Privacy Policy

Surfacly ("we", "us") is an AI-commerce visibility platform operated from Bangladesh. This policy explains what data we collect, why, and your choices. It covers merchants who use Surfacly and the store data they connect.

Account details you provide at sign-up: name, email, workspace name, and the store domain you connect (e.g. your WooCommerce / WordPress site).

Catalog data synced from your store via the API key you generate: product titles, descriptions, schema, images, and variants. We do not pull your shoppers' personal information or order contents for catalog auditing.

AI-attributed order metadata your plugin may send us: a hashed customer email (SHA-256), order total, currency, and the AI source name. We never store the raw email.

Usage data: which dashboard pages you visit, which fixes you generate, and aggregate timing/error data used to keep the product fast and reliable.

To operate the service: run audits, generate AI fixes, score products, track AI-channel citations, and render reports inside your workspace.

To improve the product using anonymised, aggregate statistics. We do not use your catalog to train external AI models.

To send essential emails: account verification, billing notices, optional weekly digests (you can opt out in settings), and service or security announcements.

To give you support: when you report a problem, or to check that your data is processed correctly, an authorised Surfacly administrator may view your workspace as you see it. Each such session is limited to 60 minutes, records who opened it, when and why, and cannot change billing, delete data, or change your password or API keys.

Audits and fix drafts are produced by large language models accessed through OpenRouter, our AI gateway. Relevant catalog content is sent to the model to generate output and is transmitted securely.

Providers accessed via OpenRouter operate under data-processing terms that prohibit training their models on data passed through the API. Every AI fix waits for your approval unless you turn on Autopilot (Scale and Enterprise), which publishes alt text and structured data right away and can be undone.

We store data in a managed PostgreSQL database with encrypted backups, and use a short-lived cache (rate limiting and de-duplicating AI responses) with a retention of roughly 7 days or less.

We rely on a small set of sub-processors, each under their own privacy terms and data-processing agreements: Stripe (subscription billing and payment processing), OpenRouter (AI gateway), Resend (transactional email), Upstash (short-lived cache and one-time sign-in codes), Google Analytics (aggregate site analytics, cookies only with your consent), and Shopify (when you connect a Shopify store), plus our hosting and database providers.

We do not sell your data, and we don't share it for advertising.

Some sub-processors operate outside your country, so your data may be processed internationally. Where required, transfers rely on appropriate safeguards such as standard contractual clauses or equivalent protections.

We keep your data while your account is active. Deleting a workspace in settings is immediate and permanent: its store data is removed at once and cannot be restored. To delete your whole account, use Delete my account on the Account page; it is immediate, and every store you own is deleted with it. You can also email privacy@surfacly.top from the account's address and we delete it within 30 days. Billing and credit records are kept as long as tax and accounting law requires. Credit records are kept anonymised: amounts, dates and the store's domain, with no name or email. Support requests you sent are kept without your email or what you wrote.

If you uninstall the Shopify app, Shopify asks us 48 hours later to erase the store's data, and we do: products, audits, fixes, AI answers, competitor data, reports and order attribution. Your Surfacly account and billing records stay until you ask us to delete them.

That covers data held in our systems. Approved fixes are written into your own store: product copy, image alt text, and the structured-data fields we generate. Those become your store's records and stay there.

If you uninstall the WooCommerce plugin it removes everything it wrote, because a WordPress plugin runs its own uninstall routine. The Shopify app cannot: Shopify revokes an app's access token before it sends the uninstall notification, so there is no moment at which an uninstalled app can reach back into a store to clean up. Shopify merchants can remove the surfacly.* metafields under Settings, Custom data, Products, and edit or re-import product copy as usual. We would rather state this than imply a cleanup we are not able to perform.

You can access, export (CSV export in the dashboard), correct, or delete your data. Delete a workspace from the Danger Zone in workspace settings, and your whole account from the Danger zone on the Account page. For anything else, email privacy@surfacly.top.

If you're in the EU / UK, GDPR rights apply (access, rectification, erasure, restriction, portability, objection). We respond to verified requests within 30 days.

We use first-party cookies for authentication and remembering your theme preference. Google Analytics measures visits in aggregate and sets its cookies only if you accept them in the cookie banner. We don't set advertising or cross-site tracking cookies.

Surfacly is a business tool not intended for anyone under 18. We don't knowingly collect data from children.

We'll announce material changes to this policy by email at least 14 days before they take effect.

Privacy questions or requests: privacy@surfacly.top.