Privacy Policy

What we collect, why, and our lawful basis

Under the UK GDPR we must have a lawful basis for each use of your data. Here is everything we process:

Account data

When you create an account we store your email address, authentication details (a securely hashed password or your chosen sign-in method) and any profile information you add during onboarding. As you use Seris we also store the content you create — your journal / trade entries and your desk layouts and preferences. This is held in our database (Supabase). Lawful basis: performance of our contract with you (providing the service).

Payment data

Subscriptions are processed by Stripe. Stripe handles your card details on their own secure systems — Seris never sees or stores your card number. We keep a record that a subscription exists (its status, plan and renewal date) so we can give you the right access. Lawful basis: performance of our contract; and our legitimate interest and legal obligation in keeping accurate billing records.

Transactional email

We send service emails (sign-in help, receipts, account notices) through Resend, which processes your email address to deliver them. Lawful basis: performance of our contract. Any optional marketing email is sent only with your consent, and you can opt out at any time.

Voice generation

Some features read the daily market brief aloud using ElevenLabs. Only the brief text is sent for narration — no personal data is included. Lawful basis: performance of our contract.

Embedded video

The Live page can embed official YouTube players. YouTube sets its own cookies once a player loads, so we keep those players behind a click-to-load placeholder until you accept optional cookies — see Cookies. Lawful basis: your consent.

Imagery

Some visuals use public-domain imagery from NASA. These are static images and involve no personal data.

Basic technical data

Like any website, our host receives standard request information (such as IP address and browser type) needed to serve pages securely. Lawful basis: our legitimate interest in operating and securing the service.

Artificial intelligence

Seris uses artificial intelligence to generate some of what you read — including the daily market brief, focused market reads, and AI “takes” and analysis. This AI text is produced by Anthropic (the Claude models), acting as our processor.

AI output can be wrong. It can be inaccurate, incomplete, out of date, or misleading, and it is generated automatically without human review of each item. It is provided for education and information only — it is not financial advice and not a recommendation to buy, sell or hold anything. Always check anything that matters against a primary source before you act on it.

What we send to the AI provider: only the text needed to produce the output — for example market data, headlines, the instrument or asset class in focus, and, for journal-related features, the trade statistics you ask us to analyse. What we do NOT send: your email address, password, payment details, or your identity are not sent to the AI provider. Anthropic processes this input to return the generated text and, per its terms, does not use Seris’s API data to train its models.

Data collection summary

A plain, at-a-glance summary of what Seris collects and where it goes. The detail (and the lawful bases) is in the sections above and below.

App Store “privacy nutrition label”: Apple requires a structured privacy label only for apps distributed through the App Store. Seris is currently a web application, so that specific label is not required — the summary table above is provided as good practice regardless. If Seris ships a native iOS app, a matching App Store privacy label must be completed in App Store Connect before submission, and the founder must confirm it reflects the final data flows (including any SDKs the app adds).

Who processes your data

We use a small set of trusted providers (“processors”) to run Seris. Each only processes what it needs for its job:

We do not sell your personal data, and we do not share it with third parties for their own marketing.

Cookies

Essential cookies keep you signed in and hold your session. Seris works fully on these alone, and they don’t need consent because the service can’t run without them.

Optional cookies are only ever set by embedded YouTube players. Those players stay behind a click-to-load placeholder until you choose Accept all in our cookie banner (or load an individual player). You can change your choice any time from the Cookies link in the footer.

If marketing measurement pixels are ever enabled, they too would load only after you accept optional cookies — governed by the same single banner, never a second prompt.

How long we keep it

We keep your account data for as long as your account is open. If you delete your account, we delete your personal data from our systems, except where we must keep limited records to meet a legal obligation (for example, billing and tax records, which we retain for the period required by UK law). Processors delete data in line with their own retention schedules once it is no longer needed.

Your rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you.
• Erasure — ask us to delete your data. You can do this yourself by deleting your account, or by emailing support@serisx.com; we honour deletion requests either way.
• Rectification of anything inaccurate.
• Portability — receive your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these, email support@serisx.com. You also have the right to complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk — though we’d appreciate the chance to put things right first.

Registration: Not yet registered

International transfers

Some of our processors are based outside the UK (for example in the United States). Where your data is transferred internationally, we rely on the appropriate safeguards required by UK data protection law — such as the UK’s adequacy regulations or Standard Contractual Clauses — so your data keeps an equivalent level of protection.

Children

Seris is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy as Seris evolves. When we make a material change we’ll update the date at the top and, where appropriate, tell you directly.

Contact

Questions about your data or this policy? Email support@serisx.com. See also our Terms of Service and FAQ.