Last updated: March 2026 | Governing law: Singapore | Entity: SERESA PTE. LTD.
1. Introduction
SERESA PTE. LTD. (“Seresa”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our website, services, and products, including the inPIPE WordPress plugin and Transmute Engine (collectively, the “Services”).
Please read this Privacy Policy carefully. If you do not agree with these terms, please do not access our Services.
Important distinction: This Privacy Policy covers information Seresa collects about you as a client — account data, billing information, and usage metrics. It does not govern the data that your website visitors generate through your use of our infrastructure. That data is yours. You are the data controller for your visitors’ data. We do not access it.
2. Information we collect about you as a client
2.1 Information you provide
We collect information you voluntarily provide when you:
- Register for an account
- Purchase a subscription
- Contact our support team
- Submit forms on our website
This may include:
- Name and contact information
- Billing information
- Website URL(s) and domain details
- Login credentials for your account
2.2 Subscription and technical verification data
When you use our inPIPE WordPress plugin, we collect the minimum data necessary for service delivery:
For subscription verification:
- Subscription code entered by you
- Your WordPress site URL
- WordPress version information
For premium package installation:
- Verified subscription code
- Your WordPress site URL
- WordPress and PHP version information
2.3 System performance metrics
For premium subscribers using the Transmute Engine, we collect only:
- Aggregated event volume (input and output counts)
- System performance metrics (latency, error rates)
- No event content, no visitor data, no PII from your website visitors
2.4 Technical information about your visits to seresa.io
We may automatically collect certain information when you visit our website, including:
- IP address
- Browser type and version
- Operating system
- Page views and navigation patterns
- Referring website
- Time and date of visits
3. How we use your information
We use the information we collect to:
- Provide, maintain, and improve our Services
- Process transactions and send related information
- Verify subscription validity and manage your account
- Provide customer support
- Send administrative information, updates, and security alerts
- Monitor system performance and ensure proper operation
- Prevent fraudulent use of our Services
- Comply with legal obligations
4. Your data vs. your visitors’ data
4.1 You are the data controller for your visitors
When you use Seresa infrastructure to collect data from your website visitors, you are the data controller for that visitor data. You determine what is collected, why, and how it is used. Seresa has no access to this data.
4.2 Seresa’s infrastructure role
Seresa operates sealed data infrastructure. Your visitor event data passes through the Transmute Engine in a closed environment that Seresa personnel cannot access. We are not a data processor under GDPR or Singapore’s PDPA with respect to your visitor data — we are an infrastructure provider.
4.3 Your compliance obligations
As data controller, you are responsible for:
- Ensuring you have a valid lawful basis for collecting your visitors’ data
- Providing appropriate privacy notices to your visitors
- Obtaining any consent required by applicable law in your jurisdiction
- Ensuring your use of Seresa infrastructure complies with applicable data protection law
5. Transmute Engine data handling
For premium subscribers:
- Sealed processing: The Transmute Engine operates as a first-party server to your website, processing events server-side in a sealed environment before forwarding them to your configured endpoints (outPIPEs)
- No permanent storage: Transmute Engine does not permanently store your event data
- Temporary retention only: In the event of a third-party service outage, event data may be temporarily retained for up to 48 hours to ensure successful delivery once service resumes
- No staff access: Seresa engineers and staff have no access to actual event data processed by Transmute Engine — only to aggregated system metrics
- Your credentials: API credentials and keys for third-party connections are held in your admin dashboard under your control
- Data ownership: All data processed through Transmute Engine remains your property and under your control
6. Sharing of your information
We do not sell your personal information. We may share your information only in the following limited circumstances:
6.1 Service providers
We may share your account and billing information with third-party vendors who perform services on our behalf (e.g. payment processing, hosting). These parties are contractually obligated to use your information only as necessary to provide services to us.
6.2 Business transfers
If SERESA PTE. LTD. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
6.3 Legal requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g. a court or government agency).
7. Data security
We have implemented appropriate technical and organisational measures to protect your information from unauthorised access, use, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Data retention
We retain your account and billing information for as long as your account is active or as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. System performance metrics are retained for operational monitoring purposes and periodically purged.
9. Your rights
Depending on your location, you may have rights regarding your personal information, including:
- The right to access your personal information
- The right to correct inaccurate information
- The right to request deletion of your information
- The right to restrict or object to processing
- The right to data portability
- The right to withdraw consent where processing is based on consent
To exercise these rights, please contact us using the details in Section 13 below.
10. International data transfers
Your information may be transferred to and processed in countries other than your country of residence, including Singapore where SERESA PTE. LTD. is incorporated. Singapore’s Personal Data Protection Act (PDPA) governs our data handling obligations. Where data is transferred internationally, we take appropriate steps to ensure adequate protection in accordance with applicable law.
11. Children’s privacy
Our Services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to remove that information.
12. Changes to this privacy policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date at the top of this page. We encourage you to review this Privacy Policy periodically. Continued use of our Services after changes take effect constitutes your acceptance of the revised policy.
13. Contact us
If you have any questions or concerns about this Privacy Policy or how we handle your information, please contact us at:
Website: https://seresa.io/support
Email:
Registered entity: SERESA PTE. LTD., Singapore
14. Data protection contact
For data protection matters, our designated contact can be reached at:
Email:
Entity: SERESA PTE. LTD., Singapore