Privacy Policy
Privacy Policy
This policy describes what personal information uSurge LLC collects through usurge.us, deltaproof.usurge.us, our checkout pages, and our field services, and what we do with it. The short version: we collect what a transaction needs, we use it for that transaction, we do not sell it, and we do not run advertising or analytics trackers.
1. What We Collect and Why
| Information | When | Why |
|---|---|---|
| Email address | When you start a report, buy a digital product, or write to us | To send a verification code, receipts, your deliverable, and service notices about your order |
| Payment details | At checkout | Processed by Stripe to place the hold and take payment. We receive a confirmation, the last four digits, and the card brand. We never receive or store the full card number. |
| Documents you upload | When you submit files to a report service | To produce your report. Handling is described in the Data Handling policy: held only for processing, purged after delivery. |
| Task lists, photos, and site addresses | When you request an estimate for field work | To scope, price, schedule, and perform the job |
| Technical data: IP address, browser type, request timestamps | Automatically, on every request | Security, abuse prevention, and diagnosing failures. Kept in server logs for a limited period. |
| An order cookie | During a DeltaProof order | To keep your upload, your price, and your report together in one order. It is strictly necessary, expires with the order, and is not used for tracking. |
We do not collect information from you that a purchase does not need. There is no account to create, no newsletter you are added to, and no advertising identifier.
2. What We Do Not Do
- We do not sell personal information and have not sold it in the preceding 12 months.
- We do not share personal information for cross-context behavioral advertising.
- We do not use uploaded documents, bids, photos, or messages to train any machine-learning model, ours or anyone else's.
- We do not use third-party analytics, advertising pixels, or social media trackers on our sites.
3. Who Processes Information on Our Behalf
These providers handle information only to deliver our services and are bound by their own terms to protect it:
- Stripe, Inc. — payment processing and receipts. Stripe's handling of your payment data is governed by Stripe's privacy policy.
- Postmark (ActiveCampaign, LLC) — transactional email: verification codes, receipts, report notices.
- DigitalOcean, LLC — hosting of our web servers and, for some report processing steps, compute infrastructure in the United States.
- Our Own Hardware — the remainder of report processing runs on systems we operate directly.
We do not use data brokers, and we disclose personal information to others only when the law requires it or to protect the rights and safety of our customers or ourselves.
4. How Long We Keep It
- Uploaded documents and working copies: deleted at report delivery, when an unaccepted price expires, or immediately if the job fails or is declined. See Data Handling for the exact sequence.
- Delivered reports: available for download for a limited window after delivery, then deleted.
- Order records (email, amount, product, timestamps, refund status): kept for as long as tax and accounting law requires, typically seven years.
- Server logs: rotated within 30 days.
- Estimate and job correspondence for field services: kept for the guarantee period and as required for accounting.
5. Security
Connections to our sites use TLS. Uploads are stored on encrypted disks on servers we control, isolated from the public internet except through the service that accepts them. Card data never touches our servers. Access to production systems is restricted to the Operator. No system is perfectly secure; if a breach affecting your information ever occurs, we will notify you as California law requires.
6. Your California Privacy Rights
uSurge LLC is a small business that does not meet the revenue or data-volume thresholds of the California Consumer Privacy Act. We honor the rights it describes anyway, because they are reasonable: you may ask what personal information we hold about you, ask us to delete it (subject to records we must keep for tax and accounting), and ask us to correct it. Write to usurge@usurge.us from the address you used with us, and we will respond within 45 days. We will never treat you differently for making a request.
Do Not Track. Our sites do not track visitors across other websites, so there is nothing for a Do Not Track signal to switch off. We do not respond to such signals differently because we have no tracking to disable.
7. Children
Our services are for adults and businesses. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to us, write to us and we will delete it.
8. Changes
When this policy changes, the effective date above changes with it, and material changes are noted on the Policies page. We will not apply a materially less protective policy to information already collected without telling you first.
9. Contact
Privacy questions and requests: usurge@usurge.us · 925-579-3579 · uSurge LLC, 205 E Alma Ave, San Jose, CA 95112.