Serre Labs LLC · Legal
Subprocessors and Service Providers
Effective: 2026-09-22
Serre Labs LLC uses providers to operate its services. The processing depends on the features used and the information involved. This page distinguishes customer-data processing from services used for our own business activities or at a user's direction.
Providers supporting customer-data processing
These providers support processing Serre performs to deliver its services. A listed provider receives information only for the relevant service or enabled feature, not necessarily for every customer.
Supabase
Database and storage infrastructure
Account records and customer workspace content stored by the service.
Vercel
Application hosting, delivery, and website traffic measurement
Requests, technical logs, information processed by hosted application functions, and request-derived traffic statistics.
Anthropic
AI inference
Content, instructions, related information, and outputs processed for enabled AI-assisted features.
Voyage AI (MongoDB)
AI embeddings for matching related records
Text from workspace library records, such as value claims, value mechanisms, benchmarks, value drivers, and captured source excerpts, converted into embeddings used to find duplicates and relevant records.
Resend
Transactional email
Recipient addresses and service-message content, including requested delivery workflows.
PostHog
Product analytics and session replay
User identifiers, account-linked events, usage information, and recorded interactions.
Sentry
Error monitoring and diagnostics
Technical events, error context, and identifiers present in diagnostic payloads.
Intercom, including Fin
Customer support and support AI
Account/contact details, conversations, submitted support content, and relevant diagnostic context.
Other tools we use
Serre also uses tools for our own business operations, including sales, marketing, billing and scheduling, as well as optional sign-in services. Depending on how you interact with us, these tools may process contact, payment, booking, authentication or consented visitor information.
- Instantly (Leadsy) — optional, consent-based marketing-site visitor identification and sales follow-up.
- HubSpot — sales and relationship management.
- Stripe — payments and subscription administration.
- Google — Google sign-in, when selected.
- Cal.com — meeting scheduling, when used.
These providers may process information under their own privacy notices. Listing a tool does not mean information is sent to it on every visit or for every customer.
Visitor-identification privacy resources
Instantly (Leadsy) supports optional visitor identification. Read its Website Visitor ID Data Usage Policy and Privacy Policy for provider-specific processing information.
Use Instantly's direct opt-out page for provider-held profile choices, or email privacy@serre.app for help with a request involving Serre. Browser withdrawal, profile deletion, and marketing-email unsubscribe are separate actions.
Site-measurement privacy resources
Vercel Web Analytics supports aggregated website traffic measurement separately from visitor identification. Its analytics privacy documentation explains its processing practices.
Locations and scope
Our primary workspace database is hosted in the United States. This is not a commitment that all providers, their personnel, or their downstream providers process information only in the United States. Contact privacy@serre.app for processing-location and contracting-entity details relevant to your use and agreement.
We do not use customer content to train AI models. Relevant provider contracts must support that commitment; it does not mean zero provider retention. A signed customer agreement may impose additional processing restrictions.
Changes and objections
This list describes providers, not a separate permission to collect information or use it for a new purpose. The Privacy Policy, applicable agreement, and your choices continue to govern that processing. A provider change does not remove those restrictions.
For ordinary additions or replacements of subprocessors handling customer personal information, we will provide at least 30 days' advance notice to the customer's designated account contact. Keep that contact current, or email privacy@serre.app to designate a privacy contact.
Customers may object during the notice period on reasonable data-protection grounds by emailing privacy@serre.app. We will discuss the concern and available alternatives before the proposed change. Any additional rights or remedies in an executed agreement continue to apply.
Questions about this list, processing locations, or an intended integration? Contact privacy@serre.app. This page is not itself an executed data-processing addendum.