Last updated August 22, 2026
You're sharing your business idea with us — often before you've told anyone else. We take that seriously. This page explains, in plain language, what we collect, why we collect it, who helps us process it, how we protect it, and how you can ask us to access, export, correct, or delete it.
| Question | Short answer |
|---|---|
| Do you sell my data? | No. |
| Do you train AI models on my idea? | No — not with our current AI providers' settings and terms. We don't use your specific idea, business details, or documents to train AI models, and we review this regularly. |
| Can other founders see my idea? | No. Your idea is private to your account unless you choose to share it. |
| Can I delete my data? | Yes. You can delete your account and associated product data. |
| Do you use advertising cookies? | No. We do not use third-party advertising or tracking cookies. |
| What we collect | Why we collect it | Who handles it |
|---|---|---|
| Account information, including your name, email, and authentication details. | To create your account, keep you signed in, and protect access to your workspace. | Clerk handles sign-in and identity. We do not see or store your password. |
| Your idea and journey, including brainstorming inputs, research notes, decisions, conversations, and generated documents. | To help you move through the BUILD framework, generate guidance, and create useful startup documents. | Surdio and our AI providers process this content only as needed to provide the product. |
| Usage data, such as which steps you complete and when. | To save your progress, improve the experience, and understand where founders get stuck. | Surdio uses aggregated or anonymized patterns wherever possible. |
| Payment information. | To process payments and manage billing. | Our payment processor handles card details. We do not store your card information ourselves. |
Your inputs are sent to our AI providers, Anthropic's Claude and OpenAI's models, to power the conversations, guidance, and documents you get from your AI Founding Partner. We use their business API services and configure them so your data is not used to train their foundation models where those settings and terms are available. We review those terms regularly and will update this page if that changes.
We do not use your specific idea, business details, or documents to train any AI model, ours or anyone else's.
We use a small set of trusted providers to run parts of Surdio — for things like sign-in, secure data storage, AI processing, and hosting. Each one is contracted to handle only the data it needs to do its job, and to protect it under terms at least as strict as our own.
We don't share your data with any company beyond what's needed to run the product, unless we tell you first or you explicitly choose to do so. We'd never share your idea or documents with other founders, experts, or investors without your action — for example, if you choose to work with an expert through Waypoint once that feature is live.
Row-level isolation
Your data is only ever readable by your own authenticated account — enforced at the database level, not just in the app.
Encryption
Your data is encrypted both in transit and at rest.
Access control
The platform sits behind standard authenticated sign-in.
If you delete your account, we remove your ideas, phases, conversation history, generated documents, and other account data from the active product systems. Some limited records may remain only where we're required to keep them for legal, security, or payment-related reasons. There's no recovery window for product data once deletion is confirmed, so we'll always ask you to confirm first.
If you'd rather we handle any of this for you directly, email us at privacy@surdio.in. We'll acknowledge your request and let you know what we need to verify your account before making changes to, exporting, or deleting your data.
We use only the minimum cookies and similar session technologies needed to keep you signed in, maintain security, and remember your session. We do not use third-party advertising or tracking cookies.
If we make a material change to how we handle your data, we'll notify you directly — not just quietly update this page.
Reach out any time at privacy@surdio.in. This is a small, founder-run team — you'll hear back from a real person.