Privacy Policy
We built surfawiki so your knowledge stays private. This policy explains, in plain language, what we collect, why, and the limits of our responsibility.
Last updated June 22, 2026 · Effective June 22, 2026
Contents
1. Who we are
surfawiki is a product of SurfAWiki LLC ("surfawiki," "we," "us," or "our"), a limited liability company organized in the State of Florida, United States. This Privacy Policy applies to the surfawiki.ai website, the surfawiki web application, and the standalone surfawiki desktop application (together, the "Services").
2. What we collect
We collect only what we need to provide the Services:
- Account information — your name, email address, and authentication details, handled through our identity provider. We do not store your password.
- Content you connect or upload — the files, documents, and data from the storage locations and folders you explicitly grant us permission to ingest, and the wiki we build from them.
- Credentials and access tokens — API keys you create, and the limited, scoped access tokens needed to read the storage you connect. Where possible these are read-only.
- Usage and diagnostic data — basic logs about how the Services are used (for example, queries volume, errors, and performance) so we can keep the product working and secure.
- Billing data — processed by our payment provider. We receive confirmation of payment and limited details such as the last four digits of a card; we never receive or store your full card number.
3. How we use your information
We use the information above to: create and secure your account; ingest the content you authorize and build and serve your private wiki; answer the queries you and your authorized tools submit; provide support; process payments; and maintain, troubleshoot, and improve the reliability and security of the Services.
We do not sell your personal information. We do not use the contents of your private files to serve advertising, and we do not use your content to train third-party foundation models.
4. Sharing and sub-processors
We do not share your content with other customers, and we do not disclose it to third parties except in the limited circumstances below:
- Service providers (sub-processors) who help us run the Services under confidentiality obligations — for example, cloud hosting and infrastructure, our authentication provider, and our payment processor. They may process data only to provide their service to us.
- AI model providers — if you use features that send a query and relevant retrieved context to a large-language-model provider to generate an answer, that content is transmitted to the provider you or we configure, solely to return your result. You may use your own API keys ("bring your own key") where supported.
- Legal requirements — where we are required by law, subpoena, or valid legal process, or to protect the rights, safety, and security of users, the public, or surfawiki.
- Business transfer — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
5. Privacy by design
Each customer's wiki is isolated and reachable only with that customer's credentials. surfawiki supports private, repository, and air-gapped storage arrangements so that, depending on your configuration, your source content can remain within your own environment. We design the Services so that access is bound to your account and the keys you control.
6. Security
We use commercially reasonable administrative, technical, and organizational measures to protect your information, including encrypted transport, scoped access tokens, and credential-gated access to your wiki. No method of transmission or storage is perfectly secure, however, and we cannot and do not guarantee absolute security. You are responsible for safeguarding your own credentials and API keys.
7. Retention and deletion
We retain your content and account data for as long as your account is active or as needed to provide the Services. You may request deletion of your data or account by contacting us; we will delete or de-identify it within a reasonable period, except where we must retain limited records to comply with legal, tax, or security obligations. Backups and logs may persist for a limited time before being overwritten.
8. Your choices
You may access, correct, export, or delete your account information, disconnect any storage you previously connected, and revoke API keys at any time. Depending on where you live, you may have additional rights under applicable privacy laws; to exercise any of them, email us using the contact details below and we will respond as required by law.
9. Disclaimer and limits of responsibility
The Services are provided on an "as is" and "as available" basis. While we take privacy and security seriously, SurfAWiki LLC is not liable for loss, corruption, or unauthorized access to data arising from causes outside our reasonable control, from your own configuration or credential handling, or from third-party services you connect or direct us to use. surfawiki organizes and surfaces information automatically and using AI, which can be incomplete or inaccurate; you are responsible for independently verifying any output before relying on it. Your use of the Services is also governed by our Terms of Service, including its limitation-of-liability provisions, which are incorporated here by reference.
10. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you. Your continued use of the Services after a change takes effect means you accept the updated Policy.
11. Contact us
Questions about this Policy or your data? Email admin@surfawiki.ai and we will be glad to help.
This page is provided for general informational purposes and does not constitute legal advice.