Privacy Policy
Last Updated: October 10, 2026
SurFox AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
By using SurFox AI, you agree to the collection and use of information in accordance with this policy.
SMS Notifications & Consent
End users explicitly consent to receive SurFox AI platform notifications during account creation. Consent is collected when users create a SurFox AI account and agree to the Terms of Service and Privacy Policy, which authorize transactional SMS notifications related to account security and platform activity. Users may opt-out at any time by replying STOP. Our Privacy Policy is publicly available here: https://www.getsurfox.com/privacy
Information We Collect
Personal Information
We collect information that you provide directly to us, including:
- •Name, email address, phone number, and company information
- •Account credentials and authentication information
- •Payment and billing information
- •Communication preferences and contact details
Usage Data
We automatically collect information about your use of our platform, including:
- •Device information, IP address, and browser type
- •Platform usage patterns and feature interactions
- •Conversation and communication data processed through our services
- •Performance metrics and analytics data
How We Use Your Information
We use the collected information to:
- •Provide, maintain, and improve our services
- •Process transactions and send transactional communications
- •Send SMS notifications related to account security and platform activity
- •Analyze conversation data to generate insights and intelligence
- •Detect, prevent, and address technical issues and security concerns
- •Comply with legal obligations and enforce our terms of service
Data Security
We implement industry-standard security measures to protect your information, including:
- •TLS encryption for data in transit and AES encryption for data at rest
- •Secure infrastructure hosted on enterprise-grade cloud providers
- •Regular security audits and compliance assessments
- •Access controls and authentication mechanisms
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to enhance our security practices.
Data Isolation & Tenant Privacy
SurFox AI operates with strict tenant isolation. Each organization's data is completely segregated and processed independently:
- •Your data is never shared with or accessible to other SurFox AI tenants
- •Machine learning models train exclusively on your tenant's data
- •Analytics and insights are generated only from your isolated dataset
- •No cross-tenant data aggregation or model training occurs
How We Share Your Information
We may share your information with:
- •Service Providers: Third-party vendors who assist in operating our platform (e.g., cloud hosting, payment processing, communication services)
- •Business Transfers: In connection with mergers, acquisitions, or asset sales
- •Legal Requirements: When required by law or to protect our rights and safety
- •With Your Consent: When you explicitly authorize us to share your information
We do not sell your personal information to third parties.
Connecting an AI Assistant to Your Account
An account administrator may optionally connect an outside AI assistant (such as Claude) to their own SurFox account. This is off by default and is a deliberate choice an administrator makes, not something we do automatically.
When connected, the assistant can read:
- •Your leads, with phone numbers masked to the last four digits and email addresses shown in full
- •Your conversations with those leads, including message text
- •The names of your active campaigns, and your usage numbers
The assistant cannot send messages, change any data, or see payment details. Access lasts 90 days and an administrator can revoke it at any time from Settings. Data shared this way is handled by the assistant's own provider under that provider's own terms, outside our control; it is not sold, and it is not used by SurFox for any purpose other than answering the administrator's request.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to operate our platform and understand how visitors use our website.
Types of Technologies We Use
- •Essential cookies: Required for core site and platform functionality, such as maintaining your session and account authentication. If you arrive through a referral or affiliate link, we also store the referral code and a random click ID in first-party cookies for up to 60 days so we can credit the referrer and attribute a signup. We do not share these with advertising networks.
- •Preference cookies: Our website chat widget stores a random identifier in your browser so we can continue your conversation if you return. It only loads if you allow preference cookies.
- •Analytics cookies: We use Google Tag Manager and Google Analytics (GA4) to understand website traffic and usage patterns
- •Advertising cookies: We use the Meta (Facebook) Pixel and OpenAI's conversion pixel to measure the effectiveness of our advertising and to deliver relevant ads to prospective customers
Third Parties Who May Set Cookies Through Our Site
- •Google (Google Analytics, Google Tag Manager)
- •Meta Platforms, Inc. (Facebook Pixel)
- •OpenAI, L.L.C. (conversion tracking pixel)
Your Choices
You can control or delete cookies through your browser settings. Most browsers let you refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Disabling certain cookies may affect the functionality of our website.
We do not load analytics or advertising technologies until you choose to allow them. When you first visit, a banner lets you accept all, reject all, or choose by category. You can change your choice at any time using the "Cookie settings" link in the footer of every page. We also honor the Global Privacy Control browser signal as a request to opt out of the sale or sharing of your personal information.
California Privacy Rights
The use of advertising pixels such as Meta and OpenAI's may be considered a "sale" or "sharing" of personal information under the California Consumer Privacy Act (CCPA). We do not sell personal information for monetary payment. To opt out of this sharing, choose "Reject all" in the cookie banner, use the "Cookie settings" link in the footer, enable Global Privacy Control in your browser, or contact us at privacy@getsurfox.com.
For more information on how these providers use data collected through their tools, see Google's Privacy Policy, Meta's Privacy Policy, and OpenAI's Privacy Policy.
Scope
This Cookies & Tracking Technologies section applies to www.getsurfox.com only. It does not apply to websites operated by our customers that embed the SurFox AI chat widget. Cookies and tracking on those sites are controlled by the site operator, not SurFox AI.
Your Rights
Depending on your location, you may have the following rights:
- •Access, correct, or delete your personal information
- •Object to or restrict certain processing of your data
- •Request data portability
- •Opt-out of SMS notifications by replying STOP to any message
- •Withdraw consent where processing is based on consent
To exercise these rights, please contact us at privacy@getsurfox.com
Data Deletion Requests
SurFox AI stores conversation and contact information on behalf of the businesses that use our platform. If you messaged one of those businesses on Facebook Messenger and want your data deleted, you can request it in either of these ways:
- •Email privacy@getsurfox.com with the subject line "Data Deletion Request." Include your name as it appears on Facebook and the name of the business you messaged, so we can find your records.
- •Contact the business you messaged directly and ask them to submit the request to SurFox AI.
We will confirm receipt within 5 business days and complete the deletion within 30 days, except where we are required by law to keep certain records. You can also remove SurFox AI's access to your Facebook data at any time in your Facebook settings under Apps and Websites.
Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you close your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after such modifications constitutes your acceptance of the updated Privacy Policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@getsurfox.com
Address: SurFox AI, Inc.
Website: https://www.getsurfox.com