Privacy Policy

1. Information we collect

Information you provide

• Account and profile information, such as your name, email address, display name, role, and authentication details.
• Workspace content, including projects, tasks, notes, check-ins, candidates, evidence, decisions, comments, invitations, and files or recordings you choose to upload.
• Communications, including support requests and feedback.
• Payment information. Our payment processor collects payment-card and billing details. We generally receive transaction status, subscription, and limited billing information rather than complete card numbers.

Information collected through your use

We may collect device, browser, IP address, date and time, requested pages, referral information, feature interactions, diagnostics, and security events. We use cookies or similar technologies that are necessary to authenticate users, preserve preferences, secure the Service, and maintain sessions.

Information from connected services and other people

If you connect Google or another integration, we receive the information you authorize that integration to provide. Depending on the features you enable, this can include basic profile information and calendar data needed to find available time or manage authorized calendar events. Workspace owners or collaborators may also provide information about you when assigning work or inviting you to a project.

2. How we use information

We use personal information to:

• provide, maintain, personalize, and secure the Service;
• authenticate users and enforce organization, project, and role-based permissions;
• store workspace content, coordinate work, and provide requested integrations;
• process subscriptions and transactions;
• send invitations, service messages, security notices, and support responses;
• generate AI-assisted suggestions when a user requests them;
• monitor reliability, prevent abuse, troubleshoot, and improve the Service; and
• comply with law and enforce our agreements.

Seriously Serial does not sell personal information or use workspace content for cross-context behavioral advertising.

3. AI-assisted features

Some features may send the content you submit, along with limited authorized project context, to an AI service provider to produce a requested response. AI output can be inaccurate and is presented for human review. Do not submit sensitive information that is unnecessary for your request. We do not permit AI suggestions to make consequential project changes without a user’s approval.

4. Google user data

When you connect a Google account, we use Google user data only to provide and improve the user-facing integration you requested, such as sign-in and calendar availability or synchronization. We do not use Google user data for advertising.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements. You can revoke Seriously Serial’s access through your Google Account security settings. Revocation stops future access but does not automatically remove data already stored where retention is otherwise necessary.

5. How we disclose information

We may disclose information:

• Within your workspace, according to the projects and permissions assigned to each user.
• To service providers, such as hosting, database and file storage, authentication, email delivery, payment processing, AI processing, monitoring, and connected-integration providers. They process information for us under applicable contractual restrictions.
• At your direction, when you connect a third-party service, share content, or approve an external action.
• For legal and safety reasons, when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or secure the Service.
• In a business transaction, such as a merger, financing, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.

6. Data retention and security

We retain information for as long as needed to provide the Service, maintain legitimate business and security records, comply with law, and resolve disputes. Retention periods vary by data type and account status. Backup copies may remain for a limited period after deletion.

We use administrative, technical, and organizational safeguards designed to protect information. No transmission or storage system is completely secure, so we cannot guarantee absolute security.

7. Your choices and rights

You may update certain profile and workspace information through the Service, disconnect integrations through the relevant provider, and control access by managing project memberships where authorized. You may also ask to access, correct, delete, or export personal information, or object to or restrict certain processing. Applicable rights depend on where you live, and we may need to verify your identity before fulfilling a request.

Workspace content may be controlled by the organization or account owner that invited you. In that case, we may direct your request to that owner.

8. International use, children, and external links

The Service may be operated and processed in the United States and other countries where our providers operate. Those locations may have different data-protection laws than your jurisdiction.

The Service is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13. The Service may link to third-party websites whose privacy practices we do not control.

9. Changes to this policy

We may update this policy as the Service changes. We will post the updated policy here and revise the “last updated” date. If a change materially affects your rights, we will provide additional notice when required.

10. Contact us

For privacy questions or requests, email seriouslyserial@dbx.dev.