Serpaix logo markSerpaix wordmark

Legal

Privacy Policy

Last updated: May 2026

Our Commitment. Serpaix is built on a fundamental principle: you own your data. We collect only what is necessary to provide the service. Telemetry is opt-in. Your cognitive graph stays on your machine unless you explicitly choose to sync.

What We Collect

  • Account data: Email, name, and workspace preferences when you create an account.
  • Usage data: Anonymous product usage metrics if you opt in to telemetry.
  • Content: Notes, files, and knowledge base content that you explicitly create or upload.

What We Do NOT Collect

  • We do not mine your data for AI training.
  • We do not sell your personal information.
  • We do not track you across the web.
  • We do not store your data on our servers unless you enable cloud sync.

Windows Beta Access (May 2026)

The Windows Beta uses a lightweight, email-code gate only to control distribution and understand interest. When you join at /beta/join, we store your email in Cloudflare D1 (beta_users), a short-lived SHA-256 hash of your 6-digit code (beta_codes, 10-minute expiry, deleted after login), and a session record with truncated SHA-256 hashes of your IP and User-Agent (beta_sessions, 7-day expiry). We verify you are human via Cloudflare Turnstile and deliver the code via Resend from noreply@serpaix.xyz. Your desktop notes, graph, and memories remain local and are not part of this flow. Beta emails are used only for access; marketing email requires separate opt-in. The functional cookie __serpaix_beta is HttpOnly, Secure, SameSite=Lax, 7 days, strictly necessary.

Processors: Cloudflare (Workers + D1, Turnstile), Resend (email), Vercel (hosting/proxy logs), GitHub (public release downloads). Retention: codes 10 min; sessions 7 days; beta_users until you request deletion at aswina241@gmail.com.

Local-First Architecture

By default, all data stays on your device. Cloud sync is an opt-in feature. When enabled, data is encrypted with AES-256-GCM before leaving your machine. You control what syncs. You can delete synced data at any time. The Windows Beta in particular is offline-only — no cloud sync is active and your data never leaves your device unless you explicitly export it.

Contact

For privacy-related inquiries, contact aswina241@gmail.com or aswina241@gmail.com.