Privacy policy

Last updated October 12, 2026

What we store

Your name, email, password hash, organization membership, the VPN servers you create, and the connection credentials we generate for them. Server and client secrets are encrypted at rest. For managed servers we store the cloud provider, its VM id, the region, size and public IP.

What we do not store

We do not log the websites you visit or the content of your traffic. Server agents report only connection health: last handshake time and byte counters per connection, used for the dashboard.

Mobile apps

The Android app uses Android's VpnService to send your device's traffic, or only LAN traffic for internal servers, encrypted to the Seridian server you choose. The app does not inspect, log, redirect or modify that traffic, show ads, or use it for tracking. It stores your sign-in token and the last connection you used on the device so the VPN can reconnect, and it has no analytics or advertising SDKs.

Processors

Convex (application database), DigitalOcean, Hetzner and Vultr (managed servers, whichever you choose), Stripe (billing), Resend (password reset email) and Netlify (web hosting).

Deletion

Deleting a server destroys its managed VM and removes its credentials. To delete your account and organization, email privacy@seridian.dev.