Privacy Policy

1. Introduction

Welcome to Serena (“we,” “our,” or “us”). Your privacy is important to us, and this Privacy Policy explains how we collect, use, and protect your personal information when you use our services at www.serena.ai (“Serena”).

By using Serena, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of data:

Personal Data:

Name
Email address

Usage & Preferences Data:

User interactions with the app
Feature preferences and settings

Device Data:

Device type, operating system, and browser information
IP address and related metadata
Any data collected via Sentry for error monitoring

Third-Party APIs and Integrations:

Google OAuth (for authentication)
Google Calendar API (when connected by user): To display your calendar events within Serena and enable exporting tasks to your Google Calendar. We access event details like summary, start/end times, description, location, and identifiers necessary for synchronization.
Google Gemini API (for AI-driven features)
OpenAI API (for AI-driven features)

Chat and Messaging Integrations:

Linked direct-message turns and Serena replies are stored in the linked Serena chat session under Serena’s existing retention and deletion controls. Some chat providers also support public mentions; those public payloads are not stored in a Serena chat session. Durable channel-conversation bindings retain provider channel, conversation, and user identifiers after chat deletion, with the chat link removed. Delivery receipts retain a provider event ID plus installation, conversation, status, and timing metadata to prevent duplicate actions. Receipts remain after chat or message deletion, with chat and message links removed. Disconnecting stops future channel turns but does not delete the existing Serena chat.

Serena SMS:

When you choose to connect Serena by SMS, we collect your mobile phone number, your SMS consent and its timestamp, and the messages and delivery metadata needed to provide and protect the service. Messages include replies to messages I send and recurring productivity notifications I choose, such as daily plans, reminders, and schedule summaries. Message frequency varies based on my activity and settings. Message and data rates may apply. Reply HELP for help or STOP to opt out. Consent is not a condition of purchase.

We do not sell or share mobile phone numbers, SMS opt-in data, or SMS consent with third parties or affiliates for their marketing or promotional purposes. We may share this information with service providers only as necessary to deliver and support Serena messages.

3. How We Use Your Data

We use collected data for:

Providing, maintaining, and improving Serena
Personalizing user experiences
Displaying Google Calendar events and enabling task export/sync features (when connected by user)
Debugging and monitoring performance using Sentry
Conducting analytics and improving UX via anonymized session replays
Enhancing AI-driven features (e.g., task analysis, suggestions) powered by third-party APIs (Google Gemini, OpenAI). Note: Data accessed via Google Workspace APIs (like Google Calendar) solely for display or synchronization purposes is not used for these AI features unless explicitly directed by the user to process specific content.
Securing accounts and encrypting passwords

Affirmation Regarding AI/ML Model Training

We explicitly affirm that user data obtained through Google Workspace APIs (including the Google Calendar API) is never used to develop, improve, or train generalized or personalized Artificial Intelligence (AI) and/or Machine Learning (ML) models. Our use of Google Workspace API data is strictly limited to providing the features described in this policy, such as displaying calendar events and enabling task export/sync functionalities initiated by the user.

4. Data Retention

Currently, there is no fixed limit on data retention. We may retain your data for as long as necessary to provide our services and comply with legal obligations. You can request data deletion by contacting us.

5. Data Security

We implement industry-standard security measures, including:

Encryption: Passwords are securely encrypted.
Access Controls: Only authorized personnel can access sensitive data.
Monitoring: We use Sentry and other monitoring tools to detect security issues.

6. Sharing of Data

We do not sell your data. However, we may share data with:

Third-party AI providers (Google Gemini, OpenAI): We only share data explicitly provided by you to specific AI-powered features within Serena (e.g., text you ask an AI assistant to process). Google Calendar data accessed solely for display or synchronization is not shared with these third-party AI providers. Any data shared is for providing the requested feature operation and not for developing, improving, or training generalized AI/ML models by these providers.
Analytics and monitoring tools (Sentry, anonymized session replays).
Legal authorities if required by law.

7. Your Rights and Choices

Depending on your location, you may have rights regarding your personal data, including:

Accessing or correcting your data.
Requesting data deletion.
Opting out of analytics and tracking features.

To exercise these rights, contact us via the “Contact Us” button in the web app.

8. Cookies & Tracking Technologies

We may use cookies and local storage for:

Authentication (Google OAuth)
Preferences and session management
Analytics and performance monitoring

You can manage your cookie preferences via your browser settings.

9. Changes to This Privacy Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated effective date.

10. Contact Us

If you have any questions about this Privacy Policy, you can reach us via the “Contact Us” button in the Serena web app.

This Privacy Policy was last updated on August 10, 2026.