Privacy Policy.

1Who we are

Serein is operated by its founder, an individual doing business as Serein from the United States (the “Operator” in the Terms). The Operator decides how and why your information is used and is responsible for it. Mailing address: 28 Geary St., Suite 650 PMB 5438, San Francisco, CA 94108, United States. For anything in this policy, write to [email protected].

2Scope

This policy applies to the Service: serein.trade, the Serein terminal, the emails we send, and the affiliate program. It does not apply to third-party websites or services linked from the Service, including news sources and our payment processor's own pages, which have their own policies.

3What we collect

Information you give us

• Email address — to create your account and send sign-in links and codes.
• Profile — first name, last name, date of birth, username and, if you add one, a profile picture. The date of birth is asked for because the Service is only for people 18 and over; it is shown only to you. If it shows you are under 18, the account is closed and we keep only the fact and time that it was refused, not the date. Pictures are cropped and re-encoded in your browser before upload, which removes embedded metadata such as location.
• Price alerts — the prices you ask to be alerted at.
• Affiliate application and payouts — the note you write when applying and, if you are approved and ask to be paid, your payout method and the details you give us for it (for example a PayPal, Venmo, Cash App or Zelle handle, bank account details or a crypto wallet address).
• Messages — anything you send us by email.
• Discord account (optional) — if you press Connect Discord in your settings, your Discord user id and display name, so our Discord server can give you the Subscriber role while your plan is active and remove it when it ends. Discord asks you to approve this, and we ask only for your id and name (Discord's “identify” permission), never your email address, servers or messages. We do not keep Discord's access token. You can disconnect at any time in your settings.

Information created when you use the Service

• Account and session records — when your account was created and confirmed, sign-ins and sign-outs, session start and end times and reasons (for example “signed in on another device”), a sign-in counter used for the two-device limit, and when you were last active.
• Security and anti-abuse records — sign-in request timing and counts, failed code attempts, rate-limit counters, and a normalised form of your email address used to limit free trials to one per person.
• Security monitoring — to detect shared accounts, automated access and the redistribution of data, we keep, for each account and day, a one-way, salted fingerprint of the networks you connect from (never your IP address itself), the country (and, if our network provider supplies it, the city and network operator) your connection comes from, how long you stay connected, and how often your browser or our extension makes requests. It is used only for that purpose and is not tied to what you look at in the terminal.
• Copy and data marks — the terminal software and the data we send to your browser carry identifiers linked to your account, invisible in the Service, so that a copy found outside the Service can be traced to the account it was sent to.
• Usage records — the amount of data sent to and from your terminal connection, connection times, and the number of connections. These are kept in memory on our server and are not tied to what you looked at.
• Site visit totals — when you load a page of serein.trade, our own server counts it: for each day and page, how many times pages were loaded and roughly how many different visitors there were, and for the home page, what kind of site sent the visitor (for example a search engine, TikTok, or an affiliate link). Only those daily totals are kept. To tell visitors apart within one day we use a one-way code made from your IP address and browser with a random value that changes every day and is never stored, so the totals cannot be linked to you or followed from day to day. No cookies, scripts or third parties are involved.
• Network information — your IP address and basic request information are processed by our hosting and network providers to deliver the Service and protect it from abuse, and may appear in their logs. We also keep an access log of your terminal sessions: when each one connected and disconnected, the IP address it connected from and the country that address is in, and your browser's user-agent string (browser and operating system). We use it to secure accounts, detect shared or compromised access, and show that the Service was delivered and used if a payment is disputed, including by providing it to our payment processor and your card issuer in a chargeback. It records nothing about what you view or trade, and is visible only to the Operator.
• Agreement records — which version of the Terms you accepted, the automatic-renewal terms you agreed to at checkout, and when.
• Audit trail — a record of account events such as sign-ins, subscription changes, cancellations, bans, owner actions and affiliate approvals.

Information from our payment processor

• A customer identifier, subscription status, plan, price, discount, billing period dates, cancellation state, invoice identifiers and amounts, payment success or failure, and for trial-abuse prevention a card fingerprint (a token that identifies a card without revealing its number).

Affiliate program

• Which affiliate code a customer entered, and commission records for each paid invoice, including amounts, payout requests, payout status, payment references and any proof of payment. We may request tax and identity information from affiliates before paying commission.

4What we do not collect

• We never receive or store your card number or security code. Card payments are handled entirely on Stripe's pages. The only bank or payment-account details we ever hold are the payout details an affiliate chooses to give us.
• We do not collect your trades, orders, positions, brokerage account or balances. Serein does not connect to your brokerage.
• We do not record which charts, levels, instruments or panels you look at, or what you click inside the terminal.
• We do not use advertising trackers, third-party analytics, or advertising cookies.
• There is no password. We never ask for one.

