Privacy Policy

• Account and identity: email address, display name, profile picture if supplied by a sign-in provider, verification status, account identifiers, and sign-in records. Our authentication provider handles password hashes; we do not store plaintext passwords.
• Work and collaboration: cloud-saved designs, chats, assistant history, comments, collaborator names and emails, invitations, share settings, and presence information. Other people may supply your email in an invitation or mention you in a comment.
• Assistant requests and usage: messages, relevant design context, tool information, model choice, generated replies, request time, token counts, and credit cost. Signed-in chats can be synchronized to your account.
• Billing: subscription plan and status, Stripe customer and subscription identifiers, invoices or transaction details needed for billing support, and tax information you provide at checkout. Stripe handles payment card details; we do not receive full card numbers.
• Device and service data: IP address, browser and device information, page views, performance measurements, technical request logs, and security or rate-limit events. Browser storage holds sign-in state, preferences, local designs, and chat copies.

We collect these categories to provide accounts, work storage, collaboration, AI features, billing, security, support, and service measurement. We do not sell them or share them for cross-context behavioral advertising. Account and work data are kept while needed for your account; billing data for legal and dispute needs; and technical data for security and service improvement. The detailed criteria appear under “Retention and deletion” below.

We receive information directly from you when you sign up, create or share work, use the assistant, contact us, or purchase a plan; automatically from your browser when you use the Service; from Google, Microsoft, or an organization’s sign-in provider if you choose that method; from Stripe about billing; and from collaborators who invite or mention you. We do not buy data broker lists.

Simulation and waveform generation run in your browser. Waveform results and designs you do not save to the cloud generally remain in your browser storage unless you export, share, or send design context to the assistant. Signed-in chats can be stored both locally and in your cloud account. Clearing browser storage or changing devices may remove local-only work. Account deletion does not clear copies left in your browser; clear your browser’s site data if you also want to remove those.

• Provide the Service: create accounts, authenticate, save and sync work, share designs, answer assistant requests, enforce plan allowances, bill subscriptions, and support users. For EEA and UK users, our basis is generally performance of our contract with you.
• Protect and improve the Service: prevent fraud and abuse, investigate errors, measure site performance, and understand aggregate feature use. Our basis is generally our legitimate interest in operating a reliable and secure service; we balance that interest against your rights.
• Meet legal obligations and defend claims: keep required tax and accounting records, respond to lawful requests, and resolve disputes. Our basis is legal obligation or legitimate interest, as applicable.
• Consent: where a particular optional use requires consent under applicable law, we ask for it and you may withdraw it. Withdrawal does not affect earlier lawful processing.

We use browser storage and authentication tokens to keep you signed in, remember preferences, and keep local designs and chats. Vercel Analytics and Speed Insights measure site use and performance without advertising cookies. Sign-in providers and Stripe may use their own cookies on their sites when you choose those services. We do not use advertising pixels or cross-site behavioral advertising cookies. You can clear our local data through your browser’s site-data controls, but doing so may sign you out and erase work that exists only on that device.

When you use the assistant, we send your messages, relevant design context, and tool information to Microsoft Azure’s AI service to generate a response. We request that Azure not store the response as a persistent API object. We configure prompt caching for up to 24 hours where supported. Microsoft may also process prompts and outputs for safety and abuse monitoring under its service terms. Microsoft states that these inputs and outputs are not used to train its base models. Avoid putting information into a prompt that you do not want processed by this provider.

We use Supabase for authentication, cloud storage, and collaboration; Vercel for hosting, analytics, and performance monitoring; Microsoft Azure for AI processing and optional Microsoft sign-in; Google for optional Google sign-in; and Stripe for payments and billing. Account email delivery may involve our authentication provider and its configured email provider. These providers receive only information relevant to their roles. Some, such as Stripe and sign-in providers, may also process information under their own privacy notices when you interact with them.

Collaborators can see designs and comments according to their assigned role. Anyone with an enabled share link can obtain the access that link grants; invited people may learn your name or email in the collaboration interface. People may retain copies of information they saw or exported while they had access. We may also disclose information when legally required, to protect rights and safety, or as part of a merger, acquisition, or asset sale subject to applicable safeguards. We do not sell or share personal information for cross-context behavioral advertising.

Surf is based in the United States, and providers may process information in the United States or other locations. For transfers from the EEA, UK, or Switzerland where transfer rules apply, we use an applicable adequacy mechanism or contractual safeguards, such as standard contractual clauses, where available and required. Contact contact@surfplatforms.com for information about safeguards relevant to your data.

Our retention depends on the category and purpose. We keep account details, cloud designs, chats, comments, and sharing records while needed to provide your account or until you delete the relevant item. We keep assistant usage records while needed to administer allowances, investigate billing or abuse, and resolve disputes. We retain transaction and tax records for the periods required by applicable law. Technical logs, security events, and analytics are retained for the time reasonably needed to protect and improve the Service. Provider backups and caches may persist until their normal expiration.

You can delete your account in Settings; this cancels an active subscription and deletes associated cloud account data, including designs and chats. We may retain limited records when law permits or requires it. Account deletion does not undo exports or copies held by collaborators. Local browser copies remain on your device until you remove them or clear site data.

You can update account details in Settings, manage design sharing, delete individual designs or chats, and export designs from the editor before deleting your account. Depending on where you live, you may also have rights to know or access, correct, port, or delete personal information; object to or restrict some processing; withdraw consent; and appeal a denied request or complain to a data protection regulator. Email contact@surfplatforms.com to make a request. We may need to verify your identity and may retain information where the law permits or requires it. We will respond within the period required by applicable law and will not discriminate against you for exercising applicable privacy rights. Where the law allows, you may designate an authorized agent.

The categories listed above include identifiers, commercial information, internet or network activity, and user-provided content, some of which may contain sensitive information if you choose to include it. We collect them for the purposes and retain them according to the criteria described above. We disclose them to the service providers and collaborators described above. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you. California residents may contact contact@surfplatforms.com to exercise rights available under California law, including access, correction, deletion, and information about disclosures. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

We use HTTPS, provider encryption at rest, and database access controls to protect cloud data. No system is perfectly secure. If a breach requires notice under applicable law, we will notify affected people as required. The Service is not directed to children under 13, or a higher age where local law requires it. If you believe a child used the Service in violation of this policy, contact contact@surfplatforms.com.

We will post policy changes here with a revised date and notify account holders of material changes when appropriate. For privacy questions or requests, contact contact@surfplatforms.com, Surf Platforms Inc., San Jose, California, United States.