Sero LLC, a Florida limited liability company, doing business as "exeral"

1. Introduction & Scope

This document ("Disclosures") is published by Sero LLC, a Florida limited liability company, doing business as "exeral" (hereafter "exeral," "we," "us," or "our"). It explains how we use artificial intelligence and automation, how and when we record voice interactions, and the terms that govern our text-message (SMS) and email communications, including our cold business-outreach program.

These Disclosures function both as a public website policy and as in-product consent language presented at the point of collection (for example, on a discovery form, an onboarding call, or a messaging opt-in). Where this document is presented to you at a point of collection and you take an affirmative action (clicking, checking a box, or replying), that action constitutes your consent to the relevant Part below. Exception: consent to voice recording is governed solely by the affirmative, recorded consent procedure in Part B, and is not established by merely continuing a call.

These Disclosures supplement, and are incorporated by reference into, our Privacy Policy, Website Terms of Use, and (for clients) our Master Services Agreement ("MSA") and any signed Order, Proposal, or Statement of Work (collectively, the "Order"). Where a signed Order is more specific, the Order controls. For the full set of privacy rights and how to exercise them — including rights of access, correction, deletion, portability, opt-out of sale/sharing and targeted advertising, the treatment of Global Privacy Control signals, and any right to appeal — see our Privacy Policy at exeral.io/privacy.

Capitalized terms not defined here have the meanings given in our Privacy Policy or MSA.

Contact for questions about these Disclosures:

Privacy / data requests: privacy@exeral.io
General support: contact@exeral.io
Legal notices: legal@exeral.io
Mailing address: Boca Raton, Florida — full mailing address available on request at privacy@exeral.io
Phone: contact@exeral.io

PART A — AI & Automation Disclosure

A.1 We Use AI and Automation

exeral uses artificial intelligence ("AI"), machine learning, large language models ("LLMs"), and automated systems in our business. This includes, without limitation:

Website and content production. Our internal site-generator engine and third-party LLMs draft and assist in producing website layouts, copy, page content, blog and article drafts, metadata, structured data, search-engine-optimization ("SEO") and answer-engine-optimization ("AEO") materials, review responses, and consultation and intake questions. A human reviews these outputs before they are finalized.
AI voice agent. An automated AI voice agent conducts spoken onboarding interviews (see Part B).
AI assistant in our operations tools. AI assistants help our staff with drafting, research, summarization, and workflow inside our internal and administrative tools.
Automated processing. Automated systems help us collect, organize, score, route, and report on data in the ordinary course of delivering our services, including the business-prospect research described in Part D.

Statements in this document and elsewhere describing our use of AI are factual descriptions of our tools and methods. They are not performance warranties, and nothing in them guarantees any particular output, quality, or result.

A.2 AI Output May Be Inaccurate — Human Review Is Required

AI-generated and AI-assisted output can be inaccurate, incomplete, outdated, biased, internally inconsistent, or not unique to you. You must not rely on any AI-generated or AI-assisted output without human review.

For client deliverables: all deliverables are subject to your review and approval before publication or use. You are solely responsible for reviewing and approving all deliverables for factual accuracy and for compliance with all laws and regulations that apply to your business — including, without limitation, professional-licensing rules and healthcare, financial, legal, and advertising-claim requirements — before they are published or relied upon. To the fullest extent permitted by law, exeral disclaims all warranties regarding the accuracy, completeness, currency, fitness, or non-infringement of AI-generated or AI-assisted material.

A.3 No AI-Only Decisions of Legal, Medical, or Financial Significance

exeral does not use AI to make solely automated decisions that produce legal or similarly significant effects concerning you, and AI is not a substitute for professional advice. We do not provide legal, medical, financial, tax, or other professional advice. Decisions of legal, medical, or financial significance should be reviewed by a qualified human professional.

A.4 Intellectual Property & Copyright Caveat for AI Output

Portions of our deliverables are produced with AI assistance. Under current U.S. Copyright Office guidance and case law, material that is generated entirely by AI generally is not eligible for copyright protection, and providing prompts alone does not create copyright authorship. Copyright may attach to the human-authored selection, coordination, arrangement, and editing of AI-assisted material and to original human-authored content.

