Legal
Privacy Policy
Effective September 28, 2026
This policy explains how Serpyn handles information when you browse SaaS listings, create an account, purchase credits, connect a provider, or use SaaS Owner collaboration tools.
Information we collect
We collect account and verified email data, Explorer preferences such as liked or tracked SaaS and the tracked update categories you select, SaaS Owner listing and social-profile data, credit purchases and immutable wallet entries, membership and relationship records, security logs, and the minimum provider data needed to verify products, coupons, orders, refunds, and performance.
Provider credentials and customer data
SaaS Owner provider tokens are restricted to documented read access, encrypted at rest, and processed only on the server. They are never displayed to partners or Explorers. Core attribution does not retain purchaser email. Verified review processing requires the mandatory consent presented during supported-provider onboarding. The purchaser email is compared privately in server memory, is never stored or displayed, and is discarded after Serpyn stores only a product-scoped keyed verification proof.
When you publish a verified review, your chosen Display Name, star rating, review text, date, and applicable refunded-purchase label are public review content. Your provider purchaser email is never used as the Display Name.
How we use information
We use information to authenticate accounts, maintain credit balances, reconcile top-ups and chargebacks, publish eligible listings, operate Explorer discovery and SaaS Owner collaboration relationships, calculate KPI and membership status, prevent abuse, respond to support requests, and meet legal obligations. Serpyn does not sell customer data or use provider data to initiate transactions.
During onboarding or an owner-requested website URL change, Serpyn makes a server-side public-web request to confirm reachability and capture a public Open Graph, Twitter, or favicon preview URL for the listing. This is not continuous uptime monitoring. The request is protected against private-network access.
When you Track a SaaS, Serpyn may send private in-app notifications for the coupon, website URL, or provider-product changes you select. The SaaS Owner cannot see your identity, contact details, Like status, or Track status.
Service providers
Serpyn uses infrastructure and subprocessors such as Supabase, Hetzner, Cloudflare, Resend, and an approved payment provider for Serpyn credit top-ups. Each receives only the information required for its function. The top-up provider does not process purchases from listed SaaS companies.
Retention and deletion
Free Seller access expires after six months regardless of wallet balance; paid access follows the purchased membership duration. Seller termination does not delete Explorer access or required financial and audit records.
Active records are retained while needed to provide Serpyn. Archived, security, financial, credit-ledger, tax, dispute, and backup records may be retained for legal and fraud-prevention periods. Account deletion removes or anonymizes data except where retention is legally required.
Your choices
You may update your email, manage public listing information, disconnect eligible integrations, or request account deletion. Applicable law may provide additional access, correction, export, restriction, objection, or deletion rights.
Contact
Privacy questions may be sent to [email protected].