Privacy Policy

• Account details from Google sign-in or email sign-up: name, email address, and profile photo.
• Workspace content you create: tasks, subtasks, comments, files, departments, and agent settings.
• Connected services you choose to link, such as Google Calendar, Google Drive, Gmail, Granola, Fathom, Fireflies, or Zoom, including meeting titles, notes, and action items.
• AI provider keys you add (Bring Your Own AI), stored encrypted.
• Basic usage and device information needed to keep the service secure and working.

We use your information only to provide Surf Tasks: creating tasks from meetings, scheduling, drafting work with AI agents, searching your organization's knowledge, and keeping your account secure. We do not use your content for advertising.

Surf Tasks' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar, Drive, and Gmail data is used only to provide features you request, is not transferred to others except as needed to provide those features, and is never used to train general AI models.

When an agent works on a task, relevant content is sent to the AI provider you configured (for example OpenAI, Anthropic, Google, or xAI) using your own key. Those requests are governed by that provider's terms. Surf Tasks does not use your content to train AI models, and no AI agent can mark work as done without human approval.

Each organization's data is isolated, and access follows your organization and department permissions. Meeting connections are private to the user who connected them. Credentials and keys are encrypted and removed before any content is indexed for search.

We share information only with service providers that help us run Surf Tasks (hosting, storage, and the AI providers you select), when required by law, or with your consent. We never sell personal information.

We keep your data while your account is active. You can disconnect any service at any time in Settings, delete tasks and files, or request full account deletion by emailing support@surftasks.com. Deleted data is removed from active systems within 30 days.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or object to certain processing. Contact us and we will respond within 30 days.

We may update this policy and will note the date above when we do. Questions? Email support@surftasks.com.