Privacy Policy

What we collect

Account: name, email, password hash, shop name, and the trade you pick.

Shop book: customers, jobs, invoices, payments, notes, and the optional fields your trade uses.

Connections you paste: restricted Stripe keys, Square tokens, email keys, and similar secrets. Those are encrypted at rest. We do not store full Stripe secret keys, and the product rejects them.

Technical: IP address, device, and basic logs needed to run and secure the site. Session cookies keep you signed in.

We do not ask for Social Security numbers, and we do not take raw card numbers onto Sere servers for checkout.

How we use it

To run your shop book, show cash from a processor you connected, send invoices you ask us to send, and operate Serenity and the assistant within your monthly credit.

To keep the service up, fix bugs, prevent abuse, and meet the law.

We do not sell your shop data. We do not use your customer list to market our own product to those customers.

Who else sees it

Processors you connect (Stripe, Square, PayPal, Intuit) receive only what that connection needs.

Email (Resend or similar) receives invoice and reset mail you trigger.

Questions you ask Serenity or the assistant, and the shop facts needed to answer them, go to OpenAI under our key and within your monthly credit.

Hosting and database providers (for example Vercel and Turso) store the application and data under our contract with them.

We share data if the law requires it, or to protect a person from serious harm. We will narrow that request when we can.

How long we keep it

We keep a shop while the account is open. After you ask us to delete it, we remove live copies, then backups age out on their cycle.

We may keep a minimal record of the deletion, invoices we were legally required to retain, or a fraud/security log.

Your rights

You can access and update shop records in the product. You can ask for an export or deletion of the shop.

If you are in a place with extra privacy rights (including some U.S. states and the EEA/UK), you can ask us to honor access, correction, deletion, and portability as those laws require. We will not discriminate against you for asking.

We do not sell personal information as that word is used in the CCPA/CPRA, and we do not share it for cross-context behavioral advertising.

Cookies

Sere uses a session cookie to keep you signed in and a local preference for light or dark appearance. We do not run advertising cookies.

Children

Sere is not directed at children under 13. If we learn we collected personal information from a child under 13, we will delete it. A shop owner who is a minor should use Sere with a parent or guardian as described in the Terms.

Changes

If we change this policy in a material way, we will update the effective date and notice the shop email or the product.

Contact

Privacy questions: use the contact path on sere.cash. We operate in the United States. If a later version names a formal privacy contact or an EU representative, that name controls.