Sereane is published by Benjamin Pierre Alain GILLET, a sole trader (entrepreneur individuel) registered under SIREN number 928 700 772, established at 1 Lieu-dit La Basque, 33420 Jugazan, France.
Contact for any question about privacy or to exercise your rights: admin@sereane.com.
Sereane processes only the information necessary for the service to operate:
- Account and authentication: email address, account identifier, role, subscription status, sign-in events and session tokens.
- Google OAuth: the email address and technical identifiers returned by Google to sign you in. Sereane never receives your Google password.
- Etsy shops: shop identifiers and names, orders, references, products, variations, amounts, buyers, delivery addresses where fulfilling an order requires them, after-sales messages, and shipping or tracking information.
- AliExpress: account and product identifiers, variations, prices, orders, payment states declared by the user, carriers and tracking needed to reconcile with Etsy.
- Sereane payment: plan, subscription status, invoice references, Stripe identifiers and billing event history. Full card details are collected and held by Stripe, not by Sereane.
- Support and security: exchanges with the team, diagnostics, technical logs, IP address and browser or device information where needed for security and troubleshooting.
- Free tools on sereane.com: if you ask for a free guide (Etsy niches, Etsy customer replies), the email address you enter, the guide asked for, the language, the date, and whether you ticked the monthly niches box. If you subscribe to the monthly niches, the date you agreed and the sentence you accepted. To limit repeated requests, we keep a fingerprint (SHA-256) of your IP address and one of your email address for one day, then delete them.
- Buying a guide on sereane.com: if you buy a guide (for example “Digital products that sell on Etsy”), the guide and its language, the amount, the payment date and the time you gave up your right of withdrawal. The email address you give Stripe at checkout: Stripe passes it to Sereane, which uses it only to send you the guide. If you ask to send it to another address, the one you type on the guide page, which replaces the first. To limit repeated requests, we keep a fingerprint (SHA-256) of your IP address for one day. Card details are collected and held by Stripe, not by Sereane.
- Cookies and local storage: session cookies or equivalent mechanisms strictly necessary for authentication, security and keeping your preferences. On sereane.com only, and only if you click “Accept”, TikTok’s advertising pixel sets its own cookies (section 8). Your Sereane space carries no advertising tracker.
- Performing the contract: creating and securing your account, connecting the services you choose, displaying your cockpit, automating or assisting order and tracking processing, drafting after-sales replies, providing support and managing the subscription.
- Complying with our legal obligations: invoicing, accounting, handling rights requests and responding to authorised authorities.
- Legitimate interest: preventing fraud and abuse, protecting the service, diagnosing incidents, measuring reliability and improving existing features without incompatible reuse of your data.
- Consent or a positive action by the user: authorising an OAuth connection or an optional third-party integration. This authorisation can be withdrawn from the third-party service and, where applicable, from Sereane.
- Performing the sale of a guide: taking payment through Stripe, giving you the file and emailing it to you, keeping proof that you gave up your right of withdrawal, and handling a refund request.
- Your request, then your consent: sending you the free guide you asked for; and, only if you subscribed by confirming from your inbox, sending you the monthly niches and tips once a month. You withdraw this consent in one click, with the unsubscribe link found in every email.
- Consent: measuring, with the TikTok pixel and from our server, whether our ads on TikTok bring visits, sign-ups and payments. Without your consent, nothing is loaded or sent; you can withdraw it at any time (section 8).
The data comes from you, from your use of Sereane, from the Etsy shops and AliExpress accounts you choose to connect, from Google during OAuth authentication, and from Stripe for billing information. Sereane does not buy prospecting files containing your data.
Access is limited to authorised Sereane personnel and to the necessary providers, each for their role:
- Cloudflare: hosting, running the service, technical storage, content delivery, traffic protection and traffic measurement for sereane.com.
- TikTok (TikTok Technology Limited, Ireland): measuring our ads, only if you click “Accept” on sereane.com. The pixel receives the address of the pages visited, your IP address, your browser’s information and three events: a page visit, a click on “Free trial” and the end of your trial sign-up, with the chosen plan and its price. If you accepted, our server (not the pixel) also sends TikTok your sign-up and then each of your payments (amount, currency, plan), with your e-mail address and your Sereane account identifier irreversibly hashed (SHA-256), and your browser’s TikTok advertising identifiers (the “_ttp” cookie, the click identifier). Withdrawing your consent also stops these sends (section 8). TikTok never receives your sign-up’s identifier, nor any data about your Etsy buyers, and the pixel is never loaded in your Sereane space (app.sereane.com).
