Legal

Privacy Policy

Last updated: February 2026

1. Information We Collect

We collect information you provide directly to us when you create an account, including your name, email address, and password. We also collect financial data you enter into the platform (invoices, transactions, expenses) as part of delivering the service.

We automatically collect certain usage data such as browser type, IP address, pages visited, and time spent on the platform to improve the service.

2. How We Use Your Information

  • To provide, maintain, and improve the SurgeBooks service
  • To send transactional emails (account confirmation, password reset)
  • To respond to your support inquiries
  • To monitor for and prevent fraudulent or abusive activity
  • To comply with legal obligations

We do not sell your personal data to third parties.

3. Data Storage and Security

Your data is stored on Supabase infrastructure with row-level security enabled. Each organisation's data is logically isolated — no other user or organisation can access your financial records. All data is encrypted in transit (TLS) and at rest.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your data will be permanently removed within 30 days, except where we are required to retain it by law.

5. Cookies

We use essential cookies to keep you logged in and maintain your session. We also use analytics cookies (with your consent) to understand how users interact with the platform. You can manage cookie preferences via the cookie consent banner.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your data in a standard format

To exercise any of these rights, contact us at privacy@surgebooks.com.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice. Your continued use of SurgeBooks after changes take effect constitutes acceptance of the updated policy.

8. Contact

Questions about this policy? Email us at privacy@surgebooks.com.