Privacy Policy
Effective date: 25/09/26
Seraa is operated by Seraa Limited, a New Zealand company (company number 9454010) ("we", "us"). This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal information in accordance with the New Zealand Privacy Act 2020.
What Seraa is
Seraa is a business knowledge assistant. Your organisation uploads its own documents and information, and Seraa answers questions from that material for the people in your organisation, and, where you enable it, answers approved questions from visitors on your website.
Information we collect
Account information. Name, email address, and sign-in credentials for each person in your organisation's workspace.
Your organisation's content. Documents, notes, reminders, projects, saved memories, and messages your organisation's members create or upload. This content belongs to your organisation.
Website visitor questions. If your organisation enables the website assistant, we collect the questions visitors ask and, where a visitor chooses to leave them, their contact details. Visitors are not signed in and we do not identify them beyond what they provide.
Usage and technical information. Feature usage counts, technical logs, and device and browser information reasonably necessary to run, secure, and improve the service.
We do not ask for, and you should not upload, more personal information than your business purpose requires.
How we use information
To provide the service: storing your organisation's content, retrieving it to answer questions, and generating responses, documents, dashboards, briefings, and reminders you request.
To operate accounts, billing, support, and service communications.
To keep the service secure, enforce usage limits, and prevent misuse.
To understand aggregate usage and improve the service. We do this with usage measures, not by reading your content.
We do not sell personal information. We do not use your organisation's content for advertising.
Artificial intelligence processing
Seraa generates answers using third-party artificial intelligence providers. When you ask a question, relevant excerpts of your organisation's content are sent to those providers to produce the answer, along with reasonable supporting context such as the current date.
Our AI providers process this information to generate responses and do not use it to train their models. Where a feature you invoke performs a web search, your query terms for that search are processed by the provider operating the search.
Answers are generated from your organisation's own material and cited to it wherever possible. AI-generated content can still contain errors, and important decisions should be checked against the cited sources.
Service providers
We use a small number of service providers to run Seraa, limited to what each needs to perform its function:
Cloud infrastructure and database providers, which store your content.
Third-party artificial intelligence providers, which process content excerpts to generate answers, and, where used, speech synthesis providers, which process answer text to produce audio.
Email service providers, which process names and email addresses to deliver account and service emails, and, where you have subscribed, product updates.
Payment providers, which process billing details when paid plans apply. We do not store card numbers ourselves.
Each provider is bound by its own contractual and security obligations. Your organisation's content and account information are stored in Australia (Sydney). When Seraa generates an answer, the relevant excerpts are processed by our artificial intelligence providers in the United States, and email and payment providers may process the limited information they need outside New Zealand. Where information leaves New Zealand we take reasonable steps to ensure it remains subject to safeguards comparable to the Privacy Act 2020.
Security
Access to your organisation's workspace is restricted to its members. Organisations are isolated from one another at the database level. Credentials and service keys are held server-side, not in the browser. Access to the public website assistant is limited to material your organisation has explicitly approved for public answers. No system is perfectly secure, and we encourage strong passwords and prompt reporting of any concern.
Retention and deletion
Your organisation controls its content and can delete documents, notes, messages, and other material at any time; deletion removes the material from live retrieval. When an organisation closes its account we delete its content within a reasonable period, except where we are required to retain records by law. Backups roll off on a fixed schedule.
Your rights
Under the Privacy Act 2020 you may request access to, and correction of, personal information we hold about you. Requests go to ask@seraa.ai. We will respond within the timeframes the Act sets. If you are not satisfied with our response you may complain to the Office of the Privacy Commissioner (privacy.org.nz).
Children
Seraa is a business service intended for users 18 and over.
Changes
We will post any changes to this policy on this page with a new effective date, and for material changes we will notify account holders by email.
Contact
Seraa Limited, Auckland, New Zealand