Privacy Policy

1. Who We Are

SerOutro(“we”, “our”, “us”) is an AI-powered English learning platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service.

This policy complies with the General Data Protection Regulation (GDPR), the Brazilian Lei Geral de Proteção de Dados (LGPD — Lei nº 13.709/2018), and other applicable privacy laws.

2. Data We Collect

We collect the following categories of personal data:

• Account data: name and email address provided when you sign up via Clerk.
• Usage data: conversations, scenario progress, XP history, and learning preferences (such as whether to show grammar corrections).
• Technical data: IP address, browser type, and session identifiers collected automatically for security and performance purposes.

We do not collect payment information. We do not sell your data to third parties.

3. How We Use Your Data

• To provide and personalise the SerOutro learning experience.
• To track your progress and calculate XP and level.
• To generate AI responses adapted to your conversation context.
• To communicate important service updates via email.
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR / LGPD)

• Contract performance: processing necessary to deliver the service you signed up for.
• Legitimate interest: improving platform features and ensuring security.
• Consent: for optional communications (you may opt out at any time).

5. Third-Party Services

We use the following third-party providers to operate SerOutro:

• Clerk — authentication and user account management. Their privacy policy is available at clerk.com/privacy.
• DeepSeek— AI language model used to generate conversation responses. Messages you send during conversations are processed by DeepSeek's API.

We only share the minimum data required with each provider and require them to protect your information in accordance with applicable law.

6. Data Retention

We retain your account and learning data for as long as your account is active. If you delete your account, your personal data will be removed within 30 days, except where we are required to retain it by law.

7. Your Rights

Under GDPR and LGPD you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”).
• Restrict or object to certain types of processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, please contact us at the address below. We will respond within 15 business days.

8. Cookies

SerOutro uses essential session cookies required for authentication. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, but this may prevent you from signing in.

9. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), JWT-based authentication, and access controls. No method of transmission over the internet is 100% secure; we encourage you to use a strong password and keep your credentials private.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice in the application. Continued use of SerOutroafter changes take effect constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, data requests, or to report a concern, please contact us at our contact page or directly by email at privacy@seroutro.com.br.