Legal Document

Privacy
Policy.

Effective: September 1, 2026Last Updated: August 25, 2026Version: 1.0

This Privacy Policy explains how Sery collects, uses, stores, protects, and discloses information when you use Sery, an autonomous AI operations platform.

01

Information We Collect

When you create a Sery account, we collect information necessary to provide and secure the Service, including your name, email address, account information, and authentication details.

When you connect third-party services such as Gmail, Google Calendar, or other supported communication and productivity platforms, Sery may access information and content from those services according to the permissions you grant.

Depending on the integrations and features you use, this may include email messages and metadata, calendar events and metadata, contact information, files or documents you explicitly make available to Sery, and information required to perform authorized actions.

We also collect technical information such as IP address, browser type, device information, log data, and information about how you interact with the Service. This information is used for security, reliability, diagnostics, and product improvement.

02

Google User Data and OAuth Access

If you connect a Google account to Sery, Sery requests access only to the Google data and permissions necessary to provide the features you explicitly enable.

Depending on the permissions granted, Sery may access Gmail messages and metadata, Google Calendar information, and other Google account information required for authorized functionality.

Sery uses Google user data to provide the functionality requested by you, including understanding relevant communications, preparing or dispatching authorized actions, managing calendar-related operations, maintaining audit records, and providing related Service features.

Sery does not sell Google user data. Sery does not use Google user data for advertising purposes or to build advertising profiles.

Sery does not transfer Google user data to third parties except where necessary to provide the Service, comply with applicable law, protect the security of the Service, or as otherwise expressly authorized by you.

You may revoke Sery’s access to your Google account at any time through your Google Account permissions. Revoking access may prevent Sery from performing features that depend on that authorization.

03

How We Use Information

We use information collected through the Service to operate, maintain, secure, and improve Sery and to provide the functionality you request.

This includes processing information necessary to understand and execute authorized instructions, generate responses or drafts, coordinate calendar and communication activities, maintain audit trails, authenticate users, prevent abuse, troubleshoot technical issues, and provide customer support.

Where Sery uses artificial intelligence or third-party processing services to provide a feature, information is processed only to the extent reasonably necessary to provide that feature and in accordance with the applicable service configuration and contractual safeguards.

We may also use aggregated or de-identified information for analytics, reliability measurement, security, and product improvement where the information can no longer reasonably be used to identify you.

04

Autonomous Actions and Audit Logs

Sery is designed to perform actions on your behalf within the permissions and authority boundaries you configure. Depending on your settings, these actions may include composing or sending email, creating or modifying calendar events, and coordinating information with designated parties.

To provide accountability and oversight, Sery maintains audit records describing relevant actions performed through the Service. These records may include the action taken, the connected service involved, timestamps, and other information necessary to understand the operation.

You are responsible for maintaining appropriate authorization settings and reviewing audit information when required for your organization or use case.

Sery does not intentionally perform actions outside the integrations and authorization boundaries configured for your account, except where necessary for security, fraud prevention, or operation of the Service.

05

Data Sharing and Third Parties

We do not sell or rent your personal information or connected-service data.

We may share information with service providers that process information on our behalf, such as infrastructure providers, database providers, authentication providers, analytics providers, security providers, and AI or machine-learning service providers used to operate specific Sery features.

Service providers receive only the information reasonably necessary to perform their contracted services and are expected to maintain appropriate confidentiality and security protections.

We may also disclose information when reasonably necessary to comply with applicable law, respond to lawful requests, protect the rights or safety of Sery, our users, or others, investigate abuse or security incidents, or enforce our Terms and Conditions.

If Sery is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable confidentiality and privacy requirements.

06

Data Security

Sery uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction.

Access to production systems and sensitive information is restricted based on operational requirements. Authentication credentials and access tokens are protected using appropriate security controls.

No method of transmission or electronic storage is completely secure. Accordingly, while we work to protect your information, we cannot guarantee absolute security.

If we become aware of a security incident that requires notification under applicable law, we will provide notice as required by law and take reasonable steps to investigate and mitigate the incident.

07

Data Retention and Deletion

We retain personal information and connected-service data only for as long as reasonably necessary to provide the Service, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce our agreements.

When you disconnect an integration, Sery will stop requesting new data from that integration. Certain information may remain in backups, security logs, audit records, or other systems for a limited period where reasonably necessary for legitimate operational or legal purposes.

You may request deletion of your Sery account and associated personal information by contacting our support or legal team. We will process deletion requests subject to applicable legal, security, and contractual requirements.

Deleting your Sery account does not necessarily delete information held directly by third-party services such as Google. You may need to manage or delete that information through the relevant third-party provider.

08

Your Rights and Choices

Depending on your location and applicable law, you may have rights regarding your personal information, including rights to access, correct, delete, restrict, or object to certain processing of your information.

You may manage connected-account permissions through Sery and may revoke third-party authorization through the relevant provider, including your Google Account settings.

You may also contact us to request information about how your personal data is processed or to exercise rights available to you under applicable privacy laws.

We may need to verify your identity before completing certain requests. Some rights may be limited where we are legally required or permitted to retain or process particular information.

09

Children's Privacy

Sery is intended for professional and organizational use and is not directed to children under the age required by applicable law.

We do not knowingly collect personal information from children in violation of applicable privacy laws. If you believe a child has provided personal information to Sery, please contact us so that we can investigate and take appropriate action.

10

International Data Processing

Sery may process and store information in countries other than the country in which you live. As a result, your information may be subject to the laws of those jurisdictions.

Where required by applicable law, Sery will use appropriate safeguards for international transfers of personal information.

11

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, applicable law, or our privacy practices.

When we make material changes, we will provide notice through the Service, by email, or by another reasonable method as required by applicable law.

Your continued use of Sery after the effective date of an updated Privacy Policy constitutes acknowledgment of the updated policy to the extent permitted by applicable law.

12

Contact Us

If you have questions about this Privacy Policy, your personal information, or Sery’s privacy practices, you may contact our legal team at legal@sery.ai.

For privacy-related requests concerning your account or connected integrations, please include enough information for us to identify your account and understand your request without sending unnecessary sensitive information.

Last updated: August 25, 2026. Effective date: September 1, 2026.

Questions about this Privacy Policy? Contact our legal team at legal@sery.ai.