- Stripe: subscription, payment, billing and fraud prevention.
- Google OAuth: authentication and the consent screen when you choose “Continue with Google”.
- Resend: sending transactional emails, in particular sign-in links, welcome messages and the free guides asked for and the guides bought on sereane.com.
- ntfy: technical alerts sent to the Sereane team (outage, stuck queue, request to handle). This channel is not authenticated: we only write counters and technical identifiers to it, never a buyer’s name, e-mail, address or message. We would rather tell you it is public than present it as a private channel.
- Tracktaco: supplies replacement tracking numbers, and only if you enable tracking relay on a shop. No data about your Etsy buyer is sent to it: not their name, address, city, country or postcode, nor their e-mail, phone number or messages.
- Cainiao (the AliExpress group’s logistics arm): we query its public tracking service to find out where a parcel sent from China stands, and to retrieve, where one exists, the local carrier’s tracking number — the only one Etsy can recognise. We send it the parcel’s tracking number, and nothing else.
- The language-model provider that drafts after-sales replies — OpenAI, or Anthropic, depending on which model is used for the service. It is the only provider we send the content exchanged with your buyers to outside our hosting — Cloudflare hosts it, since that is where your data lives. We would rather write this precisely than let you guess.
What exactly goes to this provider. Two things need to be told apart, because they follow different rules.
1. What Sereane adds from its own records. The buyer’s first name, the delivery country, the order and tracking details, and a summary of their previous requests. Their full delivery address is added only when the conversation is identified as a request to change or correct an address; for every other conversation, only the country is added. This identification is done automatically: it can get it wrong, in either direction.
2. What your buyer wrote themselves. Their latest messages and the photo they may have attached. We remove nothing from them: if they write their address there, or photograph a shipping label, that content goes along with it — it is the message we are replying to. We only limit its volume: the most recent messages in the thread, truncated beyond a certain length, and a single photo, sent only if it could be retrieved.
When. Every time a conversation needs to be understood or drafted. Automatically, when a message arrives: sorting it, analysing its tone, then drafting the reply — the sorting happens even when no draft is ultimately produced. Automatically as well, when you open a conversation awaiting your reply: your Etsy customer’s last message, on its own, to recognise whether it asks a question Sereane can answer (where is the order, when will it arrive, a question about the product…); for a product question, your listing goes with it; and if your Etsy customer writes in a language other than French or English, the suggested reply is sent to be translated. At your request, when you use an assisted action in the cockpit: translating a message, rephrasing a reply, suggesting reply options, translating again a reply you have edited, adjusting a suggested reply (only the sentences you wrote are sent). At your request as well, when you prepare a draft reply to a review: the review’s rating, your Etsy customer’s first name and the text of their review are sent. Sereane first removes what it recognises: order numbers, email addresses, phone numbers, links and their surname. Their photo is not sent. And when learning a shop’s tone, where its message history is analysed to extract its voice. Outside these cases, nothing from your conversations is sent to it, and it receives neither your credentials, nor your payment details, nor your accounts.
AliExpress is not on this list, and that is not an oversight. It is not our provider: it is yours. The account is yours, the choice of supplier is yours, and you are the one who decides to ship from China by placing the order. Our software transmits the delivery address on your instruction — we spell this out precisely for that reason, in §6 — but we are not the controller in that relationship, and we cannot impose anything on a marketplace where you hold your own account.
Data may also be disclosed to a legally authorised authority. It is neither sold nor rented.
A general sentence such as “the transfer relies on a recognised mechanism” tells you nothing: it says neither who, nor where, nor which one. So here is the detail, recipient by recipient.
- Cloudflare — hosting and running the service. Processing possible from the United States and other countries. Mechanism: the European Commission’s standard contractual clauses.
- TikTok — measuring our ads, only with your consent. According to TikTok, the data may be processed in the United States and Singapore, and accessed from other countries. Mechanism: the European Commission’s standard contractual clauses, provided for in TikTok’s terms for advertisers.
- Stripe — payment and billing. Ireland and the United States. Mechanism: standard contractual clauses.
- Google — OAuth authentication. United States. Standard contractual clauses.
- Resend — transactional e-mails. United States. Standard contractual clauses.
- The language-model provider (OpenAI or Anthropic) — United States. Standard contractual clauses. This is the recipient that receives the content of messages; §5 states exactly what.
