Privacy Policy | 8Serpent

At 8Serpent, we are committed to protecting the privacy and security of our clients and their end-users. This Privacy Policy applies to our website, SaaS platform, and related AI automation services (collectively, the "Services"). By accessing or using our Services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.

1. Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("Personal Information"). We may collect the following categories of Personal Information:

Account Information: Name, email address, company name, and billing details when you register for an account.
Integration Data: When you connect third-party services (such as Meta WhatsApp Cloud API), we collect necessary authentication tokens, which are heavily encrypted (AES-256-GCM) at rest.
Communication Data: Transcripts of interactions, chat histories, and media attachments processed through our AI pipelines for the purpose of fulfilling the Service.
Usage Data: Information on how you interact with our Services, including IP addresses, browser types, log data, and diagnostic information.

2. How We Use Your Information

We use the information we collect for various business purposes, including:

To provide, maintain, and improve our AI automation Services.
To process transactions and manage your account.
To facilitate integrations with third-party platforms like Meta (WhatsApp).
To monitor and analyze trends, usage, and activities in connection with our Services.
To detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.

3. Data Sharing and Sub-Processors

We do not sell your personal data. We may share your data with trusted sub-processors who assist us in operating our platform, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. Our key sub-processors include:

Cloud Infrastructure: Oracle Cloud Infrastructure (OCI), Cloudflare, and Supabase for private cloud hosting, edge security, and database management.
AI Providers: Google (Gemini), OpenAI, and Anthropic for processing LLM inference. Note that data sent to these providers via our LiteLLM gateway is explicitly excluded from their model training datasets.
Communication APIs: Meta (WhatsApp Cloud API) and Resend for message and email delivery.

4. Data Security

We implement enterprise-grade security measures to maintain the safety of your personal information. High-value tenant secrets and integration tokens are encrypted using AES-256-GCM. Our internal network operates within a private VPC, and administrative access is secured behind Zero Trust architecture. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

5. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

6. Your Rights

Depending on your location, you may have rights under applicable data protection laws, including the right to access, delete, update, or restrict the processing of your personal data. To exercise these rights, please contact our privacy team.

7. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: hello@8serpent.com
Address: 8Serpent.