5How we use it

• To create and operate your account, sign you in, and enforce the limit of two devices per account.
• To provide the terminal and decide whether your account may access it.
• To bill you, manage your subscription, keep a record of what you agreed to, handle failed payments and prevent trial abuse.
• To run the affiliate and referral programs: attribute referrals, calculate commission and pay it.
• To secure the Service: detect, prevent and respond to fraud, abuse, chargebacks, attacks and breaches of the Terms, including by rate limiting, by monitoring for shared accounts and automated access, and by tracing copies of our software or data found outside the Service to the account they were sent to.
• To send the emails the Service needs: sign-in links and codes, confirmations and notices about your subscription and billing, the price alerts you set, affiliate notices, and notices about security or changes to the Service or these policies. We do not send marketing email without your consent, and any we send will carry an unsubscribe link.
• To operate and improve the Service, measure load and capacity, and fix problems.
• To comply with law, respond to lawful requests, and establish, exercise or defend legal claims, including disputes over charges.

6Who processes it

We use service providers who process data on our behalf, only as needed to provide their service:

• Convex — database and backend hosting for accounts, sessions, profiles, pictures, alerts, subscriptions, affiliate records and the audit trail.
• Stripe — payment processing, subscriptions, invoices and the billing portal. Stripe processes your payment details under its own privacy policy. When you add a card, your bank may verify you with 3-D Secure; we keep the result of that check (whether you were verified, the 3-D Secure version, the time, and the card's brand, last four digits and issuing country) as fraud and dispute evidence.
• Resend — delivery of the emails described in Section 5.
• Cloudflare — domain, network delivery and protection for serein.trade.
• Google (Gmail) — hosts our support mailbox, so emails you send us are stored there.
• Discord — if you connect Discord or join the Serein Discord server, Discord processes your account and messages under its own privacy policy. Our Discord bot keeps, on our own server, support-ticket transcripts, moderation records for our Discord server (warnings, bans, timeouts, and deleted or edited messages in its moderation log), server security records (verification checks, accounts held for review and why, raid and impersonation alerts), invite records (which invite link a member joined through and who made it, and how many people each member has invited) and giveaway entries. These identify you by your Discord user id and name.
• Payout services — if you are an affiliate, the service you choose for payouts (for example PayPal, Venmo, Cash App, Zelle, your bank or a crypto network) processes the payment under its own terms.

Our pages load their code, fonts and images from serein.trade itself, not from other companies' networks, and talk only to our own backend.

We may also disclose information: to comply with law, regulation, legal process or a lawful government request; to enforce the Terms or investigate breaches; to protect the rights, property or safety of Serein, our users or others; in connection with a chargeback or payment dispute; to professional advisers; and to a Successor Entity or in connection with a merger, financing, acquisition, reorganisation or sale of all or part of the Service.

7What others can see

• Your username, name and picture are shown to you in the terminal and to the Service's owners and administrators.
• If you subscribed using an affiliate code, that affiliate sees your username (never your email address or picture), when you were referred, whether you are currently paying, and the commission earned from your payments.
• Owners and administrators can see account details needed to run the Service, including email addresses, subscription status and account activity.
• Your email address is never shown to other customers or affiliates.

8Cookies and browser storage

Serein sets one cookie of its own, and keeps a few things in your browser's local storage — which privacy law treats the same way as cookies — only things the Service needs to work or that you ask for:

• The terminal pass (serein_app, a cookie) — set when you open the terminal while signed in, so serein.trade sends the terminal only to signed-in accounts with access. It lasts a day, is renewed while the terminal is open, names your account and nothing else, and cannot be read by the page itself.
• Your sign-in (serein.session) — keeps you signed in on that device for up to 30 days, until you sign out, or until you sign in on a third device.
• Your workspace (serein.panel.layouts, serein.panel.layout.draft) — your terminal layouts, which also sync to your account.
• An affiliate referral (serein.ref) — if you arrive through an affiliate's link, its code, kept in your browser for 30 days so it can be applied at checkout. It is removed when you subscribe, if you remove the code, or after 30 days.
• Your preferences (other keys beginning serein.) — which notices you have read, recently used colours and chart views.
• The Serein for TradingView browser extension (only if you install it) — keeps a copy of your sign-in in the extension's own storage on that device so it can draw your levels on TradingView charts. It talks only to serein.trade and our backend. TradingView's page is given the level prices to draw and nothing else, never your sign-in. What the extension handles is used only to draw your levels: it is never sold, never used for advertising, and never shared except as this policy describes.
• A technical flag (serein.reloadedForBackend, in session storage, cleared when you close the tab) — stops the page reloading in a loop after we move servers.

Cloudflare, which protects serein.trade, may set strictly necessary security cookies (such as __cf_bm or cf_clearance) to tell people from automated traffic. Stripe sets its own cookies on its checkout and billing pages, which are Stripe's pages under Stripe's policy.

