Privacy Policy

This privacy policy explains how Serverity AI Limited (“Serverity”, “we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use our legal operating system platform at www.serverity.ai (the “Service”).

Serverity is committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller responsible for your personal data is:

We process your personal data on the following legal bases:

• Contract performance (Article 6(1)(b) UK GDPR): Processing necessary to provide you with the Service under our Terms of Service, including account creation, subscription management, matter handling, document processing, and AI-assisted legal preparation.
• Legitimate interests (Article 6(1)(f) UK GDPR): Processing necessary for our legitimate interests, including improving the quality and reliability of our AI systems, platform security and fraud prevention, usage analytics, and customer support. We have conducted a legitimate interest assessment for each of these purposes and concluded that our interests do not override your fundamental rights and freedoms.

We collect and process the following categories of personal data:

4.1 Account Information

• Full name (from your Google account)
• Email address (from your Google account)
• Profile photograph (from your Google account)
• Google account identifier

4.2 Matter and Case Data

• Matter titles, descriptions, and metadata
• Documents uploaded to the platform (including PDFs, Word documents, and other file types)
• Chronologies, legal issues, and case analysis generated by the Service
• Notes, annotations, and other user-created content

4.3 AI Usage Data

• Prompts and queries submitted to AI features
• AI-generated responses and outputs
• Pipeline execution logs (which AI steps were run, duration, success/failure status)
• Token usage and model identifiers

4.4 Technical and Usage Data

• IP address
• Browser type and version
• Device information
• Pages visited, features used, and interaction patterns
• Referral source
• Session duration and timestamps

4.5 Billing Data

• Subscription plan and status
• Payment history (processed by Stripe; we do not store full card numbers)
• Invoices and billing address

We use your personal data to:

• Provide the Service: Create and manage your account, process your matters and documents, generate AI-assisted legal analysis, and deliver the features you use.
• Process payments: Manage your subscription, process payments through Stripe, and issue invoices.
• Improve AI quality: Analyse anonymised usage patterns to improve the accuracy, reliability, and safety of our AI systems. We do not use your case data to train AI models.
• Usage analytics: Understand how the platform is used to prioritise features, fix issues, and improve performance.
• Security: Detect and prevent fraud, abuse, and unauthorised access.
• Communication: Send you service-related notifications, updates to our terms or policies, and respond to support requests.

Serverity uses artificial intelligence to analyse documents, generate legal research, build chronologies, and assist with case preparation. When you use AI features:

• Anthropic Claude: Your documents and queries are processed by the Anthropic Claude API. Anthropic is a US-based data processor. We have Standard Contractual Clauses (SCCs) in place to govern the international transfer of data. Anthropic does not use your data to train its models when accessed via the API.
• OpenAI: We use OpenAI's embedding models solely for generating vector embeddings of your documents to enable semantic search functionality. OpenAI is a US-based processor with SCCs in place. OpenAI does not use API data to train its models.

AI-generated outputs are stored within your account and are accessible only to you (and, where applicable, members of your organisation with appropriate permissions).

All AI-generated content within the platform is clearly labelled as such so you can distinguish it from human-authored material.

Important: Serverity is a legal preparation and case management tool. It does not provide legal advice. AI outputs are intended to assist with legal research and preparation but should not be relied upon as a substitute for qualified legal counsel.

A full list of our sub-processors is available at serverity.ai/sub-processors.

We retain your data as follows:

Some of your data is transferred to and processed in countries outside the United Kingdom. We ensure appropriate safeguards are in place for each transfer:

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data, subject to our legal obligations to retain certain records. You can also delete your account and all associated data directly from your account settings.
• Right to data portability: You can request your data in a structured, commonly used, machine-readable format. You can export all your data directly from your account settings.
• Right to restrict processing: You can request that we limit how we process your data in certain circumstances.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights, please contact us at founder@serverity.ai. We will respond within one month of receiving your request.

We use cookies and similar technologies to keep you signed in and to understand how you use the Service. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

Serverity is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18, we will take steps to delete that data promptly.

We may update this privacy policy from time to time. If we make material changes, we will notify you by email at least 30 days before the changes take effect. The “last updated” date at the top of this page indicates when this policy was last revised.

If you have any questions about this privacy policy or how we handle your data, please contact us: