Privacy Policy

Seren ("we", "us") provides an AI workspace at seren.im and through the Seren browser extension. This policy explains what we collect, why, and the controls you have. The short version: we collect what the product needs to work, we do not sell your data, and we do not run advertising or third-party trackers.

What we collect

• Account information. Your email address and a securely hashed password, plus optional details such as a display name and preferences. If you enable two-factor authentication, we store the enrolment needed to verify your codes.
• Content you create. Conversations, messages, artifacts, generated images, translation glossaries and memory items are stored so the product can show them back to you. They are private to your account and protected by row-level security in our database.
• Memory. When memory is enabled, Seren saves durable facts and preferences you share in conversation. You can view, edit, delete or disable all of it in the Memo panel.
• Email writing style. If you use the extension's Email Reply feature, we store a distilled style profile (typical greetings, closings, tone) and short learned notes about how you edit drafts. The email messages used to build and apply that profile (sent-mail excerpts you scan, threads you reply to, and drafts you send) are processed per request and never stored.
• Usage and billing records. We record usage events (model, token counts, credit cost) to meter your plan, and subscription state from Stripe. We never see or store your full card number; payments are handled by Stripe.
• Technical data. Standard server logs and IP addresses used for security and rate limiting, and a session cookie that keeps you signed in. We do not use advertising cookies or cross-site tracking.

How your content is used to answer you

When you send a message, the content needed to generate a response (your message, relevant conversation history, attached documents and, if enabled, memory and search results) is sent to the AI provider behind the model you selected, such as OpenAI, Anthropic, Google, xAI or DeepSeek. The same applies to the extension's Email Reply feature: the email text needed to draft or learn your style is sent to an AI provider for that one request and is not kept by Seren. Providers process this data under their own terms to generate the response. We choose API access precisely because provider API terms treat business data more strictly than consumer chat apps do.

Web search runs through our own self-hosted search proxy. To gather results, your query text is forwarded from our servers to public search engines, without your IP address, account identity or cookies; we hold no search API relationship that ties queries to you.

What we never do

• We do not sell or rent your personal information.
• We do not run ads or share your data with advertisers.
• We do not use your private content to market to other users.

Service providers

We use a small set of processors: the AI model providers you choose to use, Stripe for payments, and an email delivery service for transactional messages such as password resets and receipts. Each receives only what its job requires.

Where your data lives

Seren runs on servers we operate in Canada. The database, the search proxy behind web answers, and the storage that holds your images all run on infrastructure we control; they are not multi-tenant clouds shared with other apps. The only outside services in the loop are:

• AI model providers (for example OpenAI, Anthropic, Google, xAI, DeepSeek), which receive the prompt content needed to answer you;
• Stripe, which processes payments and never shares your full card number with us;
• Transactional email delivery, which carries sign-in links, receipts and plan digests;
• Social platforms you connect (such as Facebook, Instagram, X or LinkedIn), only when you link them and approve content for publishing.

Cookies and local storage

• Session cookie - keeps you signed in (strictly necessary).
• Interface preferences - theme, sidebar and composer settings, stored in your browser's local storage and read back by the app.
• Chrome extension storage - the extension keeps your session and settings inside Chrome's extension storage in your browser profile.

That is the whole list. We do not use advertising cookies, analytics beacons or cross-site trackers.

Storage, security and retention

Seren runs on infrastructure we operate. Data is encrypted in transit (TLS); provider keys and other secrets are encrypted at rest; access to your rows is enforced by database-level policies; and two-factor authentication is available on every account. Content is retained while your account exists. Deleting a conversation, image, memory or your entire account removes it from the live system; routine database backups age out on a seven-day rotation.

Your controls and rights

• View, edit or delete memories, and turn memory off entirely, in the Memo panel.
• Delete conversations and generated images from within the app, and memories from the Memo panel.
• Disconnect a social account at any time, which stops all future publishing to it.
• Request a copy or correction of your personal information, an export of your data, or full account deletion, via the contact form. We answer access and deletion requests within 30 days.

We handle personal information in accordance with Canadian privacy law, including PIPEDA. If you believe we have not met these obligations you may also contact the Office of the Privacy Commissioner of Canada.

Teams

In a team workspace, your organization's administrator manages seats and billing and can see membership and usage totals. Individual conversations remain private to each member; administrators cannot read them.

Children

Seren is not directed to children under 13, and we do not knowingly collect their information.

Changes

If this policy changes materially we will update the date above and note the change on this page. Questions are always welcome through the contact form.