Privacy Policy

Who We Are

Seracade is operated by Seracade. The Service is an LLM cost optimization proxy available at seracade.com. For privacy inquiries, contact alex@seracade.com.

Data We Collect

The data Seracade collects depends on which product you use.

B2B Proxy (BYOK mode):

• API call metadata: Model name, token count (input/output), estimated cost, latency, timestamp, provider, HTTP status code.
• Request and response bodies: Full request payloads and response payloads are logged for audit replay. This includes prompts and completions sent through the proxy.
• Customer identifier: A SHA-256 hash of your Authorization header. The raw API key is never stored.
• Email address: If you provide one for report delivery.

Seracade Chat (seracade.com/chat):

• Conversation content: Stored exclusively in your browser's localStorage. Seracade does not store your chat messages server-side.
• Usage statistics: Total cost, message count, and model usage are tracked server-side for billing and balance management.
• Payment information: Processed by Stripe. Seracade does not store credit card numbers or payment credentials.

How We Use Your Data

• Audit and replay: Logged requests are replayed against alternative models to calculate potential cost savings.
• Report generation: Metadata is aggregated into savings reports delivered to your email.
• Billing: Usage data is used to calculate charges based on the 15% savings delta pricing model.
• Service operation: Chat usage stats are used to manage credit balances and prevent abuse.

We do not use your data for model training, advertising, or any purpose other than operating the Service.

Data Retention

All Cloudflare KV data with a TTL is deleted automatically upon expiration. No manual intervention is required and no backups are retained.

Data Sharing

Seracade does not sell, rent, or share your data with third parties for marketing or advertising purposes. Data is shared only with the following service providers, strictly for operating the Service:

• Cloudflare: Infrastructure provider. All proxy traffic, KV storage, and compute run on Cloudflare Workers. Cloudflare is SOC 2 Type II certified.
• Stripe: Payment processing for Chat credits and B2B billing. Seracade shares only the minimum data required to process payments.
• LLM Providers (OpenAI, Anthropic, Google, etc.): In BYOK mode, your requests are forwarded to the provider you specify using your API key. In Chat mode, requests are routed via OpenRouter using Seracade's API key.
• AI Agent Tooling (Anthropic Claude): Seracade uses AI agent assistance for internal operations, quality assurance, and system diagnostics. These agents operate on aggregated, non-personally-identifiable system metrics only. No raw customer data, email addresses, or request/response content is accessible to or processed by these agents.

Cookies & Tracking

Seracade does not use cookies. There are no third-party analytics scripts, tracking pixels, or advertising beacons on any Seracade page. The only client-side storage used is browser localStorage for the following purposes:

• Chat conversation history (Seracade Chat only).
• Theme preference (light/dark mode).

Infrastructure & Security

• All data in transit is encrypted via TLS 1.3 (Cloudflare edge).
• All data at rest in Cloudflare KV is encrypted.
• The proxy runs on Cloudflare Workers with no persistent server infrastructure.
• No data is stored on AWS, GCP, Azure, or any other cloud provider.
• See the Security Overview for the full technical breakdown.

Your Rights

You have the following rights regarding your data:

• Deletion: You can request deletion of all your data by emailing alex@seracade.com. Requests are processed within 7 business days.
• Access: You can request a copy of the data Seracade holds about you by emailing the same address.
• Chat data: Your chat conversations are stored locally. Clear your browser's localStorage to delete them. No server-side action is needed.
• Opt out: You can stop using the Service at any time by removing the proxy configuration. Existing data will expire according to the retention schedule above.

Children's Privacy

Seracade is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided data to Seracade, contact alex@seracade.com and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions

For questions about this Privacy Policy, contact alex@seracade.com.