Privacy Policy

1. Information We Collect

Account information. If you create an account, we collect the email address and password you provide (your password is handled securely by our authentication provider and is never visible to us in plain text).

Store URLs and audit data. When you run an audit, we collect the store URL you submit and the results of that audit (score, findings, and the underlying page content and performance data we gathered to produce them).

Usage data. We use basic, privacy-respecting analytics to understand how the site is used (e.g., which pages are visited). This does not include anything you type into forms.

2. Information We Collect About Audited Stores

When you submit a store URL for an audit, Surge automatically visits that store’s public homepage and, where available, its public product catalog, to generate your report. We only access information that is publicly visible on the storefront — we do not log in to your store, access its admin panel, or request any private data. You are responsible for only submitting stores you own or are authorized to audit (see our Terms of Service).

3. How We Use Information

We use the information above to:

• Run audits and generate your reports
• Create and maintain your account, if you sign up
• Let you claim and revisit past audits
• Maintain, secure, and improve Surge
• Communicate with you about your account or your audits

4. How We Share Information

We don’t sell your information. We share information only with the service providers that power Surge, each of which processes data on our behalf to deliver the product:

• Supabase — hosts our database and handles account authentication.
• Anthropic — powers the AI analysis that turns raw audit data into a score and findings.
• Google (PageSpeed Insights) — provides site speed and performance data for the store being audited.
• Vercel — hosts Surge and provides basic, aggregated usage analytics.

We may also disclose information if required by law, or to protect the rights, safety, or property of Surge, our users, or others.

5. Data Retention

We keep account information for as long as your account is active, and audit reports for as long as they remain useful and shareable via their report link. You can ask us to delete your account and associated data at any time by emailing us — see Section 7.

6. Cookies & Similar Technology

Surge uses a small, essential cookie to keep you signed in if you create an account. We do not use advertising or cross-site tracking cookies.

7. Your Choices & Rights

You can request access to, correction of, or deletion of your personal information at any time by emailing ehumph7461@gmail.com. We’ll respond as promptly as we can.

8. Children’s Privacy

Surge is intended for business use by adults. It is not directed to children, and we do not knowingly collect information from anyone under 18.

9. Security

We take reasonable measures to protect your information, but no method of transmission or storage is 100% secure, and we can’t guarantee absolute security.

10. Changes to This Policy

We may update this policy as Surge evolves. If we make material changes, we’ll update the “Last updated” date above.

11. Contact

Questions about this policy? Email ehumph7461@gmail.com.