Privacy Policy

Last updated June 5, 2026

This policy explains what Surge (“we,” “us”) collects, how we use it, and the choices you have. We built Surge so your business knowledge makes your AI team smarter — and we treat that knowledge as yours.

What we collect

• Account data: your email and authentication details.

• Company brain: the profile, ICP, offer, brand voice, goals, notes, and other knowledge you (or your AI team) save.

• Work data: conversations with your AI employees, tasks, leads, drafts, and usage/cost telemetry needed to run and meter the service.

• We do not intentionally collect sensitive personal categories; please don’t put them into the product.

How we use it

We use your data only to provide and improve the service for you: running your AI employees, personalizing their work to your business, generating your dashboard and briefings, and metering usage. We do not sell your data, and we do not use your business data to train AI models.

Who processes it (subprocessors)

• Supabase — database and authentication hosting. Your data is stored here, encrypted in transit and at rest, and isolated per account.

• Anthropic — the AI models powering your employees. Data sent to Anthropic’s API is not used to train their models.

• Resend — outbound email delivery, used only when you enable the email channel.

These providers process data on our behalf under their own terms and security commitments.

Security & isolation

Data is encrypted in transit (TLS) and at rest. Access is scoped per account at the database level (row-level security), so one customer’s data is not visible to another. We restrict internal access to what is needed to operate the service.

Email & outreach

If you enable the email channel, outbound messages include a valid physical address and a working unsubscribe link. Unsubscribes are recorded and honored automatically, and we maintain a suppression list so opted-out recipients are not contacted again.

Retention & your choices

You can delete individual memory entries, reset your company profile, or remove company data from within the product. To request full account deletion, contact us and we will delete your data within a reasonable period, except where we must retain it to comply with law.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact us to exercise them and we will respond as required by applicable law.

Changes

We may update this policy; material changes will be communicated through the product or by email.

Contact

Privacy questions or requests: support@getsurgehq.com.