Privacy policy

Who we are

Seraia (“Seraia”, “we”, “us”, or “our”) operates the early-access waitlist site at early.seraia.app. We are building an operating system for property professionals. This policy explains what personal data we collect on this site, why we collect it, and your rights over it.

Contact: [email protected]

What we collect and why

This site is a pre-launch waitlist. We collect only what we need to operate it:

• Email address — submitted when you join the waitlist. We use this to contact you about early access, pricing, and product updates. You consent to this when you submit your email.
• Quiz and calculator responses — if you complete the product-fit quiz or savings calculator, we store your answers (property type, unit count, current tools). These help us understand which tier fits your portfolio and to prioritise early-access invitations. Providing this information is optional.
• Referral codes and attribution data — if you arrive via a referral link, we record that code to attribute your signup correctly and to honour any associated founding-member offer.
• Server logs and analytics — standard web-server logs (IP address, browser type, referring URL, page views) are generated automatically. We use minimal, privacy-respecting analytics to understand traffic patterns. Logs are not linked to your identity unless you have submitted your email.

We do not collect payment information, identity documents, or property data on this site.

Legal basis for processing

We process your data under the following bases:

• Consent — for your email address and any optional quiz or calculator responses you provide.
• Legitimate interests — for server logs and basic analytics necessary to keep the site secure and functional.

Where we rely on consent, you may withdraw it at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

How and where we store your data

Waitlist submissions are stored in a Cloudflare D1 database (SQLite, hosted in Cloudflare’s European Union region). Cloudflare processes data in accordance with GDPR and its Data Processing Addendum.

We use Resend to send transactional and waitlist emails. Your email address is passed to Resend solely for this purpose. Resend is SOC 2 Type II certified and processes data under a Data Processing Agreement.

We do not sell, rent, or trade your personal data to third parties. We do not use your data for advertising.

Cookies and analytics

This site uses minimal cookies. We do not use third-party advertising cookies. Session-management cookies may be set to maintain your state during a visit (for example, to remember your quiz progress). These are strictly necessary and do not require consent under current guidance.

Any analytics we run are privacy-respecting: we do not build individual profiles, share data with ad networks, or track you across other sites.

Data retention

We retain your email address and associated waitlist data until you ask us to delete it, or until two years after our product launches publicly — whichever is sooner. At that point, data is deleted or anonymised.

Server logs are retained for up to 90 days for security and diagnostic purposes, then automatically purged.

International transfers

Our primary data storage is in the EU. Some service providers (Cloudflare, Resend) may process data in other regions. Where data leaves the European Economic Area, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or equivalent transfer mechanisms).

Your rights

If you are in the UK or EU, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to restrict processing while a dispute is resolved.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw at any time.

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority (in the UK, the ICO; in the EU, your local data protection authority).

Changes to this policy

We may update this policy as the product evolves. We will note the revised date at the top of this page. For material changes, we will notify waitlist members by email where we are able to do so.

Contact

Questions or requests about this policy: [email protected]