We use no cookies or storage for advertising, analytics or tracking, so there is nothing to opt in to or out of and no cookie banner. Clearing your browser's site data removes all of the above and signs you out on that device. Anyone with access to your device or browser profile may be able to use a stored session; sign out on shared devices.

9How long we keep it

• Account and profile — while your account exists.
• Sign-in codes and links — they expire after 15 minutes; expired records are deleted periodically.
• Unconfirmed accounts — addresses that requested a sign-in and never used it are deleted periodically.
• Sessions — until they end, then as part of the account's security record while the account exists.
• Usage counters — in memory only, reset when our server restarts.
• Security monitoring records — up to seven days, then deleted automatically, unless needed for an open investigation of a breach of the Terms.
• Access log (terminal sessions, IP addresses, browser) — 24 months from each session, then deleted automatically. This applies after account deletion too, because a card payment can be disputed many months after it is made; entries needed for an open dispute or legal claim are kept until it is resolved.
• Agreement records — what you agreed to at checkout and when, for at least three years after your subscription ends (or one year after, if longer is not required), including after account deletion, as subscription laws require.
• Billing, invoice, commission and payout records — as long as needed for accounting, tax, audit, dispute and legal purposes, which may be many years, including after account deletion.
• Payout details — until you delete your account, when they are erased; the record that a payout was made (amount, date, status and reference) is kept with the billing records.
• Anti-abuse records — including the normalised email and card fingerprint used to prevent repeat free trials, and records of banned accounts — after account deletion, for as long as they serve that purpose.
• Audit trail — kept after account deletion with the account's identifier but without the email address or profile.
• Discord link — until you disconnect Discord in your settings or delete your account.
• Discord server records (ticket transcripts, moderation and security records, giveaway entries) — up to three years, for safety, support and disputes; records needed for an open dispute or legal claim are kept until it is resolved. Messages you post in the server itself are held by Discord under its policy.

10Deleting your account

You can delete your account from the account settings page. Deletion immediately cancels any subscription with no refund, and permanently erases your email address, name, date of birth, username, profile picture, sessions, sign-in records, alerts and saved layouts from our database. The records described in Section 9 as kept after deletion are retained. Your payment processor keeps its own records under its policy. Deletion cannot be undone.

11Your choices and rights

• Access and correction — you can see and change your name, username and picture on your profile page, and see your subscription on the subscription page. Your date of birth can be corrected by emailing us.
• Deletion — as described in Section 10.
• Billing details — managed in the billing portal linked from the subscription page.
• Other requests — depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. Email us from the address on your account. We may need to verify your identity, and we may decline requests where the law allows, including where we must keep information for the purposes in Section 9. We will answer within 30 days, and we will not discriminate against you for exercising a right the law gives you.

12Security

We use measures designed to protect information, including hashed session secrets and sign-in codes, short-lived access tokens, a limit of two devices per account, encrypted connections, rate limiting, and access controls on administrative functions. No method of transmission or storage is completely secure, and we cannot guarantee security. You are responsible for securing your email account and devices. If a breach affects your personal information, we will tell you as the law requires.

13Where data is processed

Serein is operated from the United States, and our service providers process information in the United States and in other countries whose data protection laws may differ from those where you live. Where the law requires a basis for sending information abroad, we rely on our providers' Standard Contractual Clauses or their certification under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions, as each provider offers.

14If you are in the EEA, the UK or Switzerland

We process your information on these legal bases:

• Contract — to run your account, subscription and the terminal you asked for, and the affiliate program if you join it.
• Legitimate interests — to keep the Service secure, prevent fraud and trial abuse, understand load and fix problems, and establish or defend legal claims. You can object to these.
• Legal obligation — to keep billing and tax records and answer lawful requests.
• Consent — where we ask for it, which you can withdraw at any time.

You have the right to access, correct, delete, restrict or port your information, to object to processing based on legitimate interests, and to complain to your data protection authority. Email us first and we will try to help.

15Children

The Service is only for adults 18 and over, and we do not knowingly collect information from anyone under 18. If a date of birth shows someone is under 18, the account is closed. If we learn that an account belongs to a child under 13, we delete its email address and everything else in it. If you believe a minor has created an account, contact us and we will close or delete it. The Serein Discord server is open to anyone Discord itself allows, which in most countries means 13 and over; our bot keeps only the Discord records described in Section 6, and we do not knowingly collect information from anyone under 13 there either.

16Sale of personal information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

17Do Not Track and Global Privacy Control

We do not track you across other websites or let others do so, and we do not sell or share personal information, so we treat every visit the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.

18Changes

We may update this policy by posting the new version and changing the date above. If a change materially affects how we use information we already hold about you, we will email you before it takes effect.

19Contact

Privacy questions and requests: [email protected], from the email address on your account. By post: Serein, 28 Geary St., Suite 650 PMB 5438, San Francisco, CA 94108, United States.