Privacy Policy

Serpio ("we", "us") builds an AI-assisted content platform. This policy explains what we collect, why, and how you can control it. We wrote it in plain language because we'd want the same from a tool we use.

What we collect

• Account data: your email, display name, and a hashed identifier from Firebase Authentication.
• Brand data you enter: domains, target keywords, brand voice notes, uploaded reference documents.
• Content we generate for you: drafts, published articles, their SEO/GEO scores.
• Product usage events: page views, button clicks, error reports. We use PostHog for this.
• Website analytics: with your permission, Google Analytics uses cookies to measure page visits, traffic sources, signups, and checkout starts. Our Google Analytics event payloads exclude account names, email addresses, authentication tokens, and private article and brand identifiers. Advertising signals and ad personalization are disabled.
• Approximate country: we use the request IP to select INR for India and USD elsewhere. The lookup returns only a country code; Serpio does not store precise location data.
• Inference metadata: model name, token counts, cost per generation — stored so we can bill correctly and show you usage.

What we do not collect

• We don't sell your data. Ever.
• We don't allow our model providers (OpenAI, Anthropic, Voyage) to train on your prompts — we use their zero-retention APIs.
• We don't share your uploaded documents with any third party beyond the vector index we maintain on your behalf.

Where your data lives

• Account + brand + article records: MongoDB Atlas (US region).
• Uploaded files: Firebase Storage, private buckets, signed-URL access only.
• Vector embeddings: Qdrant Cloud (EU or US, depending on your region selection).
• Product analytics: PostHog US Cloud.
• Website analytics: Google Analytics, when enabled and permitted by your browser preference.

Your controls

• Delete a brand → we purge all associated Mongo records, Qdrant vectors, and Firebase Storage objects within 24 hours.
• Delete your account → same cascade, plus your PostHog identity is reset.
• Export your data → email dipendra@tryserpio.com and we'll send a JSON archive within 7 days.
• Declining Google Analytics stops its future collection in this browser. This preference does not change the existing PostHog product analytics. Change Google Analytics preference

Your rights under the DPDP Act

Serpio complies with India's Digital Personal Data Protection Act, 2023 and the Information Technology Rules, 2011. As a user (data principal), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data and have the cascade described under "Your controls" above.
• Withdraw consent for processing at any time.
• Lodge a grievance using the contact below and, if unresolved, with the Data Protection Board of India.

Retention

• Active account and brand data: retained while your account is active.
• After account deletion: backups purged within 30 days.
• Generated content: deleted immediately on account deletion.
• Application logs: rolled off after 90 days.
• Billing records: retained as long as Indian tax law requires (typically 8 years).

Grievance contact

For privacy questions or to file a grievance under the DPDP Act, contact:

• Company: EtherealMindLabs Pvt Ltd
• Email: dipendra@tryserpio.com
• Response SLA: acknowledgement within 48 hours; resolution within 30 days.

Governing law

This policy is governed by the laws of India. Any dispute is subject to the exclusive jurisdiction of the courts of Pune.

Contact

Questions, data requests, or bug reports — email dipendra@tryserpio.com. See also the Contact Us page.