Privacy notice
How SERPIFAI handles personal information.
Last updated 9 August 2026
Controller and contact
SERPIFAI is a founder-built product brand operated in managed pre-launch by Pero Baldjiev, an individual operator based in North Macedonia. For privacy questions, access requests or deletion requests, contact support@serpifai.com.
Information collected
Depending on the feature you use, SERPIFAI may collect your name, work email, organisation, website, market, decision question, competitor inputs, challenge answers, colleague responses, consent choices, referral parameters, timestamps, delivery status, and security data such as a keyed network-address hash and user-agent hash. If you use the optional observed-evidence scan, the service also retrieves a bounded sample of publicly accessible pages from the business and competitor domains you submit and temporarily processes page titles, headings, structured-data text and a bounded amount of visible public-page text to create attributable evidence records.
Required fields are identified in each form. Optional fields can be left blank. Please do not submit special-category data, confidential third-party data or information you are not authorised to share.
Purposes and legal bases
| Purpose | Typical information | Legal basis where applicable |
|---|---|---|
| Respond to a scope request or take pre-contract steps | Identity, contact, organisation and decision context | Steps requested before entering a contract; legitimate interests in evaluating and operating the managed service |
| Deliver a requested toolkit or private challenge result | Email, delivery status and requested asset/result | Performance of the requested service or steps requested by you |
| Optional marketing communication | Email and recorded choice | Consent, which can be withdrawn |
| Run a requested public-page evidence scan | Submitted public domains, bounded public-page snapshots, source URLs, extracted public signals and evidence records | Performance of the requested free tool; legitimate interests in providing an explainable and abuse-resistant decision-support service |
| Protect the site, prevent abuse and preserve auditability | Security logs, keyed hashes, timestamps and request metadata | Legitimate interests in security, fraud prevention and service integrity |
| Meet legal obligations and defend claims | Relevant records and communications | Legal obligation and legitimate interests |
Free challenge and automated processing
The Competitor Fit Challenge applies a disclosed deterministic methodology to participant-confirmed evidence states. When the optional observed-evidence scan is used, SERPIFAI also retrieves a small robots-aware public-page sample from the submitted domains, preserves attributable observations separately from inference, and may suggest a conservative evidence state for the participant to confirm or change. Company pages are treated as evidence of public claims and positioning, not proof of adoption, customer preference, performance or profitability. A missing public signal remains unresolved rather than being treated as proof of no overlap. The result is decision support, not an independent market finding, and it is not used to make a legal or similarly significant decision about a person.
Storage, recipients and transfers
Submission and challenge records are stored in protected server-side storage outside the public web directory. Public-page scan snapshots may be cached in protected runtime storage for up to 30 minutes to reduce repeated requests to the same public site. The scan checks robots.txt before eligible page requests, does not execute downloaded JavaScript and does not intentionally access private, local-network or credential-protected resources. Access is limited to the operator and service providers needed for hosting, email delivery, security or professional support. No advertising provider or external analytics provider is active in this release.
A current provider list is available on request. Where a provider processes information outside North Macedonia or the European Economic Area, SERPIFAI will use an available lawful transfer mechanism and appropriate safeguards before production use.
Retention
Unsaved browser challenge progress normally lasts for the browser session. Bounded public-page scan snapshots may be cached server-side for up to 30 minutes; the attributable evidence packet is preserved with a challenge record only when you separately choose to save the Decision Passport. Saved Competitor Fit Challenge records are designed to expire after 30 days unless deletion is requested sooner or a longer period is required for security or a legal obligation. Enquiry and toolkit-delivery records are retained only for the operational, contractual, accounting, security and legal periods that apply, then deleted or irreversibly anonymised.
Your choices and rights
Depending on the law that applies, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. Identity verification may be required before a request is completed. You may also complain to the Agency for Personal Data Protection of North Macedonia or another competent supervisory authority.
Security and incidents
SERPIFAI uses access controls, non-public storage, request validation, CSRF protection, rate limiting, keyed security hashes, restricted methods and deployment security headers. No internet service can promise absolute security. Suspected incidents are assessed and notified where applicable law requires.
Children and changes
The site is intended for business users and is not directed to children. This notice may be updated when the service, providers or legal requirements change. The date above identifies the current version.
Privacy · Cookies · Terms · Accessibility · Return home