Privacy Policy

1. Information We Collect

We collect information you provide directly to us, as well as information generated through your use of our services.

Account Information

• Name, email address, and password when you create an account
• Company name and website URL
• Billing information and payment details (processed securely by our payment provider)
• Profile preferences and selected AI engine configurations

Usage Data

• Log data such as IP address, browser type, device information, and pages visited
• AI visibility queries, scan results, and analytics data generated by our platform
• Feature usage patterns and interaction data

Cookies and Tracking

We use cookies and similar technologies to provide, protect, and improve our services. Please refer to our Cookie Policy for more details.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our AI visibility analytics services
• Process transactions and send related information including confirmations and invoices
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate about products, services, offers, and events
• Monitor and analyze trends, usage, and activities in connection with our services
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize and improve your experience on our platform

3. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting, and customer service
• AI Engine Queries: When performing visibility scans, we send brand-related queries to AI engines (ChatGPT, Gemini, Perplexity, Claude, etc.). These queries do not include your personal information
• Legal Compliance: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business
• With Your Consent: When you have given us explicit permission to share your information

4. Data Security

We take reasonable measures to help protect your personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. All data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption. Access to personal data is restricted to authorized personnel only. However, no method of transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data
• Portability: Request a copy of your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction: Request that we restrict processing of your personal data

To exercise any of these rights, please contact us at privacy@surfrank.ai.

7. International Data Transfers

SurfRank is based in Singapore. Your information may be transferred to, and maintained on, servers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. By using our services, you consent to the transfer of your information to Singapore and other jurisdictions where we operate. We ensure appropriate safeguards are in place for any international transfers of personal data.

8. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after any modifications indicates your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: