Compliance & Data Privacy

Honest About What We Do and Don't Do

We're an early-stage AI company. We don't have big-enterprise certifications yet — but we do take data privacy seriously, and this page tells you exactly how.

Our Privacy Commitments

What we actually do — no inflated claims

GDPR

Compliant

We respect EU data subject rights — access, deletion, portability, and restriction. Data Processing Agreements available on request.

CCPA

Compliant

California residents can request to know, delete, and opt out of sale of their personal information. We honour every request promptly.

Data Minimisation

By Design

We collect only what our platform needs to function. No third-party tracking, no ad profiling, no selling of your data — ever.

Encryption Standard

AES-256

All data is encrypted at rest with AES-256 and in transit with TLS 1.3. Encryption is not optional — it's the default for every account.

AI Data Governance

How your data interacts with our AI pipelines

No Cross-Tenant Leakage

Your market data, signals, and user inputs are processed in isolated pipelines. No other customer can access your data — not even accidentally.

Your Data Doesn't Train Our Models

We do not use your data to train or fine-tune shared AI models without explicit written consent. Your inputs stay yours.

Audit Logs Baked In

Every action through our platform — signal trigger, workflow execution, data access — is logged with timestamp, user, and IP for your review.

Delete on Request

Close your account and your data is purged within 30 days from all live systems and backups. No dark patterns, no friction.

Your Rights

You can exercise these at any time by emailing us

Right to Access

Request a full export of all personal data we hold about you.

Right to Rectification

Ask us to correct any inaccurate personal information we hold.

Right to Erasure

Request deletion of your account and all associated personal data.

Right to Portability

Receive your data in a machine-readable format to take elsewhere.

To exercise any of these rights, email privacy@surgepulse.com. We respond within 30 days.

Need a Data Processing Agreement?

We provide DPAs and privacy documentation for enterprise customers. Reach out and we'll turn it around fast.

Contact Us