Privacy Policy

What we collect

When you sign up for Surfio, we store your email address, a hashed password, and a Stripe customer ID. When you create a project, we store the product description, target customer, competitor names, and the list of subreddits and Hacker News search queries you ask us to monitor. We do not collect your Reddit or Hacker News credentials at any point.

What we monitor

Surfio polls public Reddit and Hacker News content using their public APIs and unauthenticated endpoints. We store the title, body, author username, and URL of posts that match your project's sources, along with our classifier's relevance score and any reply we draft for you. We never read private messages or non-public content.

What we never do

• We do not auto-post replies on your behalf
• We do not access your Reddit or Hacker News account
• We do not sell your data to third parties
• We do not train models on your project descriptions

Third-party services

Surfio is built on Vercel, Supabase, Stripe, and the Vercel AI Gateway (which routes to Anthropic for Claude). Each of these services has its own privacy policy. We share only the minimum data required for each service to function: your email and password hash with Supabase (auth), your billing details with Stripe (payments), and the post content of signals we classify with the AI Gateway (which forwards to Anthropic).

Your rights

You can export or delete your account and all associated data at any time by emailing privacy@signal.app. Under GDPR and CCPA, you have the right to access, correct, port, and erase your personal data.

Contact

Questions about this policy? Email privacy@signal.app.