Accordingly:

exeral does not warrant or represent that any AI-generated or AI-assisted material is original, unique, exclusive to you, or protectable by copyright.
AI tools may produce output that is similar to output others receive. We cannot prevent third parties from independently generating similar material.
To the extent exeral holds assignable rights in deliverables, those rights transfer to you on full payment as set forth in your Order and the MSA. This does not enlarge rights that do not exist in uncopyrightable AI-generated material. exeral retains all of its pre-existing and background IP, including its templates, design system, component and CSS libraries, the site-generator engine and its data bank, SEO/AEO playbooks and tooling, and general know-how, as further set forth in the MSA.

A.5 Data Shared with AI Subprocessors

To provide AI features, we share certain information with AI service providers acting as our subprocessors. Current subprocessors include, without limitation, the LLM routing provider OpenRouter and, through it, the underlying model providers (which may include providers such as OpenAI, Anthropic, and Perplexity), as well as the AI voice-agent and speech-to-text providers identified in Part B. This list may be updated from time to time; the current list of subprocessors is available at exeral.io/subprocessors. The information shared may include the prompts, content, business information, brand details, and (for voice onboarding) audio and transcripts necessary to perform the requested task.

Your responsibility. You should not provide us with information you do not wish to have processed by AI subprocessors. Do not submit passwords, payment-card numbers, government-identification numbers, health information, or other sensitive information through AI-assisted channels.

Training-data handling. Where reasonably available and supported by the relevant provider, exeral configures its use of AI providers to use non-training and/or zero-data-retention options so that your content is not used by the provider to train its models and is not retained beyond what is needed to return a result. We cannot guarantee that every provider offers, or that we will in every instance be able to enable, such options, and provider terms may change. We do not control the independent practices of these third-party providers; their handling of data is governed by their own terms and policies.

A.6 No Sale of Personal, Sensitive, or Biometric Data

exeral does not sell your personal information, sensitive personal information, or biometric data, and does not sell or share voice recordings or transcripts, as "sell" and "share" are defined under the California Consumer Privacy Act (as amended), the Florida Digital Bill of Rights, and similar laws. exeral does not engage in "cross-context behavioral advertising" or "targeted advertising" using your data as those terms are defined under those laws. We do not create, derive, or use voiceprints or other biometric identifiers from onboarding recordings; audio is used only for transcription and onboarding as described in Part B.

A.7 Human Contact

A human is available. You may reach a person regarding any AI-assisted interaction, deliverable, or decision by contacting contact@exeral.io or contact@exeral.io.

A.8 No Guarantee of Results

exeral provides its services using commercially reasonable efforts and does not guarantee any specific search rankings, traffic, leads, call volume, conversions, sales, revenue, or other outcome. Search engines, AI answer engines, and advertising platforms are controlled by third parties and are outside our control; results depend on factors outside our control, including algorithm changes and your market and responsiveness. We report only metrics we actually measure and do not fabricate results. Any forward-looking or aspirational statements about potential results are not warranties or guarantees.

A.9 Google API Limited Use

Where you authorize exeral to access Google services on your behalf (such as Google Analytics, Google Search Console, and Google Business Profile), exeral's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We access this data only to provide and improve the reporting, optimization, and management services you have requested; we do not use it for advertising, do not sell or transfer it except as necessary to provide those services or as required by law, and do not allow humans to read it except as permitted by that policy. See our Privacy Policy at exeral.io/privacy for further detail.

PART B — Voice Recording & Call Consent (Florida Two-Party Consent)

B.1 Notice: This Onboarding Is Conducted and Recorded by an Automated AI Assistant

As part of onboarding, exeral offers a spoken onboarding interview conducted by an automated AI voice agent — not a live human. Florida is an all-party (two-party) consent state for recorded communications under the Florida Security of Communications Act, Fla. Stat. § 934.03, and we obtain the consent of every participant before any substantive recording occurs.

Consent sequence. Substantive recording does not begin until consent is captured. At the start of the session, the AI voice agent will (1) state that the session will be recorded and transcribed by an automated assistant, (2) ask whether anyone else is present and able to be heard, and (3) ask each participant to confirm consent by affirmatively saying "yes." Your spoken "yes" (and that of each other participant) is the operative legal basis for recording; continuing the session is corroborating evidence only and is not, by itself, consent.

If anyone does not consent, the recorded onboarding will not proceed, and you may use the alternative described in Section B.5. If consent is withdrawn after recording has begun, or if a voice that has not consented is heard, tell the agent or end the session; we will stop recording and delete the substantive recording of that session, except that we may retain the portion evidencing that consent was given, withheld, or withdrawn.

B.2 What Is Captured, and Why

After consent is captured, we capture:

the audio of the onboarding conversation;
a written transcript generated from that audio; and
the information you provide during the interview, which may include your brand voice, target audience, service-area details, competitors, launch timing, and similar onboarding inputs, and any files you upload (for example, logos, photos, and brand assets).

