Privacy Policy

GoSurge LLC ("Company," "we," "us," or "our") operates the SURGE platform (the "Platform" or "Service"), accessible at gosurge.ai and related subdomains. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use the Platform. By accessing or using the Service, you consent to the data practices described in this Privacy Policy.

If you do not agree with this Privacy Policy, please do not access or use the Platform.

Information We Collect

1.1 Information You Provide Directly

When you create an account, use the Platform, or contact us, we may collect:

• Account registration information: your name, email address, phone number, company name, and billing address
• Payment and billing information: credit card details, billing history, and transaction records (processed through our third-party payment processor)
• Communication data: contact records, phone numbers, SMS/MMS message content, call recordings, voicemails, and campaign content you upload or create within the Platform
• Support inquiries: information you provide when contacting our support team

1.2 Information Collected Automatically

When you access the Platform, we automatically collect:

• Device and browser information: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, features used, timestamps, click paths, session duration
• Log data: server logs, error reports, and performance metrics
• Cookies and similar technologies: session cookies, analytics cookies, and local storage used to maintain your session and improve the Service

1.3 Information from Third-Party Services

If you connect third-party accounts to the Platform (such as Google, Twilio, or other integrations), we may receive information from those services in accordance with their respective privacy policies and your authorization settings. See Section 6 for specific disclosures about Google API Services.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Platform and its features
• To process transactions, manage billing, and send invoices
• To send and receive SMS/MMS messages and phone calls on your behalf
• To provide AI-powered responses and campaign automation features
• To provide customer support and respond to your inquiries
• To monitor and enforce compliance with our Terms of Service and applicable laws
• To detect, prevent, and address fraud, abuse, security issues, and technical problems
• To analyze usage patterns and improve the Platform's features and performance
• To communicate with you about service updates, billing, and administrative matters
• To comply with legal obligations, respond to legal process, and protect our rights

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party vendors who assist in operating the Platform, including cloud hosting providers, payment processors, telecommunications carriers (e.g., Twilio, Signal House), and analytics services. These providers are contractually obligated to use your information only for the purposes of providing services to us.
• Telecommunications Carriers: Message content, sender/recipient phone numbers, and related metadata are transmitted to carriers and messaging infrastructure providers as necessary to deliver your SMS/MMS messages and phone calls.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent: We may share your information for other purposes with your explicit consent.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Access controls and authentication requirements for personnel accessing Platform data
• Regular security reviews and monitoring

Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Communication logs and message content may be retained for compliance and audit purposes.

Upon account termination, we retain data in accordance with our data retention schedule and applicable legal requirements. You may submit a written request to delete your data, and we will process it in accordance with applicable law.

Google API Services — User Data Policy Compliance

The SURGE platform integrates with Google API Services for user authentication and authorized data access. This section specifically addresses our handling of data obtained through Google APIs, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

6.1 What Google User Data We Access

When you authenticate with your Google account through the Platform, we may access the following information based on the scopes you authorize:

• Your Google account email address
• Your name and profile information
• Any additional data corresponding to the specific Google API scopes you have explicitly authorized during the OAuth consent process

6.2 How We Use Google User Data

Google user data accessed through the Platform is used exclusively to:

• Authenticate your identity and log you into the Platform
• Provide the specific Platform features and services you have requested
• Display your name and email within the Platform interface for your convenience

We do not use Google user data for any purpose other than providing or improving user-facing features of the Platform that are visible to you.

6.3 How We Store Google User Data

Google user data is stored securely on our servers with the following protections:

• Encryption in transit (TLS 1.2 or higher) and at rest
• Access restricted to authorized personnel on a need-to-know basis
• Logical separation of Google user data from other Platform data

6.4 How We Share Google User Data

We do not sell, rent, lease, or trade Google user data to any third party.

We do not share, transfer, or disclose Google user data to third parties except:

• As necessary for our service providers to perform functions on our behalf (e.g., cloud infrastructure hosting), subject to confidentiality obligations
• As required by applicable law, regulation, or legal process
• With your explicit consent

6.5 Prohibited Uses

In accordance with Google's requirements, we do not use Google user data for:

• Serving advertisements, including retargeting, personalized, or interest-based advertising
• Transferring or selling data to advertising platforms, data brokers, or information resellers
• Determining creditworthiness or for lending purposes
• Any purpose not explicitly disclosed in this Privacy Policy
• Training or improving generalized AI or machine learning models unrelated to the Platform's functionality

6.6 Limited Use Disclosure

6.7 Revoking Access

You may revoke the Platform's access to your Google account at any time by visiting your Google Account permissions page at myaccount.google.com/permissions and removing SURGE from the list of authorized applications. Revoking access may limit or disable certain Platform features that rely on Google authentication.

Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Opt-Out: You may opt out of non-essential communications from us.
• Data Portability: Where applicable, you may request your data in a portable format.

To exercise any of these rights, contact us at [email protected].

Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

Third-Party Links and Services

The Platform may contain links to third-party websites, services, or integrations. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on the Platform and updating the "Effective Date" at the top. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: