Privacy Policy

1. What We Collect

When you use SERA, we collect:

• Account information — your email address
• Evidence content — notes, photos, documents, and files you upload
• Email content — emails forwarded to your SERA address
• Metadata — timestamps, reference numbers, event dates, file types
• Usage data — actions taken within the app for audit logging

2. How We Use Your Data

• To provide and operate the SERA service
• To analyze images using AI for descriptions and text extraction
• To index content for full-text search
• To generate PDF reports when you request them
• To maintain audit logs for chain of custody
• To send you service-related communications

3. Third-Party Services

SERA uses the following third-party services to operate:

• Supabase — authentication and database storage
• Bunny.net — file storage for uploaded evidence
• OpenAI — AI-powered image analysis and text extraction
• Postmark — email forwarding and delivery

Each of these services has their own privacy policies. We only share the minimum data necessary for each service to function.

4. Data Storage & Security

Your data is encrypted at rest and all connections to SERA use HTTPS encryption in transit. We implement industry-standard security measures to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

Your data is retained for as long as your account is active. When you delete evidence items, they are permanently removed from our systems. When you delete your account, all associated data is permanently deleted.

6. Your Rights

You have the right to:

• Access — view all data we hold about you
• Export — download your evidence and data via PDF export
• Delete — permanently remove your data and account
• Rectify — update or correct your information

7. Cookies

SERA uses only essential authentication cookies to keep you signed in. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

8. Children

SERA is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or through the service. Continued use of SERA after changes constitutes acceptance of the updated policy.