Purpose. We use these recordings, transcripts, and inputs to conduct onboarding, understand your business, build and configure your deliverables, maintain a record of the information you provided, and improve the quality and accuracy of our work for you. We do not use audio to create voiceprints or other biometric identifiers (see Section A.6).

B.3 Who/What Processes the Recording, and How It Is Stored

The AI voice agent is operated using Vapi (voice-agent orchestration) and Deepgram (speech-to-text transcription), acting as our subprocessors. Audio, transcripts, and uploaded files are stored with our hosting and storage subprocessors (including Vercel and Vercel Blob storage) and our database/authentication subprocessor (Supabase). These providers process this information on our behalf under contractual confidentiality and data-protection obligations and are not authorized to derive biometric identifiers from the audio. We restrict human access to recordings and transcripts to what is necessary to provide and support our services, for security and abuse prevention, or as required by law. The current list of subprocessors is available at exeral.io/subprocessors.

B.4 Retention and Deletion

We retain onboarding audio for approximately [VOICE_AUDIO_RETENTION, e.g., 12] months after the end of your engagement, and onboarding transcripts for approximately [TRANSCRIPT_RETENTION, e.g., 24] months after the end of your engagement, after which we delete or anonymize them in the ordinary course, subject to any legal-hold, security, or legal-compliance needs. You may request deletion of your onboarding recording and/or transcript by contacting privacy@exeral.io. We will honor verified deletion requests subject to applicable legal exceptions (for example, where we must retain certain information to complete a transaction, for security, to exercise or defend legal claims, or to comply with law).

Consent record is preserved. Even where we delete the substantive recording or transcript — whether on request or in the ordinary course — we may retain the short segment or log evidencing that consent to record was given, withheld, or withdrawn, and the date and time, as a record of compliance. This consent record survives deletion requests.

B.5 How to Decline or Use an Alternative

Participation in the AI voice onboarding is optional. If you prefer not to be recorded, you may complete onboarding using our web intake form instead, which collects the same information without audio recording. Ask us at contact@exeral.io for the web-form alternative.

B.6 Private Setting; Authority to Speak for the Business

Because the session is recorded, please join from a private setting. Only participants who have given their spoken consent under Section B.1 should be audible; if you expect others to be heard, ensure each of them is prompted for and gives consent at the start of the session. You represent that you are authorized to speak on behalf of the business being onboarded and to provide the information and files you submit.

B.7 Interstate Calls

If you are located outside Florida, recording-consent laws vary by state, and some states require all parties to consent. We obtain all-party consent regardless of your location so that recording is consensual under both one-party and all-party standards. By consenting, you confirm your consent applies wherever you are located.

PART C — Messaging Terms (SMS and Email)

C.1 SMS Program Description

exeral may send text messages (SMS/MMS) in the following programs, only to recipients who have opted in or with whom we otherwise have a lawful basis to communicate:

Client account & service messages (transactional): account, onboarding, scheduling, billing, support, and service-related notifications to clients and their authorized contacts.
exeral sales & marketing messages: where you have given prior express written consent (for example, by checking the opt-in box at Section C.2), recurring promotional and sales messages from exeral about our services.
Review-request messages sent on a client's behalf: at a client's direction, messages inviting the client's own customers to leave a review, governed by the additional requirements in Section C.8.

Message frequency varies. Message and data rates may apply.

C.2 SMS Opt-In and Consent

We send promotional or marketing SMS only after you opt in. Consent to receive marketing or promotional text messages is not a condition of any purchase or of receiving any service. SMS marketing opt-in is collected through an unchecked, optional checkbox (or an equivalent affirmative opt-in or a keyword reply), and we keep a record of each opt-in, including the consent language shown and the date and time.

Exact consent disclosure presented at the SMS opt-in point:

By providing my mobile number and checking this box, I agree to receive recurring automated marketing and sales text messages from exeral (Sero LLC d/b/a exeral) at the number provided, which may be sent using automated technology. Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, HELP for help. See our [Messaging Terms] and [Privacy Policy].

C.3 STOP / HELP and Opt-Out

You can cancel the SMS service at any time. Reply STOP (or QUIT, END, CANCEL, UNSUBSCRIBE, or REVOKE) to any message to opt out. We honor opt-out requests promptly, with the goal of immediate processing; any statutory safe-harbor window (such as the period referenced in the Florida Telephone Solicitation Act) is a maximum outer limit, not our standard practice. After you opt out, we will send one confirmation message acknowledging your opt-out, and you will not receive further program messages unless you opt in again. You may also revoke consent by any other reasonable means using the contact information in these Disclosures.

