling theft protection and stolen-mode tracking.
• Authentication — signing you in, keeping your session secure, and confirming the authenticity of NFC taps.
• Product improvement — understanding how the app is used, diagnosing crashes and errors, and improving reliability, performance, and features.

6. How We Share Your Data

We share personal data only where necessary to run the service and as described below:

• Service providers and processors — trusted vendors that host our infrastructure and provide analytics, acting on our instructions under contractual data-protection obligations.
• Saddlemakers and dealers — where relevant to a saddle you are associated with, and limited to the scope of their role (for example, service and ownership records tied to that saddle).
• Law enforcement — where lawfully required, and specifically to support the recovery of saddles reported stolen.

SelaZen does not sell your personal data.

7. Data Retention

We keep personal data only for as long as it is needed for the purposes it was collected for:

• Account information is retained while your account is active and deleted after account closure, subject to any legal retention obligations.
• Saddle records (ownership, maintenance history, and the Digital Product Passport) are retained for the working life of the saddle so its history remains complete, and may be transferred with the saddle when ownership changes.
• NFC scan records are retained as part of a saddle's history for as long as that saddle record is maintained.
• Location and GPS data is retained only as long as needed for the feature that produced it, and theft-tracking data is retained only for the duration of an active theft case.
• Diagnostic and device data is retained for a limited period sufficient to diagnose and fix issues, then deleted or anonymized.

When data is no longer needed, or when you exercise a valid deletion request, we delete or anonymize it unless we are required to keep it to meet a legal obligation.

8. Your Rights

Because SelaZen BV operates from the EU, we apply the rights set out in the EU General Data Protection Regulation (GDPR) to all users. You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct data that is inaccurate or incomplete.
• Deletion — ask us to delete your personal data, subject to legal retention obligations.
• Portability — receive your data in a structured, commonly used, machine-readable format.

To exercise any of these rights, contact us at admin@selazen.com. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact SelaZen BV at admin@selazen.com.