Privacy Policy
Effective Date: September 11, 2026
Surgy (“Surgy,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information collected through our website, Early Access program, products, services, integrations, and other interactions with Surgy.
This Privacy Policy explains what information we collect, how we use it, when it may be shared, how it is protected and retained, and the choices and rights available to you.
Surgy is being developed as an AI-powered business platform designed to work with business systems and workflows, including Gmail and other connected services. Surgy is also designed around human review and approval of important AI-supported recommendations and actions.
1. Information We Collect
We may collect information that you provide directly to us when you visit our website, request Early Access, submit a form, communicate with Surgy, create or manage an account, connect a supported service, or use our products.
This information may include your name, email address, telephone number, company or business information, job-related information, messages or questions you submit, account information, and other information you voluntarily provide.
We may also automatically collect certain technical and usage information when you interact with our website or services. This may include your IP address, browser type, device type, operating system, pages visited, referring pages, timestamps, approximate location derived from an IP address, diagnostic information, and general usage information.
2. Information From Connected Services
Surgy may allow users to connect third-party business services, platforms, or accounts.
Depending on the service you connect and the permissions you authorize, Surgy may receive information from those services that is necessary to provide the requested functionality.
Surgy is designed to work with existing business systems rather than requiring users to replace them. Publicly identified integrations and supported functionality may change as the platform develops.
We only intend to access connected-service information that is reasonably necessary to provide functionality requested or authorized by the user.
3. Google and Gmail Data
If you connect a Google or Gmail account to Surgy, we may receive information made available through the Google permissions that you authorize.
Depending on the Surgy functionality being used, this information may include Gmail message content, conversation information, sender and recipient information, subject lines, message metadata, labels, attachments, dates, or other information associated with authorized Gmail activity.
Surgy may process this information to provide supported features such as email context review, email search, summaries, inbox assistance, recommendations, suggested next steps, draft responses, or related Gmail-based functionality.
Surgy is intended to work alongside Gmail rather than replace it, and users remain responsible for reviewing important communications and AI-supported recommendations.
Surgy does not sell Google user data.
Surgy does not use Google user data for targeted or personalized advertising.
Surgy does not use Google Workspace API data to develop, improve, or train generalized AI or machine-learning models.
Google user data is used only as necessary to provide or improve the user-facing functionality authorized by the user, subject to applicable Google requirements.
Users may revoke Surgy’s Google Account access through their Google Account permissions.
Surgy’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements. Google also requires applications using protected Google data to clearly disclose how that data is accessed, used, stored, and shared.
4. How We Use Personal Information
We may use the information we collect to provide, operate, maintain, and improve Surgy; process Early Access requests; create and maintain accounts; provide requested AI-assisted functionality; connect authorized third-party services; respond to inquiries and support requests; communicate about accounts, product updates, features, security, or service changes; understand website and product usage; troubleshoot technical issues; prevent fraud, misuse, or security threats; comply with legal obligations; and protect Surgy, our users, and others.
We may also use aggregated or de-identified information for analytics, product improvement, research, and business operations where that information can no longer reasonably identify an individual.
5. Artificial Intelligence Processing
Certain Surgy features may use artificial intelligence to analyze authorized information and provide summaries, classifications, search results, recommendations, suggested responses, possible next steps, or other forms of assistance.
AI-generated information may be inaccurate, incomplete, or missing important context.
Surgy is designed around an approval-first approach. AI may help identify information or prepare recommendations, but users remain responsible for reviewing important details and deciding whether an action or response is appropriate.
Information may be processed by technology providers that assist Surgy in delivering AI functionality. Where applicable, those providers may process information only for purposes associated with providing contracted services to Surgy and subject to applicable privacy and security obligations.
6. How We Share Information
We may share information with service providers that help us operate and provide Surgy, including cloud-hosting providers, database and infrastructure providers, analytics services, authentication providers, security providers, customer-support providers, form-processing systems, communication providers, and AI technology providers.
We may also disclose information when reasonably necessary to comply with applicable law, respond to lawful government or legal requests, investigate fraud or security incidents, enforce agreements, protect the rights and safety of Surgy or others, or participate in a merger, acquisition, financing, restructuring, sale, or similar corporate transaction.
We do not sell personal information.
We do not disclose personal information to third parties for materially unrelated purposes without appropriate notice, authorization, or another valid legal basis.
7. Third-Party Services and Integrations
Surgy may provide integrations with third-party platforms and services.
When you authorize an integration, information may be exchanged between Surgy and that service according to the permissions you approve.
