Privacy Policy
Last updated: July 22, 2026
Surfd LLC (“Surfd,” “we,” “us”) operates the website at surfd.ai and the Surfd platform at app.surfd.ai. This policy explains what information we collect, why, and what we do with it.
We’ve kept this short and specific. It describes what we actually do, not what a template says a company like us might do.
The short version
- Our marketing website (surfd.ai) has no analytics, no tracking pixels, no cookies, and no contact forms. Visiting it does not put you in a database.
- Our platform (app.surfd.ai) stores business information belonging to our clients, so we can deliver the service they’re paying for. It uses essential login cookies only.
- We do not sell your data. We do not share it for advertising. We do not use it to train AI models.
- Your data is stored in the United States.
- If you’re a client and you want your data deleted, email us and we’ll do it.
1. The Surfd website (surfd.ai)
Our marketing site is a static website. We do not run analytics software, advertising pixels, tracking scripts, or cookies on it, and we do not operate contact forms that collect your information.
Booking a meeting. If you book a call with us, you’ll be sent to Calendly. Calendly collects the information you enter (such as your name, email address, and meeting time) on their own systems, under Calendly’s privacy policy. We receive the resulting booking details.
Hosting. The site is hosted by Netlify. Like any web host, Netlify’s servers process standard technical request data (such as IP addresses) in order to serve the page. We do not use that data for tracking, profiling, or marketing.
2. The Surfd platform (app.surfd.ai)
The platform is available to our clients. Here’s what it holds.
Account information
When you create an account, you sign in with Google. We receive your name, email address, and profile image from Google as part of that sign-in. We do not receive or store your Google password.
Client business information
To deliver the service, we store information about your business and website, including:
- Your website content, pages, and the drafts our AI content agent generates
- Your AI-visibility and search-presence metrics
- Competitor names and related competitive-intelligence data
- Settings, preferences, and account configuration
This is business information, not consumer personal information. We use it for one purpose: running the service you’re paying for.
Billing information
Payments are processed by Stripe. We never see or store your full card number. Stripe holds your payment details on their systems, under Stripe’s privacy policy. We store only the record of what you were charged and when.
Cookies
The platform uses essential cookies to keep you signed in and to keep your session secure. These are required for the service to work. Without them, you’d be logged out on every page.
We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We don’t build profiles of your browsing, and we don’t share cookie data with advertisers.
Where your data is stored
Our database (Supabase) and platform hosting (Vercel) are located in the United States. If you’re accessing Surfd from outside the US, your information will be processed here.
3. Who we share information with
We use a small number of service providers to run Surfd. We share information with them only to the extent needed to operate the service. We do not sell your data to anyone, and we do not share it with advertisers.
| Provider | What it does | What it touches |
|---|---|---|
| Supabase | Database and authentication | Account details and client business data |
| Vercel | Hosts the Surfd platform | Technical request data |
| Netlify | Hosts the Surfd website and client websites | Technical request data, published site content |
| Sign-in (OAuth) and business email | Name, email, profile image | |
| Stripe | Payment processing | Billing information |
| Otterly | AI-visibility and search tracking | Your brand and website details, submitted as tracked queries |
| Anthropic | Powers the AI content agent | Prompts and content sent for draft generation |
A note on AI
Our content agent uses Anthropic’s API to generate draft content for your website. Under Anthropic’s commercial API terms, your inputs and outputs are not used to train their models.
Nothing our AI generates is published to your website automatically. Drafts wait for your review and approval. You decide what goes live.
4. How long we keep information
We keep client business data for as long as your account is active, and for a reasonable period afterward in case you return or need it back.
You can ask us to delete it. Email sahil@surfd.ai and we’ll delete or return your data. Some copies may persist briefly in routine backups, or where the law requires us to keep records, for example transaction records we need for tax purposes.
5. Your choices
Whether or not a specific privacy law applies to you, we’ll honor these requests from any client:
- Ask what we hold. We’ll tell you what data we have about your business.
- Ask us to correct it. If something’s wrong, we’ll fix it.
- Ask us to delete it. We’ll delete it, subject to the backup and legal-records exceptions above.
- Take it with you. We’ll provide your data in a usable format.
Email sahil@surfd.ai and we’ll respond within 30 days.
6. Security
We use standard protections including encrypted connections, access controls, and row-level security in our database so clients can only access their own data.
We’re a small company and we’ll be straightforward with you: no system is perfectly secure. If we ever become aware of a breach affecting your information, we’ll tell you promptly and directly.
7. Children
Surfd is a business tool. It’s not directed at anyone under 18, and we don’t knowingly collect information from children.
8. Your own website’s visitors
If we build or host a website for you, you decide what that site collects from its visitors: forms, analytics, or anything else. Your website’s relationship with its visitors is yours to manage, and you’re responsible for any privacy notice it needs. This policy covers Surfd’s own services.
A note on our role. For the business information you put into the platform, we act on your instructions. You decide what goes in, what gets published, and what gets deleted. We don’t use your business data for our own purposes beyond running the service. If someone contacts us about data belonging to one of our clients, we’ll direct them to that client rather than acting on it ourselves.
9. Changes to this policy
If we change how we handle data, we’ll update this page and change the date at the top. If the change is significant, we’ll email clients directly rather than expecting you to notice.
10. Contact
Questions about privacy, or a request about your data:
Surfd LLCsahil@surfd.ai
San Francisco, CA
This policy applies to Surfd LLC’s website and platform. It does not cover third-party services we link to, which have their own privacy policies.