1. Information We Collect

We collect information you provide directly, including your name, email address, and insurance documents you upload. We also collect usage data such as pages visited, features used, and device information.

2. How We Use Your Information

We use your information to provide and improve the Surabase service, including parsing and analyzing your insurance documents, generating coverage insights, and communicating with you about your account.

3. Document Security

Your insurance documents are encrypted in transit (TLS) and at rest (AES-256). Row-level security scopes every document to your account, so no other Surabase user can read your files. By default, uploaded policy documents are deleted after parsing; you may opt to retain the originals in your account settings. You may delete any policy or your entire account at any time.

4. AI Parsing

Surabase uses a third-party AI service to extract structured data from your uploaded policy documents. Under that provider's API terms, your documents are not used to train any model and are not retained after parsing. Document contents leave the Surabase perimeter only during this parsing step. Surabase does not use your documents to train any model of its own.

5. Data Sharing

We do not sell your personal information. Aside from the AI parsing step described above, we do not share your documents with any other third party. We may share account metadata with trusted service providers who assist in operating our platform (such as hosting and analytics), subject to confidentiality agreements. We may also disclose information when required by law.

6. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We may use analytics tools to understand how the service is used and to improve the user experience.

7. Data Retention

We retain your account information and uploaded documents for as long as your account is active. Upon account deletion, your data will be permanently removed within 30 days.

8. Your Rights

You have the right to access, correct, or delete your personal information. You may export your data or request account deletion through your account settings or by contacting us directly.

9. Children's Privacy

Surabase is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service.

11. Contact

If you have questions about this Privacy Policy, please contact us at support@surabase.com.