Privacy Policy
Last updated: 19 July 2026
Serana AI Inc. ("Serana", "we", "us") builds AI planning software for satellite and communications operators. This policy explains what personal information we collect through the serana.ai website, why we collect it, who we share it with, and the choices you have.
This policy covers the public website only. Use of our application by customers and their users is governed by the separate written agreement in place with that customer, not by this page.
The short version. We collect an email address if you ask for a demo, and we use cookieless analytics that measures traffic in aggregate without setting cookies or tracking you across sites. We do not sell personal information, we do not use it for advertising or profiling, and you can ask us to delete what we hold about you at any time.
1. Who is responsible
Serana AI Inc. is a company incorporated in British Columbia, Canada, and is the controller of the personal information described here. For any privacy question, correction, or deletion request, contact us at info@serana.ai.
2. What we collect and why
| Information | Why we collect it | Basis for processing |
|---|---|---|
| Email address submitted through the demo request form on our home page | To reply to you and arrange a product demonstration. We do not add it to a marketing list. | Your consent, given by submitting the form (GDPR Art. 6(1)(a); express consent under BC PIPA / PIPEDA) |
| Aggregate usage analytics — pages viewed, referring site, approximate country, and device and browser type, collected through Umami. No cookies are set. Visitors are counted using a pseudonymous identifier derived from a salted hash of IP address and browser; we do not store your IP address or track you across other sites. | To understand which pages are useful and how people find the site, in aggregate. | Our legitimate interest in understanding site usage (GDPR Art. 6(1)(f)). No consent banner is required because no cookies or device storage are used. |
| Server and delivery logs — IP address, request time, and requested URL, recorded by our hosting provider | To operate the site securely, diagnose faults, and detect abuse. | Our legitimate interest in running a secure service (GDPR Art. 6(1)(f)) |
We do not knowingly collect personal information from children, and the site is not directed at them. We do not use automated decision-making that produces legal or similarly significant effects.
3. Cookies
The public website does not use cookies for tracking, advertising, or analytics, and stores nothing on your device for those purposes, so there is no cookie banner to accept or decline. Our analytics provider, Umami, measures traffic without cookies and without any device storage. Signed-in areas of our application set strictly necessary cookies to keep your session secure; those are covered by your agreement with us, not by this policy.
4. Who we share information with
We do not sell personal information, and we do not disclose it for advertising or any other commercial purpose unrelated to providing our service. We share it only with service providers who process it on our behalf under contract:
- Our hosting and content delivery provider — serving the website and keeping it available.
- Umami Software, Inc. — our cookieless website analytics sub-processor, under a data processing agreement. It receives page-view data and processes a pseudonymous visitor identifier, but sets no cookies and does not track you across other sites.
We may also disclose information where we are legally required to do so, or to establish or defend legal claims.
5. Where your information is processed
Our infrastructure and our service providers process information in Canada, the United States, and other countries where they operate. This means your personal information may be stored or accessed outside your province or country of residence, and may be subject to lawful access requests by courts or authorities in those jurisdictions. Where information is transferred out of the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
6. How long we keep it
- Demo requests — kept while we are in contact with you and for up to 24 months afterwards, then deleted.
- Analytics — aggregate, cookieless usage data retained by our analytics sub-processor for no longer than 12 months.
- Server logs — retained for up to 90 days.
7. How we protect it
The site is served over HTTPS, and access to personal information is limited to the people who need it to do their jobs. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the sensitivity of the information.
8. Your rights
Wherever you live, you can ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, or delete it. Where we rely on your consent — for example, a demo request — you can withdraw it at any time by emailing us.
If you are in the European Economic Area or the United Kingdom, you additionally have the right to restrict or object to processing, the right to data portability, and the right to lodge a complaint with your local supervisory authority.
In Canada, we are subject to British Columbia's Personal Information Protection Act and, for information crossing provincial or national borders, to PIPEDA. You may complain to the Office of the Information and Privacy Commissioner for British Columbia or to the Office of the Privacy Commissioner of Canada. If you are in Quebec, you may complain to the Commission d'accès à l'information.
To exercise any of these rights, email info@serana.ai. We will respond within 30 days.
9. Changes to this policy
If we change how we handle personal information we will update this page and change the date above. If the change is significant we will ask for your consent again where the law requires it.