Reply HELP for help, or contact us at contact@exeral.io or contact@exeral.io. Standard carrier statements:

Reply STOP to unsubscribe. Reply HELP for help. Msg & data rates may apply. Msg frequency varies.

C.4 Carrier Statement; No Sale or Sharing of SMS Opt-In Data

Mobile carriers are not liable for delayed or undelivered messages. exeral does not sell, rent, or share mobile phone numbers or SMS opt-in/consent data with third parties or affiliates for their own marketing purposes. Mobile opt-in information is used only to operate the SMS programs described above and is shared only with the service providers (such as our messaging vendor) that help us deliver these messages on our behalf. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

C.5 Required Public URLs

Our Messaging Terms and Privacy Policy are publicly available and are linked directly on every SMS opt-in form:

Privacy Policy: exeral.io/privacy
Messaging Terms: exeral.io/messaging-terms

C.6 Florida Telephone Solicitation Act (FTSA)

For text messages to Florida numbers, exeral obtains prior express written consent where required, sends covered messages only to recipients who have consented or with whom there is an established business relationship recognized under the FTSA, honors STOP/opt-out requests promptly as described in Section C.3, and observes the FTSA's restrictions on the timing and volume of solicitation messages.

C.7 Email Messages

Transactional/relationship email. We send account, onboarding, billing, support, reporting, and other service-related emails to clients and their authorized contacts in connection with our services.
Marketing/commercial email. We may send commercial or promotional email. Every commercial email complies with the CAN-SPAM Act and the Florida Electronic Mail Communications Act (Fla. Stat. § 668.60 et seq.): it uses accurate sender and header information, identifies itself as an advertisement where required, includes our valid physical postal address, and provides a clear, working unsubscribe mechanism.
Truthful subject lines. Every commercial email uses a subject line that is accurate and not false, misleading, or deceptive, and that materially relates to the body of the message. We do not use deceptive "Re:" or "Fwd:" framing or any subject line designed to mislead a recipient about the contents or subject matter of the message.
Unsubscribe. You may opt out of marketing email at any time using the unsubscribe link in any commercial message or by contacting privacy@exeral.io. We honor opt-out requests within ten (10) business days and keep the opt-out mechanism functional for at least thirty (30) days after a message is sent. Opting out of marketing email does not stop transactional/service emails necessary to administer your account.
Physical address. Our valid physical postal address for messaging compliance is: Boca Raton, Florida — full mailing address available on request at privacy@exeral.io.

C.8 Client-Directed Review-Request Messaging — Conditions and Controls

Where exeral sends review-request messages to a client's own customers on the client's behalf, the following apply in addition to Section C.10:

Documented consent required before sending. exeral will not send any such message until the client has provided, and exeral has on file, evidence reasonably satisfactory to exeral that each recipient has given the consent required under the TCPA, the FTSA, CAN-SPAM, and applicable law for the requested message, and that the recipient has not opted out.
exeral controls STOP and suppression. exeral applies its own STOP/HELP handling and suppression lists to these sends; any recipient who opts out is suppressed across the program and is not re-added from any later list.
Right to refuse, limit, or suspend. exeral may, in its sole discretion, decline, limit, pause, or terminate any review-request campaign or list, including where consent evidence is inadequate, where complaint or opt-out rates are elevated, or where a carrier, platform, or law so requires.
Client as sender where feasible. Where reasonably feasible, exeral may require that such messages be sent from the client's own messaging number, sender identity, or account, so that the client is the sender of record, with exeral acting only as a technical facilitator.
Volume and program limits. Review-request messaging is subject to any volume, content, and channel limits exeral sets, and to carrier A2P 10DLC registration and rules.

These controls are operational safeguards for exeral's benefit and do not relieve the client of its representations, warranties, and indemnity obligations in Section C.10 and the MSA.

C.9 Consent Records and Suppression Lists

We maintain records of messaging consents and opt-outs and maintain suppression/do-not-contact lists for SMS and email. Suppressed contacts are not re-added from new data sources, and opt-out requests are honored across our messaging programs.

