Privacy Policy

Last updated: August 5, 2026

This is a courtesy translation. In case of any discrepancy, the French version prevails.

Talking about your anxiety takes trust. This policy explains, without jargon, what personal information Serein collects, why, where it goes, how long it's kept, and what your rights are.

Who is responsible for your information

Serein (serein.chat) is operated from Quebec, Canada. The person responsible for the protection of personal information, within the meaning of Quebec's Law 25, is:

Jessey Deraiche, privacy officer
Email: bonjour@serein.chat

What we collect, and why

Your account

First name, email, and password (hashed with bcrypt — we cannot read it). Basis: necessary for the performance of the contract (providing the service you sign up for).

Your conversations

The content of your exchanges with Serein, kept only so we can give it back to you from one session to the next. Basis: performance of the contract. We encourage you not to include full names, addresses, or information that could identify another person.

Your usage

A daily message counter (to enforce the Discovery plan limits and the anti-abuse limit). Basis: performance of the contract and legitimate interest (preventing abuse).

Payment

Payments are processed by Stripe. We never see or store your card number; we keep the Stripe identifiers of your subscription and your billing history. Basis: performance of the contract and legal obligations (accounting, taxes).

Gift cards

If you give Serein as a gift: your name, the recipient's first name and email, and your personal message. This information is used only to create and deliver the gift card, and is visible to the recipient. Basis: performance of the contract. If you receive a gift card, this information was provided to us by the person giving it to you.

Technical logs

Like any website, our host (Vercel) produces technical logs containing, among other things, your IP address, used for security and troubleshooting. They are kept for about 30 days. Our audience measurement (Vercel Analytics) works without cookies and without any permanent identifier. Basis: legitimate interest (security and reliability of the service).

Cookies

A strictly necessary cookie keeps you logged in for 30 days. An optional ad-measurement cookie (Meta Pixel) is only set if you accept it via the consent banner: it lets us know whether our ads lead to visits and signups. It never receives the content of your conversations. You can decline with no consequence, and change your mind by clearing your browser cookies. Details: facebook.com/privacy/policy. No other third-party trackers.

AI processing

To generate each reply, the text of your conversation is sent to OpenRouter, which relays it to the model provider (Google Gemini). Every request requires OpenRouter's "Zero Data Retention" policy: it is only routed to providers that do not keep your messages and do not use them to train their models. We do not train any model with your conversations. Details: openrouter.ai/privacy.

What we never do

We do not sell your data. We show no advertising and do not share your conversations with advertisers. No automated decision producing legal effects is made about you.

How long we keep your information

• Account and conversations: as long as your account exists. If you delete your account, they are erased immediately from our database.
• Password reset tokens: 1 hour, single use.
• Billing data (at Stripe): 7 years, as required by Canadian tax law.
• Gift cards: until activation, then as long as the recipient's account exists.
• Host technical logs: about 30 days.
• Emails you send us: the time needed to handle your request, then at most 2 years.

Where your information goes (processors and transfers)

Your information is processed by a small number of providers, each for a specific task, mainly on servers located in the United States:

• Vercel (United States) — website hosting and technical logs;
• Turso (United States) — database (account, conversations, gift cards);
• Stripe (United States) — payments and billing;
• Resend (United States) — service emails (gift cards, password resets);
• OpenRouter / Google (United States) — AI reply generation, in "Zero Data Retention" mode;
• Google Workspace (United States) — receiving the emails you send us.

These communications outside Quebec are subject to a privacy impact assessment: each provider is bound by contractual confidentiality and security commitments, and may only use your information to provide us the service described.

How we protect your information

Encryption in transit (HTTPS/TLS everywhere), passwords hashed with bcrypt, hashed single-use reset tokens, strict security headers (including a content security policy), separation between development and production environments, and administrator access limited to the responsible person named above. No system is infallible; in the event of a privacy incident presenting a risk of serious harm, we will notify you as well as the Commission d'accès à l'information, as required by law.

Your rights

Directly from the "My account" page, without asking our permission: download all your data (portability) and delete your account and conversations (erasure). You can also write to us to: access the information we hold about you, have it corrected, withdraw consent, or object to a processing activity. We respond within 30 days, in accordance with Quebec's Law 25 and the GDPR (if you are in Europe, where you have the rights set out in articles 15 to 22).

Complaints

If you believe your information is being mishandled, write first to the responsible person ( bonjour@serein.chat ). You can also file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca), the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Europe, your local authority (in France, the CNIL — cnil.fr).

Minimum age

Serein is reserved for people aged 16 and over. We do not knowingly collect information about younger people; if it has happened, write to us and we will delete it.

Changes

If this policy changes significantly, we will indicate it on this page (with the date above) and, for major changes, by email.

Contact

Questions or requests: support@serein.chat or bonjour@serein.chat. We usually reply within 2 business days.