Urgent.News

What's breaking now, across thousands of outlets.

Tech

Sereinly: Building a "Nothing Persists" Product on Top of a Backend That Necessarily Persists Some Things

The Nuance in "We Don't Store Your Messages" That's Worth Being Precise About Sereinly was marketed around a privacy promise: what you paste in doesn't get stored. I want to be precise about what that actually meant architecturally, because "we don't store anything" is a claim that's easy to overstate if you're not careful about which layer of the system you're talking about. What definitely is…

Sereinly positioned itself in the market by emphasizing a privacy promise: what users typed in did not get stored. Precision in this claim's architecture was required, as stating that no data is stored can be misleading if focused solely on certain system layers. Key components that do persist include account information, subscriptions, usage limits for paid SaaS functionality, and a separate usage-tracking layer for metrics like session minutes on metered plans.

The core of Sereinly's no storage claim specifically applied to message content users pasted into services like Ely, Sera, or Milo for assistance. To process this content, AI functionality was routed through server-side API routes, not client-side services, after an earlier client-side version was deprecated for security concerns.

The separation between persisting account/usage data and the AI-processing pathway was verified. While the dedicated usage tracking layer seemed scoped to metering metrics rather than content, the full request lifecycle within server-side API routes for message content verification was not directly traced. This creates a notable gap in confirming that message content is never written to logs, databases, or request logs during its server-side processing.

Precision in a privacy claim extends beyond just stating "no storage" for product data; it must account for all data layers it traverses, including logging infrastructure, error tracking tools, and third-party API providers. A comprehensive claim needs to address every potential data retention path, not just the user-facing aspect the product team emphasizes in marketing material.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

I Tested If Grok Bot Could Book My Flights

I tested out if Grok Bot could actually be my travel agent and book my flights for me. There is a huge market for bots that actually work both from a company perspective and for the individual.

More from Thursday 13 August →