Privacy notice

Last updated 12 October 2026.

1. Who is responsible

The controller of your personal data is SeroState, privacy@serostate.com.

2. What we collect on this website

  • Contact and demo requests. Whatever you include when you email partner@serostate.com (typically your name, work email, organisation and message).
  • Analytics. How you use the site, collected by Google Analytics 4 and Microsoft Clarity. These tools load only after you accept analytics in the consent bar.
  • Technical data. Your IP address, browser type and request logs, which are needed to deliver the site and keep it secure.

Please do not send health information about anyone in an enquiry email.

3. Health-related data in demos and pilots

Wearable and voice data from a session are health-related data under Article 9 of the GDPR. We process them only with the explicit consent of the person concerned, under Article 9(2)(a) GDPR. We collect them only for the purpose agreed in writing before any recording.

You can withdraw consent at any time. Withdrawal does not affect processing that took place before it.

In a pilot, the partner organisation may be the controller and SeroState its processor. The pilot agreement states which.

We design pilots so that raw audio is not kept once the voice features needed for the analysis have been extracted.

4. Why we process your data, and on what legal basis

Replying to demo requests and enquiriesSteps before a possible contract, Art. 6(1)(b) GDPR, or our legitimate interest in answering you, Art. 6(1)(f) GDPR
Website analyticsYour consent, Art. 6(1)(a) GDPR
Delivering the website and keeping it secureOur legitimate interest in a working, secure site, Art. 6(1)(f) GDPR
Post-session arousal analytics in demos and pilotsYour explicit consent, Art. 9(2)(a) GDPR

We do not sell personal data. We do not use it for advertising.

5. How long we keep data

Contact and demo enquiries24 months after our last contact with you, then deleted
Session data in pilotsDeleted or anonymised within 30 days of the end of the pilot, or sooner if the pilot contract says so
Analytics cookies13 months at most
Server logs30 days

6. Who processes data for us

We use these service providers. Each processes data only on our instructions.

  • Cloudflare, for hosting, content delivery and website security
  • Google Analytics 4, for website analytics, only after your consent
  • Microsoft Clarity, for website analytics, only after your consent
  • Our email provider, for receiving and answering messages

Where personal data leaves the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses.

7. Your rights

You have the right to access your data and receive a copy, have inaccurate data corrected, have your data deleted, restrict how we process it, receive your data in a portable format, object to processing based on our legitimate interest, and withdraw your consent at any time.

To use any of these rights, write to privacy@serostate.com. We reply within one month.

You can also complain to a data protection supervisory authority, in particular in the country where you live or work, or where you believe a breach took place.

8. Cookies and analytics

Analytics cookies are set only after you accept them. You can change your choice at any time through the Privacy settings link in the footer.

9. Children

This website and SeroState’s services are not aimed at children. We do not knowingly collect data from children.

10. Changes

We will update this notice when our processing changes. The date at the top shows the latest version.