- ntfy — technical alerts to the team. Server located in Europe. Unauthenticated channel (see §5).
- Tracktaco — replacement tracking numbers. United States. Receives no personal data: no transfer.
- Cainiao — tracking of parcels sent from China. China. This is a public tracking service we query: here too, no negotiated contract, and China benefits from no adequacy decision. What is sent is limited to the parcel’s tracking number — §5 states exactly that.
And a SECOND transfer to China, which is not ours, but which our software carries out for you. The tracking query just above leaves our servers and is therefore ours; this one is of a different nature. Your buyer’s delivery address is sent to China so the parcel can be shipped to them. That one is yours: your supplier account, your choice to ship from there, and you are the one who orders it by placing the order — without the address, there is no delivery. Our role is limited to carrying it out on your instruction.
We tell you this because you need to know it, and because it is up to you to inform your buyers: China benefits from no adequacy decision, and this transfer is covered by no contract that we negotiated — it falls under the marketplace’s terms, which you accept by opening an account there. We would rather write it than let you discover it, and it is one of the points that §8 bis says should be assessed by a professional.
You may ask us for a copy of the safeguards applicable to a given recipient: write to admin@sereane.com.
- For as long as your account exists, its data is kept: we do not close an account for inactivity, and we would rather write that than let you think there is an automatic clean-up.
- If you request deletion of your account from your workspace, your account is deleted after the cancellation window of 14 days from the request, unless you cancel. Your e-mail address, those of invited members, your sign-in links and your shops’ seller e-mail address are then erased. What must be kept for accounting reasons remains (next line), and an erased item of data may survive for up to 7 days in our backups.
- Deleting your account also cancels your subscription, without automatic refund for a period that has begun. Renewal is stopped as soon as you make the request and the subscription ends with the account. The exceptions are described in §7 of the terms.
- Records and information required by accounting or tax obligations may be kept for up to 10 years.
- Security and diagnostic logs are kept for a maximum of 12 months, unless an incident justifies a longer evidentiary retention.
- Your cookie choice on sereane.com (accept or decline) is kept for about 6 months in your browser, after which you are asked again. If you accepted and then signed up, your browser also keeps a fingerprint of your sign-up (never your e-mail address), used only to withdraw your consent from our server. TikTok’s cookies last at most 13 months.
- If you accepted TikTok’s cookies, your consent and your browser’s advertising identifiers are kept for 60 days after you sign up, then erased.
- The email address a guide buyer receives it at (the one given to Stripe, or the one typed on the guide page) is deleted 30 days after payment; the “Erase my address now” link in the email deletes it straight away. An unpaid purchase holds no personal data; it is deleted within 5 days. Stripe keeps its own records of the payment, for its accounting obligations. The email address given for a free guide is deleted within 30 days. If you subscribe to the monthly niches (by ticking the box and confirming in the email, or with the button in the email), we keep your address, the date and the sentence you accepted until you unsubscribe, and at most 3 years after you agreed, never more than one month after the last planned email. An address that becomes a Sereane customer no longer receives these emails. The links in every email unsubscribe or delete the address straight away.
- A magic link expires after 15 minutes. The application session expires according to its technical duration and may be interrupted by signing out or revocation.
A deletion request may lead to faster erasure, subject to legal obligations and to data strictly necessary as evidence of a contract, a payment or a dispute.
To track your orders, Sereane processes data that does not concern you, but your buyers: their name, their delivery address, sometimes their e-mail or phone number, and the content of the messages they send you on Etsy. These people are not Sereane’s customers and have never heard of us.
Who is responsible for what. The detail of our commitments to you on this data lives in the data processing addendum. In short: towards your buyer, you are the controller: you are the one who collects the data, you decide what it is used for. Sereane acts on your behalf, on your instructions: we are the processor. This discharges us of nothing towards you — we must secure this data, process it only for what has been agreed, and delete it when you ask or when the period expires.
- We keep it for 180 days, counted from the order date — not the date we saw it. Once that period has passed, a daily sweep erases the name, address, e-mail, phone number, customs identifier and message content.
- The order itself remains. We only erase the fields that identify a person. Amounts, dates and product references remain: they are your figures, your accounts, and you are entitled to keep them.
- An after-sales conversation is counted from its last message: as long as it is live, it stays readable. A conversation open for more than 365 days nonetheless has its details erased, even if active — an exception must not become permanent. Its recent messages, however, are spared as long as they are less than 180 days old: we never erase a message you have not yet had the chance to read.
