Privacy Policy

Serpio ("we", "us") builds an AI-assisted content platform. This policy explains what we collect, why, and how you can control it. We wrote it in plain language because we'd want the same from a tool we use.

What we collect

• Account data: your email, display name, and a hashed identifier from Firebase Authentication.
• Brand data you enter: domains, target keywords, brand voice notes, uploaded reference documents.
• Content we generate for you: drafts, published articles, their SEO/GEO scores.
• Product usage events: page views, button clicks, error reports. We use PostHog for this.
• Approximate country: we use the request IP to select INR for India and USD elsewhere. The lookup returns only a country code; Serpio does not store precise location data.
• Inference metadata: model name, token counts, cost per generation — stored so we can bill correctly and show you usage.

What we do not collect

• We don't sell your data. Ever.
• We don't allow our model providers (OpenAI, Anthropic, Voyage) to train on your prompts — we use their zero-retention APIs.
• We don't share your uploaded documents with any third party beyond the vector index we maintain on your behalf.

Where your data lives

• Account + brand + article records: MongoDB Atlas (US region).
• Uploaded files: Firebase Storage, private buckets, signed-URL access only.
• Vector embeddings: Qdrant Cloud (EU or US, depending on your region selection).
• Product analytics: PostHog US Cloud.

Your controls

• Delete a brand → we purge all associated Mongo records, Qdrant vectors, and Firebase Storage objects within 24 hours.
• Delete your account → same cascade, plus your PostHog identity is reset.
• Export your data → email hello@serpio.ai and we'll send a JSON archive within 7 days.

Your rights under the DPDP Act

Serpio complies with India's Digital Personal Data Protection Act, 2023 and the Information Technology Rules, 2011. As a user (data principal), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data and have the cascade described under "Your controls" above.
• Withdraw consent for processing at any time.
• Lodge a grievance with our Grievance Officer (below) and, if unresolved, with the Data Protection Board of India.

Retention

• Active account and brand data: retained while your account is active.
• After account deletion: backups purged within 30 days.
• Generated content: deleted immediately on account deletion.
• Application logs: rolled off after 90 days.
• Billing records: retained as long as Indian tax law requires (typically 8 years).

Grievance Officer

For privacy questions or to file a grievance under the DPDP Act, contact:

• Name: TODO_RAZORPAY_OPERATOR_NAME
• Email: hello@serpio.ai
• Response SLA: acknowledgement within 48 hours; resolution within 30 days.

Governing law

This policy is governed by the laws of India. Any dispute is subject to the exclusive jurisdiction of the courts of TODO_RAZORPAY_GOVERNING_CITY.

Contact

Questions, data requests, or bug reports — email hello@serpio.ai. See also the Contact Us page.