Privacy Policy

Seraphim Consulting ("Seraphim Consulting," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (seraphim-consulting.com and any subdomains, collectively the "Site"), engage our marketing services, communicate with us, or otherwise interact with us (collectively, the "Services").

By using the Site or our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Site or our Services.

We collect information in the following ways:

a. Information You Provide Directly

• Contact details (name, business name, email, phone number, mailing address).
• Account credentials when you register for a client portal or admin dashboard.
• Project details, marketing assets, brand materials, and business goals shared during onboarding.
• Billing and payment information (processed by third-party payment processors—we do not store full card numbers).
• Content you submit through forms, chat, SEO audits, voice assistants, or email correspondence.

b. Information Collected Automatically

• Device and browser information (IP address, browser type, operating system, device identifiers).
• Usage data (pages viewed, time on page, referring URLs, click events, conversion events).
• Cookies, web beacons, pixels, and similar tracking technologies (see Section 7).
• Analytics data via Google Analytics (GA4), Google Tag Manager, Meta Pixel, and similar tools.

c. Information from Third Parties

• Advertising platforms (Google Ads, Meta, Yelp, LinkedIn) when you interact with our campaigns.
• CRM and automation integrations authorized by you or our clients.
• Publicly available business information used for outreach and audits.

d. Client End-User Data

When we operate marketing campaigns, websites, CRMs, or AI voice assistants on behalf of our clients, we may process data belonging to our clients' end users as a service provider or data processor. In those cases, our client is the data controller and their privacy policy governs the collection and use of that data.

We use the information we collect to:

• Provide, operate, maintain, and improve our Site and Services.
• Respond to inquiries, provide quotes, and fulfill requested services.
• Manage client accounts, billing, contracts, and project communications.
• Run, measure, and optimize advertising campaigns on behalf of clients.
• Personalize content, recommendations, and marketing.
• Send transactional emails, service updates, and promotional messages (you may opt out at any time).
• Detect, prevent, and address fraud, security, or technical issues.
• Comply with legal obligations, enforce our Terms, and protect our rights.

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Contract: to deliver the Services you request.
• Legitimate interests: to operate, secure, and improve our business in a manner you would reasonably expect.
• Consent: for marketing communications, non-essential cookies, and certain analytics.
• Legal obligation: to comply with applicable laws and regulations.

We do not sell your personal information. We share information only as follows:

• Service providers / sub-processors: hosting, analytics, email delivery, CRM, payment processing, AI providers, ad platforms, and similar vendors bound by confidentiality and data-protection obligations.
• Advertising partners: Google, Meta, Yelp, LinkedIn, and similar networks for campaign measurement and optimization on behalf of clients.
• Professional advisors: attorneys, accountants, and auditors as needed.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets.
• Legal compliance: when required by law, subpoena, court order, or to protect rights, property, or safety.
• With your consent: for any other purpose disclosed at the time of collection.

Our Services include AI-powered features such as chatbots, voice assistants, content generation, and automated SEO audits. When you interact with these tools:

• Inputs (text, audio transcripts, uploaded materials) may be transmitted to third-party AI providers (e.g., Lovable AI Gateway, OpenAI, Google, Anthropic, ElevenLabs) under their respective data-processing terms.
• Voice calls handled by AI assistants may be recorded and transcribed for quality, training, and service-delivery purposes. Where required by law, we will notify callers and obtain consent.
• We do not use your confidential business data to train publicly available foundation models without explicit permission.

We use cookies and similar technologies (pixels, local storage, SDKs) to operate the Site, remember preferences, measure performance, and deliver relevant marketing. Cookie categories include:

• Strictly necessary: required for core functionality.
• Analytics: Google Analytics 4 (G-9WLSYYQVJC) and similar tools.
• Advertising: Meta Pixel, Google Ads conversion tags, LinkedIn Insight Tag.
• Functional: remember preferences such as form data and chat sessions.

You can control cookies through your browser settings, opt out of Google Analytics via the Google Analytics Opt-out Browser Add-on, and adjust ad personalization on Google and Meta. See our Cookie Policy for further detail.

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Specifically:

• Active client and prospect records: duration of the relationship plus up to 7 years for tax and legal purposes.
• Marketing analytics data: typically up to 26 months.
• Voice and chat transcripts: up to 12 months unless a longer period is required by client contract or law.
• Backup copies may persist for a limited additional period as part of our disaster-recovery process.

We implement administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, encryption at rest for stored credentials, role-based access controls, multi-factor authentication for administrative accounts, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but will promptly notify affected users of any confirmed data breach as required by applicable law.

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete personal information we hold about you.
• Object to or restrict certain processing.
• Withdraw consent at any time (without affecting prior lawful processing).
• Receive a portable copy of your data.
• Opt out of targeted advertising, "sale" or "sharing" of personal information (CCPA/CPRA), and certain profiling.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us using the details in Section 15. We will verify your identity before fulfilling the request and respond within the timeframes required by law.

In the past 12 months we have collected the categories of personal information described in Section 2 for the business purposes described in Section 3. We do not sell personal information for monetary value. Some sharing of online identifiers with advertising partners may qualify as "sharing" for cross-context behavioral advertising under the CPRA—you may opt out via the "Do Not Sell or Share My Personal Information" link in the Site footer or by emailing us. We honor Global Privacy Control (GPC) signals where required.

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can delete it.

We are based in the United States. If you access the Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

The Site and certain Services may link to third-party sites, plugins, or applications. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing information with them.

For questions, concerns, or to exercise your privacy rights, contact us at:

• Seraphim Consulting
• Email: admin@seraphimconsulting.org
• Phone: (636) 538-5606

We may update this Privacy Policy from time to time. Material changes will be posted to this page with a revised "Last Updated" date and, where appropriate, communicated by email or in-product notice. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.