Privacy Policy

Last updated: August 28, 2026

This Privacy Policy explains how Serra ("Serra", "we", "us", or "our") collects, uses, and protects information when you use our website and our AI-powered sales agent service for WhatsApp (the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Information you provide to us

• Account details such as your name, email address, phone number, and company name when you sign up or contact us.
• Business information you configure in the Service, such as product catalogs, pricing, FAQs, and response templates.
• Billing information processed through our payment providers. We do not store full card numbers on our servers.

Information collected through the Service

• WhatsApp conversation data between your business and your customers, including message content, timestamps, and phone numbers, which is processed so the Service can respond, qualify leads, and book appointments on your behalf.
• Usage data such as feature interactions, conversation volumes, and performance metrics.
• Technical data such as IP address, browser type, device information, and cookies when you visit our website.

2. How We Use Information

• To provide, operate, and maintain the Service, including generating automated responses to your customers.
• To qualify leads, schedule appointments, and deliver analytics and reports to you.
• To improve the quality, accuracy, and safety of our AI models and the Service.
• To communicate with you about your account, updates, and support requests.
• To detect, prevent, and address fraud, abuse, or technical issues.
• To comply with legal obligations.

3. WhatsApp and Third-Party Services

The Service operates on top of the WhatsApp Business Platform provided by Meta. Your use of WhatsApp is also governed by the WhatsApp Business Terms and the Meta privacy policies. We may share data with third-party service providers that help us operate the Service, such as cloud hosting, AI model providers, analytics, and payment processors. These providers are contractually required to protect your data and may only use it to provide services to us.

We do not sell your personal data or your customers' personal data to third parties.

4. Your Customers' Data

When you use Serra to communicate with your customers, you act as the data controller for your customers' personal data, and Serra acts as a data processor on your behalf. You are responsible for ensuring you have a lawful basis to process your customers' data and for informing them that automated messaging is used in your communications.

5. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service. Conversation data is retained according to your plan settings and can be deleted upon request. We may retain certain data longer where required by law, to resolve disputes, or to enforce our agreements.

6. Data Security

We use industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us using the details below. We will respond within a reasonable timeframe and in accordance with applicable law.

8. Cookies

Our website uses cookies and similar technologies to keep the site functioning, understand how visitors use it, and improve your experience. You can control cookies through your browser settings. Disabling cookies may affect some features of the website.

9. Children's Privacy

The Service is intended for businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International Transfers

Your data may be processed in countries other than your own. Where we transfer data internationally, we take steps to ensure it receives an adequate level of protection consistent with this policy and applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The "Last updated" date at the top of this page shows when this policy was last revised.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at hello@meetserra.com.