Your use of the third-party service remains subject to that provider’s own terms and privacy practices. Surgy is not responsible for the independent privacy practices of third parties that it does not control.
We recommend reviewing the permissions requested before connecting an external account.
8. Cookies and Similar Technologies
Surgy may use cookies, local storage, log files, pixels, and similar technologies to operate the website and services, maintain security, remember preferences, understand usage, diagnose technical problems, and improve user experience.
Some technologies may be required for the website or service to operate properly. Other technologies may support analytics or optional functionality.
Where required by applicable law, we will obtain appropriate consent before using non-essential cookies or similar technologies.
If Surgy later uses advertising pixels, remarketing technologies, session-recording software, or additional analytics platforms, this Privacy Policy and any applicable cookie notice should be updated accordingly.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the services, maintaining accounts, responding to requests, maintaining security, complying with legal requirements, resolving disputes, and enforcing agreements.
Retention periods may differ depending on the type of information, why it was collected, and whether it is associated with a connected third-party service.
Google or Gmail data will be retained only for as long as reasonably necessary to provide the functionality authorized by the user, unless a longer period is required by law or expressly authorized.
When information is no longer required, we may delete, anonymize, or otherwise securely dispose of it in accordance with our retention practices.
10. Data Security
We use reasonable administrative, organizational, and technical measures designed to protect personal information from unauthorized access, use, alteration, disclosure, loss, or destruction.
These measures may include access controls, authentication protections, security monitoring, infrastructure safeguards, encryption where appropriate, and restrictions on access to personal information.
However, no method of transmitting or storing information can be guaranteed to be completely secure.
11. Your Privacy Choices and Rights
Depending on where you live, applicable privacy laws may give you rights concerning your personal information. These may include rights to access information, obtain a copy of certain information, correct inaccurate information, request deletion, restrict or object to certain processing, withdraw consent where processing depends on consent, or opt out of certain disclosures.
To submit a privacy request or ask a question about your personal information, please use the Contact page on Surgy.io. Contact Surgy
Please include enough information for us to understand your request. We may need to verify your identity before fulfilling certain privacy requests.
We will not discriminate against individuals for exercising privacy rights provided by applicable law.
12. California Privacy Rights
California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, when those laws apply to Surgy.
Those rights may include the right to know what personal information is collected and how it is used or disclosed, request access to certain information, request deletion, request correction, opt out of certain sales or sharing, limit certain uses of sensitive personal information when applicable, and exercise privacy rights without unlawful discrimination.
California’s Attorney General identifies rights including access, deletion, correction, opt-out of sale or sharing, and non-discrimination.
Surgy does not sell personal information.
If our practices change in a way that constitutes the “sale” or “sharing” of personal information under California law, we will provide any notices and opt-out mechanisms required by applicable law.
California residents may submit applicable privacy requests using the Surgy Contact page.
13. European Economic Area, United Kingdom, and Other Privacy Rights
Depending on applicable law, individuals in the European Economic Area, United Kingdom, Switzerland, or other jurisdictions may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of certain personal information.
Where processing is based on consent, you may also have the right to withdraw that consent.
You may have the right to complain to the applicable data-protection authority in your jurisdiction.
Where required, Surgy will use appropriate safeguards when personal information is transferred internationally.
Privacy-related requests can be submitted through the Surgy Contact page.
14. Children’s Privacy
Surgy is intended for business and professional use and is not directed to children under 13.
We do not knowingly collect personal information from children under 13.
If we become aware that personal information from a child has been collected in violation of applicable law, we will take reasonable steps to delete it.
15. Business and Organization Accounts
If you use Surgy through your employer, company, or another organization, that organization may administer your account and may have access to certain information associated with your use of the service.
In some circumstances, Surgy may process personal information on behalf of a business customer. Additional terms, agreements, or data-processing terms may apply to those relationships.
16. International Data Transfers
Surgy and its service providers may process personal information in countries other than the country where you reside.
Privacy and data-protection laws may differ between jurisdictions.
Where required by applicable law, Surgy will use appropriate contractual, organizational, or other safeguards for international transfers of personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy as Surgy develops, our features or integrations change, our privacy practices evolve, or legal and regulatory requirements change.
When changes are made, we will revise the Effective Date at the top of this page.
If a change materially affects how personal information is handled, we may provide additional notice when required by applicable law.
18. Contact Us
If you have questions about this Privacy Policy, Surgy’s privacy practices, connected-service information, or your privacy rights, please contact us through our contact page.