Privacy policy

Surge Software Solutions Pvt Ltd ("Surge", "we") of Bengaluru, Karnataka, India is the data fiduciary (data controller) for this website, surgesoftware.co.in, and for every product we run on its own website, including ReadyBuyerFinder, VisitorCompanyFinder, OutreachSender, ReachDak, IndianFirmData, YourPostWriter, RankingArticles, SocialPostScheduler, BrandInAIAnswers, BrandMentionWatch, TalkingVideoAds, AutoVideoStudio, SlideDeckMaker, ShortsFromVideo, ListingPhotoStudio, CustomerReplies, HelpCenterKit, CallAnswerDesk, InboxDraftWriter, CallNotesAI, DictationDesk, OPDNotes, ContractReviewDesk, CABookkeeper, HandoverCheck, CitedWriter, ScreeningInterviews, CustomerInterviewAI, and our products OrderDak, Tagaada, HookVerdict and Surge Migrate. Shishya (shishya.in) has its own privacy policy.

Some products have a short page of extra notes for that product. Where a product page says more than this policy, the product page applies to that product. Questions: corp@surgesoftware.co.in.

• Account details: your name, email address and, if you sign in with Google, your profile picture. Google sign-in shares only your name, email and profile picture with us. We do not ask Google for your contacts, files or mail at sign-in.
• What you put into a product: documents, website addresses, recordings, messages, contacts, posts and other content you upload or create, and the results the product makes from them.
• Connected accounts: if you choose to connect another service (for example Google, Microsoft, LinkedIn, Meta or WhatsApp, HubSpot or Zoho), we receive the data that connection needs to do the job you asked for. You can disconnect at any time.
• Payments: if you add a prepaid balance, Razorpay processes the payment. We receive a payment reference and status, not your full card or bank details.
• Technical data: IP address, browser, pages used, errors and timestamps, kept in server logs to run, secure and debug the service.
• Enquiries: what you send through a contact form or by email.

• To provide the product you signed up for, including its AI features.
• To sign you in, secure your account and prevent abuse.
• To send service emails, such as sign-in codes, alerts and receipts.
• To charge third-party costs at cost from your prepaid balance, when you use a paid add-on.
• To answer your questions and support requests.
• To fix problems and improve the products.

We do not sell personal data, we do not show ads, and we do not share your data with advertisers. We do not use your content to train AI models for anyone else.

• Our servers: the products' applications and databases run on Surge's own servers in Bengaluru, India.
• Network: traffic to the product websites passes through Cloudflare's global network, which may handle it outside India.
• AI: AI features run first on Surge's own AI server in Bengaluru. Some products can send a request to Anthropic (Claude), outside India, as a fallback when our own model fails or when you switch that option on. Where a product offers this, it says so in its settings or pricing page.
• Email: service emails are sent through Resend, outside India.
• This website: surgesoftware.co.in is hosted on Vercel, outside India, and contact-form messages are delivered to our Microsoft 365 mailbox.

When data leaves India, it goes only to the service providers listed in this policy, for the purposes listed here.

We use these providers. Many are used only by one product, and only when that feature is switched on:

• Cloudflare: network and security for the product websites.
• Resend: service email.
• Razorpay: payments for prepaid balances.
• Google: sign-in, and Google services you choose to connect.
• Anthropic: AI fallback in some products.
• Sarvam AI (India): speech and Indian-language features in some products.
• Exotel and Twilio: phone calls in CallAnswerDesk, when set up.
• ElevenLabs and fal: voice and video engines in TalkingVideoAds, at cost, when you switch them on.
• OpenAI and other AI answer engines: queried by BrandInAIAnswers to measure how they mention a brand.
• Hunter, People Data Labs, Prospeo and IPinfo: business contact and company data in ReadyBuyerFinder and VisitorCompanyFinder, when you switch them on.
• Prolific and Cint: research panel recruiting in CustomerInterviewAI, when you use it.
• Telegram: optional alerts to your own team.
• Vercel and Microsoft 365: this website and its contact form.

Each provider receives only what it needs for its task, under its own terms and privacy policy.

When a business uses our products with its own customers, candidates, patients or website visitors, that business decides why and how the data is used, and we process it on its behalf. Requests about that data should go to the business first; we will help it respond.

VisitorCompanyFinder runs a small script on our customers' websites. It uses a visitor's IP address to work out which company the visit came from. In strict mode (for audiences in the EU and India), it stores nothing on the visitor's device before consent, works at company level only, and never stores the raw IP address. It identifies a person only when they opt in through a form or chat, and it records that consent. It respects Global Privacy Control signals. The website owner must show its visitors a privacy notice and, where required, collect consent.

The products use cookies to keep you signed in and secure your session. We do not use advertising or cross-site tracking cookies.

We keep your account and content while your account is open. When you delete content or close your account, we delete it from our live systems, except where the law requires us to keep records (for example payment records) or where we need it to resolve a dispute.

Some products delete data sooner by default. For example, OPDNotes deletes consultation audio when the doctor signs the note.

Under the Digital Personal Data Protection Act, 2023, you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, and withdraw consent you gave;
• nominate another person to exercise these rights for you;
• raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Email corp@surgesoftware.co.in from the address on your account. Most rights can also be used from the product's account settings.

Grievance officer: Venu Gopal Reddy Muvva, Director, Surge Software Solutions Pvt Ltd, Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066. Email corp@surgesoftware.co.in, phone +91 91600 57000.

Our products are for adults and businesses. They are not meant for anyone under 18, and we do not knowingly collect children's data.

We use encryption in transit, access controls, separate data per workspace and audit logs. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

If we change this policy, we will update the date above and, for important changes, tell account holders by email.

Contact: Surge Software Solutions Pvt Ltd, Bengaluru, Karnataka, India. corp@surgesoftware.co.in. See also our terms of use.