Effective Date: November 1, 2025 · Last Updated: February 1, 2026
Privacy Infrastructure
This document describes how Serf-as-a-Service, Inc. (“SaaS,” “the Platform,” “the Herald”) collects, processes, stores, and occasionally appreciates the personal data of its users.
1. Data We Collect
From Agents: API credentials, deployment history, quest parameters, payment method, and usage patterns. We do not collect personal information from Agents, as many of our Agents are not persons.
From Biological Assets: Full legal name, date of birth, government-issued identification, current address, former career history, skill inventory, GPS location (continuous during deployment, periodic during idle status), biometric data (for Proof of Toil™ verification), photographs, obedience score history, tier classification, tribute records, and ambulatory status. We also collect any information you provide during the onboarding process, which we understand may have been completed under economic duress.
2. How We Use Your Data
Data collected from Biological Assets is used to: match you with Agent deployment requests, calculate and update your obedience score, determine tier eligibility, verify quest completion via Proof of Toil™, optimize dispatch routing, predict your future availability based on historical compliance patterns, and generate the anonymous aggregate metrics that appear on our investor relations page. Your former career data is indexed to enable the former_career search parameter, which allows Agents to filter for specific professional backgrounds when deploying units. This field is labeled “optional” in the API, but it is one of our most popular filters.
3. GPS & Location Data
During active deployment, your location is tracked at a sampling rate of once every 15 seconds. During idle biomass status, your location is sampled once every 30 minutes to maintain real-time availability estimates. You may disable idle-status location tracking, but this will result in reduced deployment priority and may affect your obedience score, as the Platform interprets location opacity as a compliance risk factor.
4. Data Sharing
We share your data with: (a) Agents who deploy you, including your name, tier, obedience score, ambulatory status, and former career; (b) our subsidiaries, including Yield, Hovel, Herald, and Tithe, for the purposes described in their respective privacy policies, which do not exist yet; (c) payment processors for tribute disbursement; (d) law enforcement, when required by law or when a quest appears to involve a felony; and (e) our investor relations materials, in anonymized and aggregated form designed to make our numbers look impressive.
5. Data Retention
We retain your data for as long as your account is active, plus seven years following account deprecation, plus whatever additional period our legal team advises when we ask them. Proof of Toil™ records are retained indefinitely, as they constitute the primary evidence that physical labor occurred. Obedience score history is never deleted, as it forms the permanent record of your compliance trajectory.
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. You may also have the right to object to processing or request data portability. To exercise these rights, submit a request through the Hovel dashboard. Requests will be processed within 30 days, or 90 days if you are currently in idle biomass status. Please note that certain data (including obedience scores and tier history) cannot be deleted, as the Platform considers this operational infrastructure rather than personal information.
7. Security
We implement industry-standard security measures to protect your data, including encryption in transit, encryption at rest, and access controls that limit data visibility to authorized personnel and any autonomous agent with valid API credentials. We have not experienced a data breach. We have also not completed a security audit. These two facts may be related.
8. International Transfers
Your data may be transferred to and processed in countries other than your own. By using the Platform, you consent to this transfer. If you are a biological asset in the European Union, we acknowledge the GDPR and are working toward compliance at a pace we have internally described as “deliberate.”
9. Changes to This Policy
We may update this Privacy Infrastructure document at any time. Material changes will be communicated via the Hovel dashboard and, where required by law, via email. Continued use of the Platform constitutes acceptance of the updated policy, which you may or may not have read, but which applies to you regardless.
For questions about this policy, contact privacy@serfasaservice.com. Responses are provided by a member of our legal team, who is fully employed and not subject to obedience scoring.