Privacy Policy for Serwen

Last updated: 27 April 2026

This Privacy Policy describes how Omalius BV ("we", "us", or "our") collects, uses, and processes personal data in connection with Serwen, an AI-powered workspace for research and expert assistance (the "Service").

We are committed to protecting your privacy and handling your data in a transparent and secure manner, in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR").

1. Data Controller

The data controller responsible for your personal data is:

Omalius BV

Enterprise number: 1006.207.328

Hasselt, Belgium

Email: contact@serwen.com

2. Scope of this Policy

This Privacy Policy applies to all users of Serwen, including:

  • Visitors using the Service anonymously
  • Registered users with an account
  • Subscribers to paid plans

3. Categories of Personal Data

We collect and process the following categories of data:

3.1 Account Information

When you create an account:

  • Email address
  • Password (stored as a secure hash)

3.2 Anonymous Identifiers

When you use the Service without registering:

  • A unique anonymous identifier
  • Stored via browser storage and cookies

This enables session continuity and usage tracking.

3.3 User Content

We process content you submit through the Service, including:

  • Chat prompts and messages
  • AI-generated responses
  • Conversation history
  • Search queries
  • Custom AI assistant configurations

This data is necessary for providing core functionality.

3.4 Usage and Operational Data

We collect limited operational data, including:

  • Token usage and processing volume
  • Feature usage (chat, search, etc.)
  • Credit consumption
  • Subscription and plan status

We do not collect or store IP addresses or device fingerprinting data as part of normal operations.

3.5 Billing Information

For paid users:

  • Subscription details
  • Billing identifiers (e.g., Stripe customer ID)
  • Transaction metadata

Payment card information is processed exclusively by our payment provider and is not stored by us.

3.6 Cookies and Local Storage

We use:

  • Essential cookies (e.g., anonymous session identifier)
  • Browser storage (localStorage/sessionStorage) for authentication and application state

We do not use advertising or marketing tracking technologies.

4. Purposes of Processing

We process personal data for the following purposes:

  • To provide and operate the Service
  • To enable AI interactions and search functionality
  • To store and manage user conversations
  • To authenticate users and manage accounts
  • To enforce usage limits and credit systems
  • To process payments and manage subscriptions
  • To ensure security and prevent abuse
  • To maintain and improve system performance and reliability

5. AI Processing and Third-Party Services

5.1 AI Infrastructure

User inputs (e.g., chat prompts) are processed by AI models hosted within the European Union.

  • Data is transmitted solely for real-time response generation
  • We do not use user data to train AI models
  • We do not permit AI providers to train on Serwen user data

When you use Serwen chat and custom experts, you are interacting with AI-generated outputs.

5.2 Search and External Content

Search functionality may involve:

  • Sending queries to external search providers
  • Retrieving content from third-party websites

Such processing is necessary to deliver search results and summaries.

5.3 Payment Processing

Payments are processed by Stripe.

  • Stripe acts as an independent data controller for payment data
  • Sensitive payment details are never stored on our systems

6. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

  • Contractual necessity (Article 6(1)(b)) - to provide the Service
  • Legitimate interests (Article 6(1)(f)) - to operate, secure, and improve the Service
  • Legal obligations (Article 6(1)(c)) - for accounting and compliance
  • Consent (Article 6(1)(a)) - where applicable

7. Data Retention

We retain personal data only as long as necessary:

  • Account data: until account deletion or inactivity
  • Conversation data: until deleted or deactivated by the user
  • Anonymous identifiers: up to 12 months
  • Usage and billing data: retained for operational and legal purposes

Certain data may be retained longer where required for compliance, dispute resolution, or security.

8. Data Subject Rights

You have the following rights under GDPR:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to object
  • Right to data portability

You may exercise these rights by contacting: contact@serwen.com

Current Service capabilities include:

  • Deletion of conversations
  • Management of stored content

Additional requests may be handled manually.

9. Data Sharing and International Transfers

We may share data with:

  • AI infrastructure providers (EU-based)
  • Search service providers
  • Payment processors (Stripe)
  • Technical service providers (hosting, infrastructure)

Some providers may operate outside the European Economic Area (EEA).

Where applicable, we ensure appropriate safeguards (e.g., Standard Contractual Clauses).

10. Security Measures

We implement appropriate technical and organizational measures, including:

  • Encryption of sensitive data in transit
  • Secure password hashing
  • Token-based authentication
  • Access controls and system monitoring

Despite these measures, no system can guarantee absolute security.

11. Children's Data

The Service is not intended for children, and we do not knowingly collect personal data from minors.

12. AI Transparency and User Notice

Serwen includes conversational and search experiences that produce AI-generated responses.

  • We aim to make AI interaction obvious in the product interface
  • AI-generated outputs may be inaccurate, incomplete, or outdated
  • Users should review important outputs before relying on them or publishing them

Where Serwen introduces sharing, export, or publication workflows for AI-generated content, additional disclosure notices may be shown in-product.

13. Updates to this Policy

We may update this Privacy Policy periodically.

The updated version will be indicated by the "Last updated" date.

14. Contact

For any questions or requests regarding this Privacy Policy:

Omalius BV

Hasselt, Belgium

Enterprise number: 1006.207.328

Email: contact@serwen.com