C.10 Client Obligations — You May Only Provide Contacts You Are Entitled to Message

Where you provide us with phone numbers or email addresses of your customers or contacts (for example, for review-request or reactivation campaigns), you represent and warrant that you have obtained all consents and have all rights necessary under applicable law — including the TCPA, the FTSA, CAN-SPAM, the Florida Electronic Mail Communications Act, and applicable privacy laws — for those contacts to be messaged for the requested purpose, and that none of them has opted out. You will not provide contacts that are on a do-not-contact or suppression list or that you do not have the right to message. You are responsible for the lawfulness of the contact lists and message content you direct or approve, and you agree to indemnify exeral for claims arising from contacts or content you provided or approved, as further set forth in the MSA.

PART D — Business-Prospect Research & Cold Outreach (Lead Engine)

D.1 Scope

exeral operates an outbound program to identify and contact businesses (not consumers) that may benefit from our services. This Part describes that program. It applies to recipients of our cold outreach; it does not limit the protections owed to clients elsewhere in these Disclosures.

D.2 What We Collect and From Where

We compile business contact and firmographic information — such as business name, business email address, business phone number, website, public business listings, industry, and publicly observable characteristics of a business's website and online presence — from publicly available sources and licensed data providers. We collect this information to evaluate fit and to prepare and send relevant business-to-business outreach.

D.3 We Use Prospect Data Only for Our Own Outreach — We Do Not Sell It

exeral uses business-prospect data solely for its own internal evaluation and for its own outbound communications. exeral does not sell, rent, or license prospect data to third parties, and does not act as a data broker with respect to that data. We do not knowingly collect this data from minors, and we target businesses, not individuals in their personal capacity.

D.4 Cold Email Compliance (CAN-SPAM and Florida)

All cold commercial email complies with the CAN-SPAM Act and the Florida Electronic Mail Communications Act (Fla. Stat. § 668.60 et seq.). Each message: uses accurate sender, "from," and routing information; uses a truthful, non-deceptive subject line that materially relates to the body and avoids misleading "Re:/Fwd:" framing; identifies itself as a solicitation where required; includes exeral's valid physical postal address (Boca Raton, Florida — full mailing address available on request at privacy@exeral.io); and provides a clear, working opt-out. We honor opt-outs within ten (10) business days and keep the opt-out mechanism working for at least thirty (30) days after sending. Once a recipient or domain opts out, it is added to a persistent suppression list and is not re-added from any later data source.

D.5 No Cold Calls or Texts to Scraped Numbers by Default

Our cold-outreach program is email-first. We do not, by default, place telephone calls or send SMS to phone numbers obtained through prospect research. We will not use such numbers for calls or texts unless and until we have a lawful basis and have satisfied the consent and registration requirements of the TCPA, the FTSA, and carrier A2P 10DLC rules.

D.6 Privacy Rights of Prospects

If you are a business contact and wish to access, correct, or delete the information we hold about you, or to opt out of further outreach, contact privacy@exeral.io. We honor verified requests as required by the California Consumer Privacy Act (as amended), the Florida Digital Bill of Rights, and other applicable state privacy and data-broker laws, subject to applicable exceptions. exeral does not sell the data described in this Part (see Section A.6 and Section D.3).

PART E — Web Accessibility

exeral designs and builds with web-accessibility standards in mind and uses commercially reasonable efforts to align deliverables with the Web Content Accessibility Guidelines (WCAG) [WCAG_VERSION, e.g., 2.1] at Level AA as a standard of care. exeral does not warrant or guarantee that any website or deliverable is fully conformant with WCAG, the Americans with Disabilities Act, or any other accessibility law or standard, or that it will be free of accessibility barriers. Accessibility depends in part on third-party tools, integrations, content the client adds or changes after delivery, and evolving standards and assistive technologies. The client is responsible for ongoing accessibility of content it controls and for obtaining its own legal and technical review of accessibility obligations applicable to its business. Further accessibility terms, if any, are set forth in the MSA.

PART F — Dispute Resolution

Any dispute arising out of or relating to these Disclosures is governed by the laws of the State of Florida, without regard to conflict-of-laws principles, and is subject to the tiered dispute-resolution process set forth in the MSA, which includes good-faith negotiation, non-binding mediation in Palm Beach County, Florida, and final, binding, confidential arbitration before a single arbitrator under the AAA Commercial Arbitration Rules, seated in Palm Beach County, Florida, together with a class-action waiver and jury-trial waiver and the carve-outs and prevailing-party provisions stated in the MSA. Where these Disclosures are presented to a person who is not a party to the MSA, that process applies to the maximum extent permitted by law, the carve-outs in the MSA apply, and nothing here waives any non-waivable right.