Privacy Policy

Overview

Sere, Inc. ("Sere," "we," "our," or "us") operates getsere.com and associated services. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what choices you have. By using our website or services, you agree to the practices described here.

We are not a traditional e-commerce company. We handle health-related information, and we take that responsibility seriously. We do not sell your personal information. We do not share your medical information for advertising purposes.

Information we collect

Information you provide directly:

• Waitlist registration: your email address, and optionally your name and state of residence.
• Contact form submissions: your name, email address, and the content of your message.
• Clinical intake (when live): date of birth, sex, state of residence, weight, symptom description and duration, treatment history, relevant medical history, current medications, and any other information required for a clinician to evaluate your suitability for treatment.
• Account information (when live): email address, name, shipping address, and payment method (processed by a third-party payment provider; we do not store full card numbers).

Information collected automatically:

• Browser type and version, operating system, device type
• IP address and general geographic location (city/region level)
• Pages visited, time spent on pages, referral source, and clicks
• Cookies and similar tracking technologies (see Cookies section below)

How we use your information

We use the information we collect to:

• Send waitlist notifications and launch communications to people who have signed up
• Respond to contact form submissions and support requests
• Facilitate clinical intake review by licensed clinicians
• Fulfill and ship prescription orders (when live)
• Process payments and manage subscriptions
• Comply with legal obligations, including healthcare regulations
• Improve our website and services through aggregated, anonymized analytics
• Protect the security and integrity of our platform

We do not use your health information to serve you advertisements, on our platform or anywhere else.

HIPAA & health information

When you submit a clinical intake on Sere, you are providing protected health information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). Sere operates as a HIPAA-covered entity in connection with its clinical services and treats all PHI accordingly.

This means:

• Your PHI is stored using HIPAA-compliant infrastructure and encryption at rest and in transit.
• Access to your PHI is limited to the licensed clinicians reviewing your intake, our pharmacy partner fulfilling your prescription, and Sere personnel with a need to know.
• We maintain a Notice of Privacy Practices (NPP) that describes your rights under HIPAA, provided at the time of intake.
• We enter into Business Associate Agreements (BAAs) with all vendors who handle PHI on our behalf.
• Your PHI is never sold, rented, or shared for marketing purposes.

Your email address and waitlist registration data are not considered PHI and are handled under the general terms of this policy.

How we share information

We share your information only in limited circumstances:

• Licensed clinicians: the clinician reviewing your intake receives your intake information to make a clinical determination.
• Compounding pharmacy partner: if you are approved for treatment, your prescription and shipping information are sent to our pharmacy partner for fulfillment.
• Payment processor: payment card information is transmitted directly to our payment processor (such as Stripe) and is not stored on Sere's servers.
• Service providers: we use third-party vendors for hosting, email delivery, analytics, and customer support, each bound by confidentiality agreements and, where applicable, BAAs.
• Legal requirements: we may disclose information if required by law, court order, or government authority, or to protect the rights, safety, or property of Sere or others.
• Business transfers: if Sere is acquired or merges with another company, your information may be transferred as part of that transaction, subject to the same protections described here.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

Cookies & analytics

Our website uses cookies and similar technologies to understand how visitors use the site and to improve your experience.

• Essential cookies: required for the site to function (e.g., form state, session management). These cannot be disabled.
• Analytics cookies: we use Google Analytics to collect aggregated, anonymized data about page visits and user behavior. Google Analytics uses cookies to track sessions. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

We do not use third-party advertising cookies or behavioral tracking cookies. You can control cookie settings through your browser preferences, though disabling certain cookies may affect site functionality.

Data retention

We retain your information for as long as necessary to provide you with services and comply with our legal obligations:

• Waitlist email addresses: retained until you unsubscribe or request deletion.
• Contact form submissions: retained for up to 24 months for support and communication purposes.
• Clinical records: retained for a minimum of seven years from the date of last service, as required by applicable healthcare regulations.
• Payment records: retained as required by tax and financial regulations, typically seven years.

You may request deletion of your personal information at any time (see Your Rights below), subject to our legal obligations to retain certain records.

Your rights

Depending on your state of residence, you may have the following rights with respect to your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate information.
• Deletion: request that we delete your personal information, subject to legal retention requirements.
• Portability: request your data in a portable format.
• Opt-out: unsubscribe from marketing communications at any time using the unsubscribe link in any email or by contacting us directly.
• HIPAA rights: patients have additional rights under HIPAA, including the right to access, amend, and receive an accounting of disclosures of your PHI, as described in our Notice of Privacy Practices.

To exercise any of these rights, contact us at privacy@getsere.com. We will respond within 30 days.

Security

We take the security of your information seriously. Our measures include:

• TLS encryption for all data in transit between your browser and our servers
• Encryption at rest for all stored personal and health information
• Access controls limiting PHI to authorized personnel only
• Regular security assessments and vulnerability reviews
• Business Associate Agreements with all vendors handling PHI

No system is perfectly secure. If you believe your information has been compromised, contact us immediately at privacy@getsere.com.

Minors

Sere's services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a minor, we will delete it promptly. If you believe a minor has submitted information to us, contact us at privacy@getsere.com.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or practices. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered users by email. Your continued use of the site after changes are posted constitutes your acceptance of the updated policy.

Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

Sere, Inc.
Privacy inquiries: privacy@getsere.com
General: hello@getsere.com
Contact form