Privacy notice

Noja Ventures LLC, trading as Surfup, licensed in Sharjah Media City (Shams) Free Zone, United Arab Emirates, licence number 2644471.01. For anything on this page, write to hello@surfup.ai.

Four things, and nothing else of yours:

• Your business details. Company name, website, the contact name, email and phone you give us, your market and industry, the competitors you name, and the facts you enter for your files: price range, areas served, licence number, years trading, example projects, your Arabic name.
• The questions. The list drafted for your order, your edits, and the record of which list you approved and when.
• The answers. The full text of every answer each AI assistant gave, the sources it cited, which companies it named, and what each call cost. These are answers about your market, produced by third-party assistants. They are the evidence behind every number in your report, which is why we keep them rather than only the totals.
• The record of the order. Payment status, the Stripe identifiers for your payment, the emails we sent you, and a log of what happened and when.

We never see or store your card number. Card payments are handled by Stripe, which holds the card details under its own terms.

To carry out the order you placed, which is the contract between us. The answers in particular exist so that any figure we report can be traced back to the words it came from, and so a re-check can be compared with the first one like for like.

We also keep what we must for accounting and tax, which in the UAE means payment and invoice records for five years.

The questions for your order are sent to the AI assistants your tier covers: OpenAI, Anthropic, Google and Perplexity. A question contains your market and, where it is the point of the question, your company name. Each provider handles it under its own terms. We do not send them your contact details, your payment details, or the facts you enter for your files.

Beyond that: Stripe for payment, Resend to send email, Supabase to host the database, Vercel to run the site, and Inngest to schedule the work. Each holds only what its job needs. Nobody else, and we never sell anything to anyone.

The database is hosted in the European Union. Some of the services above process data in the United States. Where that happens it is on the standard contractual terms those providers publish.

• Your report and the answers behind it: two years from delivery, so that a re-check can be compared against it. Ask and we delete them sooner.
• Business details and contact details: while you are a customer, and for two years after your last order.
• Payment and invoice records: five years, because UAE tax law requires it. This is the one thing we cannot delete on request.
• Enquiries that never became orders: one year.

We should be straight about the mechanism: these periods are enforced by a person today, not by an automatic job. If you ask us to delete something we do it by hand, and we confirm when it is done.

A copy of everything we hold about your business, in a form you can use. A correction. Deletion, except for the payment records above. Or simply to be told what we have.

Write to hello@surfup.ai from the address on the order, or from one we can check against it. We answer within thirty days and there is no charge.

We send you transactional email about your order: a receipt, the question list, progress, your report. We do not send marketing email unless you ask for it.

The site sets no advertising or analytics cookies and carries no third-party trackers. The only cookies are the ones that keep you signed in to your order page or to the sample report.

If this notice changes materially we will say so by email to current customers. The date at the top says when it last changed.

The commercial side of all this is in our terms of service.