This Privacy Policy explains what Surggies (operated by SurgingMarkets) collects, why, and what we do with it. We try to collect as little as possible and to be honest about the rest. Surggies is in early access, so this policy will grow as the product does.
What we collect
- Account data — your email and a hashed password (we never store passwords in plain text), or a temporary identifier if you use a demo account.
- Game and product data — the territories, Surggies, configurations, and progress you create in the app.
- Delegation activity — the tasks you ask AI agents to run and their results, so the Service can show your history and award progress.
- Minimal technical data — basic request information needed to operate and secure the Service.
Where your data is stored
Your data is stored in a SQLite database on our own server infrastructure. We do not warehouse your data across a sprawl of third-party platforms. Backups, where taken, follow the same principle: kept on infrastructure we control and only as long as useful.
We do not sell your data
We do not sell, rent, or trade your personal data to anyone. Full stop. We do not share it with advertisers. The only third parties that ever see slices of your data are the service providers described below, and only to make Surggies work.
AI providers and BYOK
When you run a delegation, the relevant prompt is sent to the AI provider you configured (for example via your own bring-your-own key) purely to perform that task. Those providers process the request under their own terms. We never sell your AI keys and use them only to call the provider on your behalf.
Cookies and analytics
Surggies uses a small number of cookies that are strictly necessary to keep you signed in. Beyond that, product analytics are off by default. Analytics only run if we have explicitly configured an analytics key (
NEXT_PUBLIC_POSTHOG_KEY); when no key is set, no analytics scripts load, no analytics cookies are set, and no events leave your browser. If and when analytics are enabled, we use them only to understand aggregate product usage (such as which steps of onboarding people complete) — never to sell your behavior.How we use your data
We use your data to operate the Service: to authenticate you, save your progress, run the delegations you request, provide support, secure the platform, and — where analytics are enabled — to improve the product in aggregate. We do not use your private content to train models.
Payments
If you subscribe to a paid plan, billing is handled by a third-party payment processor. They receive the information needed to process your payment. We do not store full card numbers on our servers.
Your rights
You can access, correct, export, or delete your data. Deleting your account removes your associated records from our database, subject to any limited retention we are legally required to keep. To make a request, contact us at the address below.
Data retention
We keep your data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete the associated data from our SQLite store, except where a short retention period is required for legal or security reasons.
Children
Surggies is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will remove it.
Changes and contact
We will update this policy as Surggies evolves and revise the “Last updated” date above. Questions or requests? Email privacy@surgingmarkets.com.