Privacy Policy for SerenAlign™

1. Our Commitment

SerenAlign™ is committed to protecting your privacy and operating in accordance with the Data Protection Act of Trinidad and Tobago (Chap. 22:04). We treat your biometric data as a temporary trust, not a permanent record.

2. Information We Collect

We only collect data necessary to format your identification documents:

• Biometric Images: Portrait photos and digital signatures for document formatting
• Technical Data: Basic browser information to ensure service compatibility
• Transaction Records: Payment details (processed securely through third-party payment gateways)
• Recovery Codes: 6-digit recovery codes are generated to allow document re-download within 90 minutes
• Email: Used for document recovery, transaction record keeping, customer support communications, and confirming redo coupon eligibility, where required to fulfill legal business obligations or respond to your requests.

2.5 Explicit Consent

By uploading a photo or signature to SerenAlign™, you provide your explicit consent for Savane Digital Solutions to process your biometric data solely for the purpose of formatting your documents, in accordance with this Privacy Policy.

If you do not agree to this processing, please do not upload any files.

3. The "90 Minute Vault" Policy

4. Security & Encryption

We implement industry-leading security measures:

• Encryption in Transit: All data is protected by TLS 1.3/SSL encryption
• On-Device Processing: On devices and browsers that support modern local processing capabilities (WebGPU), both portrait and signature background removal happen entirely on your own device. Your original image never leaves your device during this step — only the finished, formatted result is uploaded to our encrypted storage so you can download it within the 90 minute recovery window.
• Cloud Fallback Processing: On older or unsupported devices, portrait and signature background removal is processed via Modal, a cloud compute provider that runs our processing pipeline in a secure, access-controlled environment. Modal provides the infrastructure only, and does not access, retain, or use your images for any purpose of its own.
• Temporary Storage: Formatted documents are stored in an encrypted third-party database (Supabase) solely to enable the 90 minute recovery window.
• Secure Infrastructure: We utilize Supabase for encrypted data storage and Modal for cloud-based fallback image processing, all operating under SOC2-compliant or equivalent security standards. These providers do not have permission to access or use your data for any purpose beyond running our processing code.

5. International Data Storage

• Server Location: Data is temporarily stored on servers located in the United States
• Service Providers: We use Hostinger (hosting), Supabase (encrypted database storage), and Modal (cloud-based fallback image processing infrastructure), which maintain US-based or EU-based data centers with high-security compliance standards
• Safeguards: These providers adhere to security standards comparable to those required under Trinidad & Tobago law
• Your Protection: Despite international storage, our 90 minute Vault policy applies — all data is purged within 90 minutes regardless of location.
• We do not sell, lease, or commercially exploit any data stored internationally.

6. Your Rights Under Trinidad & Tobago Law

Under the Data Protection Act (Chap. 22:04), you have:

• Right to Consent: We only process data with your explicit permission
• Right to Erasure: Built into our system — automatic deletion within 90 minutes
• Right to Access: Contact us within the 90 minute window to request information about your data. Requests may be subject to identity verification to protect user privacy.
• Right to Withdraw Consent: You may choose not to upload files at any time

7. Children's Privacy

• Parental Consent Required: SerenAlign™ is intended for use by adults (18+) or by parents/legal guardians on behalf of minors
• School ID Documents: We recognize that parents may upload photos of children for school identification purposes
• Same Protections Apply: Children's biometric data receives the same security protections and 90 minute automatic deletion as adult data
• Parental Responsibility: By uploading a child's photo, you confirm that you are the parent or legal guardian with authority to provide this information
• No Profiling: We do not create profiles, track behavior, or use children's data for any purpose beyond document formatting
• Under 13: We do not knowingly collect data from children under 13 without verified parental consent. If you believe we have inadvertently collected such data, please contact us immediately for deletion

8. Payment Processing

• Third-Party Gateway: Payments are processed through WiPay, a PCI-DSS compliant payment processor
• Data We Receive: We only receive transaction confirmation — your credit card details are never stored on our servers
• Payment Records: Transaction IDs are retained for accounting and refund purposes only

9. Cookies & Tracking

• Local Storage: We use browser local storage solely to retain your package and document type preferences during your session, and to manage processing attempt limits.
• Session Storage: We use session storage to temporarily hold your email address, recovery code, and session state during your active browser session. This data is automatically cleared when you close your browser tab.
• Privacy-Friendly Analytics: We use PostHog Analytics to understand general usage patterns and improve performance. This includes anonymised events such as page visits and feature interactions. No personally identifiable information is collected through analytics, and this data is never used for advertising purposes.
• No Third-Party Cookies: We do not share data with advertising networks

10. How We Use Your Data

We use your information solely to:

• Format your photos and signatures to official specifications
• Process your payment securely
• Provide you with a recovery code for document re-download
• Respond to support requests and confirm redo coupon eligibility
• Comply with legal obligations (tax records, transaction logs)

We never:

• Sell your data to third parties
• Use your images for advertising or marketing
• Share your biometric data with other companies
• Retain your images beyond the 90 minute window

11. Document Type Limitations

SerenAlign™ supports photo and signature formatting for Driver's Permits (Class 1 & 3), Learner's Permits, School ID photos, and Company ID photos, formatted to the relevant official specifications. For Driver's Permit photos, formatting and sizing to specification is provided, but automated background removal is not currently offered for this document type. SerenAlign™ is not used for Trinidad and Tobago passport photos, which are taken directly at the Immigration office. Please see our FAQ for the most current list of supported document types and features.

12. Data Retention

• Formatted Documents: Deleted automatically within 90 minutes
• Recovery Codes: Expire after 90 minutes and become unusable
• Transaction Records: Retained for 7 years for tax compliance purposes (amount, date, email, transaction ID only — no biometric data)
• Redo Coupons: Linked to your email address, valid for 7 days from issuance, then automatically invalidated. Your email is retained solely to validate redo eligibility within this window.

13. Changes to This Policy

We will notify users of any material changes by updating the "Effective Date" at the top of this policy. Continued use of SerenAlign™ after changes constitutes acceptance of the updated policy.

14. Contact Us

Savane Digital Solutions

Email: hello@serenalign.com
Phone: +1 (868) 283-1169
Location: Couva, Trinidad and Tobago

Your Privacy Matters

At SerenAlign™, we believe privacy is a fundamental right. Our entire system is designed around the principle of data minimization — we collect only what we need and delete it as soon as possible. If you have any concerns or questions about how your data is handled, please don't hesitate to contact us.