uSurge

Data Handling

What Happens to Your Documents.

Effective 2026-10-23 · Applies to DeltaProof and every future uSurge service that reads customer documents

A bidder's drawing set and priced bid are the two most sensitive documents that business owns. This page describes how a uSurge analysis service handles them, step by step, as the system is built rather than as a reassurance. Every statement here corresponds to a specific behavior in the software, and the order of the steps is the order in which they run.

The Sequence

  1. Upload Over TLS to a Server We Operate. Files land on an encrypted disk on that server. There is no third-party upload service, no shared bucket, and no copy made for any purpose other than producing your report.
  2. Preflight. Each file is checked for size, page count, and readability. A drawing set we cannot read is declined here, before any price is shown or anything touches your card, with the reason stated, and the files are deleted. A scanned bid schedule is accepted; its rows are recovered by optical character recognition, and that step is the last time your prices are legible.
  3. A Price, Not a Charge. You see your price, counted page by page from the files you sent. It holds for 30 minutes. If you do not press Generate, your files are deleted and nothing touches your card.
  4. Prices Are Stripped Before Analysis. If you supplied an itemized bid, every currency amount is removed from it and the original file is deleted, leaving item numbers, descriptions, quantities, and units. Only that stripped version is passed to analysis. Your prices are never sent to, stored in, or learned by a model. When a row cannot be read with confidence, its numbers are removed too, in the safe direction.
  5. A Hold When You Press Generate. Pressing Generate places a hold for your quoted price on your card. Nothing is charged yet. The report is then produced on the server described below.
  6. Delivery, Charge, Then Deletion. When the report is written, the hold becomes the charge, and the uploaded files are deleted in the same operation that marks the job delivered. The report itself is available through a signed link for seven days, then it is deleted. Save it when you receive it.
  7. Failure Means Release and Deletion. If your report cannot be produced, the hold is released, nothing is charged, your files are deleted, and the email you receive names the reason. A job that stalls is released and purged by an unattended sweep within six hours; it does not wait for a person to notice.

What the System Is Designed Never to Do

  • Keep your drawing set or bid after your report is delivered.
  • Let a price from your bid reach any language or vision model, ours or a vendor's.
  • Use any customer document to train, tune, or evaluate a model.
  • Show one customer's material to another, or to us, outside of a failure you ask us to investigate.
  • Disclose which method read your bid. The report presents findings and their evidence, not how the file was parsed.
Where Processing Happens. Uploads, redaction, report production, and delivery run on a server we operate in a United States data center. The steps that read drawings use language and vision models hosted by the same provider, DigitalOcean, which states that it does not store model inputs or outputs and does not use them for training. In every case the inputs are the stripped documents described above, and nothing is kept once the report is written.

Abandoned and Incomplete Jobs

If you upload files and do not press Generate, they are deleted when your price expires, 30 minutes after it is shown. If you leave the payment page, no hold is placed and your files are deleted the same way. A daily sweep confirms that no delivered, refunded, or released job still holds a file, and records that it ran; if the sweep itself stops running, the service stops selling until it is restored.

If You Need Us to Look at Your Job

Because files are deleted at delivery, we cannot re-open a completed report's inputs. If something in a report looks wrong, write to usurge@usurge.us with the job identifier from your email within 14 days. We will re-run the analysis on files you re-submit, or refund the report, at your choice. See Refunds & Cancellations.

Field Services and Estimates

Task lists, photos, and addresses you send for an estimate are used to price and perform the work and are kept for the guarantee period. They are not published, shared, or used for marketing.

This page is maintained alongside the software. When the handling changes, this page changes in the same release.