Privacy Policy

This Privacy Policy explains what information Surfaced AI collects when you use our AI Visibility Audit Platform, why we collect it, and the choices you have. It applies to surfaced.so and the audit, dashboard, and free-tool pages hosted under this domain.

This is placeholder legal copy for a demo project. Replace it with counsel-reviewed language before handling real user data in production.

Account information: when you create an account, we store your email address and a hashed password (via Supabase Auth). If you sign in with Google, we receive your name, email, and profile image from your Google account.

Audit data: the URL you submit for scanning, the resulting score, issues, and detected signals. If you run an audit while signed in, this is saved to your account history; anonymous audits are processed but not persisted.

Billing information: if you subscribe to Pro, payment is handled entirely by Stripe. We store your Stripe customer ID and subscription status, never your card number.

Usage analytics: page views and product events (such as starting an audit or beginning checkout) are recorded through PostHog to help us understand how the product is used.

To run the audits you request and show you the results.

To operate your account, dashboard, and audit history.

To process subscription payments and manage billing through Stripe.

To send account-related email (welcome messages, audit completion notices, receipts) through Resend.

To understand aggregate product usage and improve the service.

We use a small number of cookies and local storage entries to keep you signed in (via Supabase Auth) and to power product analytics (via PostHog). We do not use third-party advertising cookies.

We rely on a small number of subprocessors to operate Surfaced AI: Supabase (authentication and database hosting), Stripe (payment processing), Resend (transactional email delivery), and PostHog (product analytics). Each provider only receives the data necessary to perform its function. See our Data Handling page for details.

Account and audit data is retained for as long as your account is active. You can request deletion of your account and associated audit history at any time by contacting us.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at the address below and we will respond within a reasonable time.

Surfaced AI is intended for business use by founders and operators. It is not directed at children under 16, and we do not knowingly collect personal information from them.

We may update this policy from time to time. Material changes will be reflected by updating the date below.