- Our backups are kept for 7 days. An erased item of data may therefore survive there for up to seven more days. ⚠️ This sentence was false until 23 August 2026: the clean-up kept the last seven backups, which is not the same thing — if they failed for a week, seven backups could cover months. It is now a cap in days, and it applies even when only a single backup remains. We mention this rather than fix it silently.
- If a buyer demands erasure, they will contact you. You can erase their data yourself from your cockpit, immediately, without writing to us and without waiting for the 180 days.
One exception: the delivery address is sent to the supplier shipping the parcel, including outside the European Union. Without it, the order cannot be delivered.
What the “SEREANE — Shop connection” extension does, from version 0.12.17.
- It is installed in Chrome, from the Chrome Web Store.
- It reads your shop’s Etsy pages: sales, shipping addresses, messages and listings.
- If you open another shop’s listing, it only sends its number and photo. Sereane does not keep them.
- It sends this data to Sereane’s servers only. Sections 5 to 7 bis say what Sereane does with it.
- It reads nothing before you agree in its window.
- Until your Sereane code is pasted, it sends nothing.
- What it saw before your code is erased from your browser, without being sent.
- If the Sereane desktop app installs the extension for you, the agreement you gave when you signed up counts as agreement.
- It also acts on Etsy for you, using your own session.
- It writes to your Etsy customers, adds tracking numbers and pushes back ship-by dates.
- It cancels or refunds sales, restocks listings and creates promotions.
- Each action follows one of your choices: a click in Sereane, a setting you turned on, or a supplier order linked to your sale.
- The Sereane team can also start these actions from your account.
- It counts its visits to Etsy, per shop and per day. This count holds no personal data.
- To stop, click “Detach this shop” in its window. Nothing more is sent to Sereane.
- Detaching does not erase what was already sent. To erase it, see section 9, “Your rights”.
Sereane uses only trackers necessary for sign-in, security and interface preferences. They are not used to build an advertising profile. You can clear them in your browser; this will sign you out or reset some preferences.
On sereane.com, we measure traffic with Cloudflare Web Analytics: number of visits, pages viewed, country and device type. This measurement sets no cookie, does not use your browser’s storage and is not used to follow you from one site to another.
The TikTok pixel, only with your consent. On sereane.com, a banner offers “Accept” or “Decline”, one as easy as the other. If you accept, the TikTok pixel loads: it sets its cookies on sereane.com (notably “_ttp” and “ttcsid”) and tells us whether our ads on TikTok brought visits, clicks on “Free trial” and trial sign-ups. If you then sign up, our server also sends TikTok your sign-up and each of your payments (section 5). These cookies last at most 13 months. If you decline, or do not answer, no TikTok script is loaded.
Your choice is kept for about 6 months in your browser. The “Manage cookies” link, at the bottom of every page, lets you change it at any time; withdrawing your consent, from the browser where you gave it and as long as you have not cleared its data, erases TikTok’s cookies from sereane.com and stops our server’s sends to TikTok for your account; from another device, or if you cleared this browser’s data, write to us (section 9) and we stop them ourselves. TikTok also processes this data on its own behalf, under its privacy policy (tiktok.com/legal). Your Sereane space (app.sereane.com) carries no advertising tracker.
Depending on your situation and the legal basis of the processing, you have the rights of access, rectification, erasure, restriction, objection and portability. You can withdraw your consent at any time where a processing activity relies on it. You can also set directives on what happens to your data after your death, under the conditions laid down by French law.
Write to admin@sereane.com describing your request. Proof of identity will only be requested where there is reasonable doubt. Sereane generally responds within one month, a period that may be extended in the cases provided for by the GDPR.
You may lodge a complaint with the CNIL (the French data protection authority) if you believe your rights are not being respected.
For Etsy or AliExpress data that you entrust to Sereane in the course of your business, you remain responsible for informing your own buyers and for the lawfulness of processing their data. Sereane acts to provide the requested features and does not reuse this data for its own prospecting.
Sereane applies proportionate technical and organisational measures: access control, encryption of communications, account isolation, minimisation of exposed data and error monitoring. As no system is infallible, an incident presenting a risk will be handled and notified in accordance with applicable obligations.
This policy may evolve to reflect the service or the regulations. The update date appears at the top of the page; any substantial change will be brought to users’ attention by an appropriate means.