Privacy.

1. What we collect.

We only collect what we need to run the service. The list:

• Account info. Name, email, company URL, ARR range, and a short note on what you're trying to accomplish with SEO. You give us this when you request access.
• Payment details. Processed by Stripe. We store the subscription record and the customer reference Stripe gives us, not your card number.
• Search Console + integration data. When you connect Google Search Console, your CMS (WordPress, Contentful, Webflow), or other accounts, we read the data needed to run the agent: keywords, impressions, clicks, rank positions, your published articles, your blog structure.
• Content you create with Serpa. Briefs, drafts, published articles. We store these so the agent can keep iterating on them.
• Usage telemetry. Page views, feature clicks, error reports. No third-party advertising trackers.

2. Third-party AI processors.

Serpa is an AI-driven agent. We send the data needed to run a task (your keyword, brief, article context, Search Console numbers) to third-party AI providers. The two we use today:

• Anthropic (the Claude models) powers the agent's reasoning, writing, and analysis. We send the task-relevant context for each request.
• Voyage AI turns documents you upload under Memory & Context into numerical embeddings so the agent can retrieve the right passage. Only documents you choose to upload are sent to Voyage.

Neither provider uses your data to train its models. We pick providers with strong data-handling policies and review them as those policies change.

Retention. We are working toward a Zero Data Retention (ZDR) arrangement with both providers, and that effort is ongoing. Until those guarantees are signed, requests fall under each provider's documented default retention — typically up to 30 days, for abuse-monitoring and operational purposes — rather than zero retention. We are transparent about this rather than waiting to launch.

Document uploads are opt-in. Because uploaded documents are the most sensitive thing we send to these providers, Serpa will not upload a document until you tick a consent box acknowledging this processing and retention. Nothing is uploaded — and nothing is sent to Voyage or Anthropic from your documents — until you give that consent. You can stop at any time by deleting the document, which also removes its embeddings.

3. How we use the data.

• Run the SEO agent on your account.
• Send you product, billing, and support emails.
• Diagnose bugs and improve the product.
• Comply with legal obligations (tax records, lawful requests from regulators, etc.).

We do not sell your data. We do not use your data to train our own models or anyone else's.

4. How we share data.

The short list of subprocessors we share data with:

• Supabase (database + auth).
• Stripe (payment processing).
• Resend (transactional email).
• Anthropic (LLM-powered agent work).
• Voyage AI (embeddings for documents you upload under Memory & Context).
• Vercel (hosting + edge caching).
• Google APIs (read-only access to your Search Console when you connect it).

Each subprocessor receives only the data needed for that specific function. A current list is available on request to jackson@tryserpa.com.

5. Cookies and referrer tracking.

We use a small set of first-party cookies for session and preference state. The serpa_ref cookie records the referrer that brought you to the site (e.g. a direct link from a podcast episode) so we can credit channels internally. It expires after 30 days and is first-party only.

If you're in the EU/EEA or another jurisdiction that requires opt-in consent for non-essential cookies, we honour an opt-in default: non-essential cookies don't load until you accept them in the banner.

6. Deleting your data.

Email us at jackson@tryserpa.com from the email on your account and ask for deletion. We confirm receipt within 48 hours and complete deletion within 30 days. After deletion we retain only billing records we are legally required to keep (typically 7 years for tax purposes).

7. Exporting your data.

You can export the articles you've created with Serpa through the Articles screen in your dashboard. A full account export (briefs, articles, settings, Search Console snapshots) is on the roadmap; until it ships, email us and we'll generate the export by hand.

8. International transfers.

Serpa is operated from the United States. By using the service you consent to data transfer to the U.S. for processing, subject to the safeguards described in this policy and applicable data-transfer mechanisms (Standard Contractual Clauses for EU/UK transfers).

9. Children.

Serpa is for businesses. We do not knowingly collect data from anyone under 16. If you believe we have, email jackson@tryserpa.com and we'll delete it.

10. Changes to this policy.

If we materially change this policy we'll email you and bump the "Last updated" date at the top.

11. Contact.

Questions about this policy: jackson@tryserpa.com.