Last updated · October 18, 2026
Privacy policy
Who is responsible and what this policy covers
Serulan, Inc., a Delaware corporation (“Serulan”), is responsible for the personal information described in this policy. This policy covers serulan.com, website inquiry forms, and related correspondence about products, evaluations and career opportunities. Separate notices may apply to product use, customer projects or employment.
For privacy questions, requests or complaints, email feedback@serulan.com.
Information Serulan collects
When you submit an inquiry form, Serulan collects your name, email address and selected interest: launch updates, an early evaluation or career opportunities. You may also provide your phone number, company, country and a message. Career inquiries may include an optional PDF résumé of up to 10 MB, including the employment, education and other information you choose to include. Serulan keeps related correspondence and records of consent choices and privacy requests.
Name and email are required to submit the form so Serulan can identify and respond to your inquiry. Other contact fields and your résumé are optional. You can browse without submitting a form. Please send only relevant information and avoid government identifiers, financial or health information, and unnecessary personal information about others.
Do not submit classified information, Controlled Unclassified Information (CUI), export-controlled technical data, or confidential or proprietary materials through website forms. Contact Serulan first to discuss an appropriate, authorized channel for any materials requiring special handling.
Hosting and security providers may receive technical information such as IP addresses, browser and device information, request times and security signals. Optional analytics is described below.
How Serulan uses information
Serulan uses information to answer inquiries, discuss evaluations, consider career interest or applications, maintain related records, detect and prevent fraud, abuse and security incidents, and meet applicable legal obligations.
Serulan sends launch and product updates only when you separately opt in. Selecting “launch updates” as your interest or sending an inquiry does not, by itself, subscribe you. You can unsubscribe using the instructions in an email or by emailing feedback@serulan.com.
Where the EU GDPR or UK GDPR applies, Serulan relies on consent for optional analytics, launch updates and any separately agreed talent pool; steps you request before a contract where relevant to an evaluation or application; and legitimate interests in answering inquiries, managing business relationships, considering unsolicited career interest, keeping appropriate records and protecting the website, balanced against your rights. Serulan also processes information to meet applicable legal obligations. These bases do not replace consent or other requirements under other applicable laws.
AI assistance and human review
Serulan may use AI tools to prepare factual summaries of inquiries or applications. A person reviews the original materials when considering the inquiry or application. Serulan does not use AI to score or rank applicants, recommend suitability or rejection, or make hiring decisions. Serulan does not make decisions with legal or similarly significant effects based solely on automated processing.
Who receives information
Access within Serulan is limited to authorized people who need the information for the purposes above. Service providers help host the website, process forms and uploaded files, operate business email, prevent abuse and, where used, provide analytics and AI assistance. For example, Google Workspace provides business email. Google Analytics is described below. You can email feedback@serulan.com for information about the providers relevant to your information.
Cloudflare Turnstile helps distinguish visitors from bots. It processes technical signals and may use them to improve bot detection as explained in Cloudflare’s Turnstile Privacy Addendum.
Cloudflare Turnstile Privacy Addendum
Serulan may disclose relevant information to professional advisers or authorities where necessary and lawful, including to comply with legal requirements or establish, exercise or defend legal claims.
For a proposed or completed financing, merger, acquisition, reorganization or sale of all or part of its business or assets, Serulan may disclose relevant information to prospective or actual counterparties and their advisers on a need-to-know basis, subject to appropriate confidentiality and use restrictions. Information may be transferred as part of a completed transaction, subject to applicable law.
Optional analytics and device storage
Google Analytics loads only after you allow analytics. It helps Serulan understand traffic and improve the website by measuring page visits, permitted campaign labels, referral sources, broad location, browser and device information, and clicks on the three interest buttons and links to Serulan’s LinkedIn page, plus valid form submission attempts. It uses pseudonymous cookie identifiers. Interest-button clicks are not records of completed inquiries, LinkedIn clicks do not confirm a follow, and submission attempts do not confirm provider receipt or email delivery. Serulan does not send form answers, names, email addresses, messages, résumé contents or filenames to Google Analytics. Google Signals and advertising personalization are disabled.
Rejecting analytics does not prevent use of the website or forms. You can change your choice through “Analytics settings” in the website footer. Withdrawal stops future measurement on that browser and removes analytics cookies accessible to the site; it does not automatically erase information already collected. Your choice is stored on your device for up to 180 days. Analytics cookies are configured to expire after 90 days without automatic renewal on each visit.
Google may process analytics information internationally. Its explanation below describes how information is used and the controls Google provides. Hosting and security services may still process technical information when analytics is off.
How Google uses information from sites or apps that use its services
The website does not respond separately to browser Do Not Track signals; use the analytics controls described above. Global Privacy Control is a different signal. Where applicable law requires recognition of a valid opt-out preference signal, including Global Privacy Control, Serulan will honor it for the processing covered by that law.
International processing
Serulan is a United States company. Service providers may process information in the United States and other countries outside your country of residence, where privacy laws may differ. You can email feedback@serulan.com for information about relevant processing locations and any safeguards that apply to your information.
How long Serulan keeps information
The following default periods apply unless a longer period is required by applicable recordkeeping law or necessary to establish, exercise or defend legal claims:
- General inquiries: 12 months after the last substantive exchange about the inquiry. Automated messages, analytics events and routine marketing emails do not restart this period.
- Unsuccessful applications: 12 months after the recruitment process closes, except where applicable employment recordkeeping requirements require longer retention. Those required periods take precedence over this default.
- Optional talent pool: if you separately agree to be considered for future opportunities, 12 months, renewable only with your consent. Any application records that must be retained by law remain subject to the preceding rule.
- Launch and product updates: until you unsubscribe, with periodic cleanup of inactive contacts.
Serulan may keep a minimal record of an opt-out to respect it. Technical, security, consent and privacy-request records are kept for as long as needed for their purpose and applicable legal requirements.
Your choices and rights
Email feedback@serulan.com to ask about the use of your information or exercise applicable rights. Depending on the law that applies, these may include access, correction, deletion, restriction of processing, objection to processing, receipt or transfer of a portable copy, withdrawal of consent, an opt-out of sale or sharing for cross-context behavioral or targeted advertising, and an appeal of a decision on your request.
Serulan may ask for proportionate information to verify your identity and will respond within the applicable legal period. Where the law permits an authorized agent to act for you, the agent may contact the same email address. Serulan may request evidence of authority and any identity verification permitted by law. Exceptions may limit a request, and Serulan will explain any applicable limitation. Withdrawing consent does not affect earlier lawful processing. Serulan will not discriminate against you for exercising applicable privacy rights.
Where the EU GDPR or UK GDPR applies, you may object to processing based on legitimate interests because of your particular situation and to direct marketing at any time. You may complain to the relevant privacy regulator, including a competent EEA data protection authority or the UK Information Commissioner’s Office. You do not have to contact Serulan first. Rights and complaint routes in other jurisdictions depend on applicable law.
Children
The website is intended for an adult professional audience and is not directed to children. If you believe a child has submitted personal information, contact feedback@serulan.com so Serulan can review and address it.
Security and policy changes
Serulan uses access restrictions and account security protections for information it holds. No online system is completely secure. Please email feedback@serulan.com if you believe your information has been used or disclosed improperly.
Serulan updates this policy when its practices change and revises the policy date. For material changes, Serulan will provide additional notice or obtain consent where required by law.