We, SurfGeo Inc. ("SurfGeo", "we"), welcome your use of our website and web app ("Services"). This Privacy Policy explains how we collect, use, and protect personal data when you access our Services. Personal data refers to any information relating to an identified or identifiable individual, such as your name or email address.
1. Provider
The provider of the Services and controller under applicable data protection laws is:
SurfGeo Inc.
Ahmedabad, India
Email: privacy@surfgeo.com
2. Data Processing to Enable Use
When you access our website, certain connection data is transmitted to our servers, including:
- IP address
- Date and time of request
- Referring URL
- Device identifiers
- Device type and browser version
This data is used solely to operate and secure our Services and is not merged with other personal data. Legal basis: legitimate interest (GDPR Art. 6(1)(f) equivalent under Indian IT/Privacy laws).
3. Data Processing upon Request
3.1 Registration, Waitlist, and Login
For registration and waitlist management, we collect:
- Email address (for authentication)
- Organization name (for managing waitlist)
Purpose: enabling access and managing requests.
Legal basis: contract fulfillment and legitimate interest.
Storage: 30 days, unless extended with your consent.
3.2 Authentication via Firebase Auth
Authentication is handled via Firebase Auth (Google Ireland Limited). Firebase processes email and IP to enable login via magic link.
Legal basis: contract fulfillment.
3.3 Newsletter Subscription
If you subscribe to newsletters, we store your provided name and email to send updates on products, features, and company news.
Legal basis: consent (GDPR Art. 6(1)(a)).
4. Data Processing for Service Optimization
We use cookies for functionality, analytics, and optional advertising. Necessary cookies ensure Service operation; analytical or marketing cookies require your consent.
You can manage or disable cookies in your browser, but this may limit some features.
4.1 Google Analytics
We use Google Analytics with anonymized IPs to analyze usage patterns. Google may use the data for its own purposes. Legal basis: consent.
4.2 Firebase Hosting
Our Services are hosted on Firebase Hosting by Google Ireland Limited. Connecting to Firebase may share your IP for security purposes. Data processing outside the EU is under EU-US Data Privacy Framework.
5. Data Transfer
Data may be transferred outside the EU/India only if necessary for Services, consented, or legally required. Transfers to countries without adequate protection (e.g., USA) are covered by standard contractual clauses or similar legal safeguards.
6. Storage Duration & Security
We retain personal data only as long as necessary for Service provision or to meet legal obligations. Technical and organizational measures protect data from unauthorized access, alteration, or loss.
7. Your Rights
You have the right to:
- Access your data
- Correct inaccurate data
- Delete personal data
- Restrict processing
- Object to processing
- Withdraw consent at any time
Requests can be submitted to privacy@surfgeo.com.
8. Changes to the Privacy Policy
We may update this Privacy Policy periodically. The current version will always be available on our website.
