Last updated October 8, 2026
You're sharing your business idea with us — often before you've told anyone else. We take that seriously. This page explains, in plain language, what we collect, why we collect it, who helps us process it, how we protect it, and how you can ask us to access, export, correct, or delete it.
| Question | Short answer |
|---|---|
| Do you sell my data? | No. |
| Do you train AI models on my idea? | No — not with our current AI providers' settings and terms. We don't use your specific idea, business details, or documents to train AI models, and we review this regularly. |
| Can other founders see my idea? | No. Your idea is private to your account unless you choose to share it. |
| Can I delete my data? | Yes. You can delete your account and associated product data. |
| Do you use advertising cookies? | No. We do not use third-party advertising or tracking cookies. |
| What we collect | Why we collect it | Who handles it |
|---|---|---|
| Account information, including your name, email, and authentication details. | To create your account, keep you signed in, and protect access to your workspace. | Clerk handles sign-in and identity. We do not see or store your password. |
| Your idea and journey, including brainstorming inputs, research notes, decisions, conversations, and generated documents. | To help you move through the BUILD framework, generate guidance, and create useful startup documents. | Surdio and our AI providers process this content only as needed to provide the product. |
| Expert requests, including the kind of help you need, your phone number, and when you open the ExpertCorner page. | So a Surdio consultant can contact you, find the right expert, and follow up if you started a request but didn't send it. | The Surdio team. Requests reach us by email through our email provider, Resend. 1:1 bookings are handled by Cal.com. |
| Usage data, such as which steps you complete and when. | To save your progress, improve the experience, and understand where founders get stuck. | Surdio uses aggregated or anonymized patterns wherever possible. |
| Payment information. | To process payments and manage billing. | Our payment processor handles card details. We do not store your card information ourselves. |
Your inputs are sent to our AI providers, Anthropic's Claude and OpenAI's models, to power the conversations, guidance, and documents you get from your AI Founding Partner. We use their business API services and configure them so your data is not used to train their foundation models where those settings and terms are available. We review those terms regularly and will update this page if that changes.
For some steps, Surdio also searches the web for public facts about your idea's market — similar businesses, prices, and rules that may apply. To do this, short search queries describing your kind of business, its customers, and its country are sent to our web search provider. The queries are designed to leave out personal details like your name or contact information, and what we show you from the web comes from public web pages, never from other founders.
We do not use your specific idea, business details, or documents to train any AI model, ours or anyone else's.
We use a small set of trusted providers to run parts of Surdio — for things like sign-in, secure data storage, AI processing, web search, email, scheduling, and hosting. Each one is contracted to handle only the data it needs to do its job, and to protect it under terms at least as strict as our own.
We don't share your data with any company beyond what's needed to run the product, unless we tell you first or you explicitly choose to do so. We'd never share your idea or documents with other founders, experts, or investors without your action.
If you ask for an expert through ExpertCorner, we keep your request — the kind of help you need, your phone number, and your idea's summary only if you tick the box to share it — so a Surdio consultant can contact you and find the right person. We also note when you open that page, so a consultant can follow up if you didn't finish. If you book a 1:1, the booking is handled by our scheduling provider, Cal.com, and we pass it your name and email to fill in the booking form.
Row-level isolation
Your data is only ever readable by your own authenticated account — enforced at the database level, not just in the app.
Encryption
Your data is encrypted both in transit and at rest.
Access control
The platform sits behind standard authenticated sign-in.
If you delete your account, we remove your ideas, phases, conversation history, generated documents, and other account data from the active product systems. Some limited records may remain only where we're required to keep them for legal, security, or payment-related reasons. There's no recovery window for product data once deletion is confirmed, so we'll always ask you to confirm first.
If you'd rather we handle any of this for you directly, email us at privacy@surdio.in. We'll acknowledge your request and let you know what we need to verify your account before making changes to, exporting, or deleting your data.
We use only the minimum cookies and similar session technologies needed to keep you signed in, maintain security, and remember your session. We do not use third-party advertising or tracking cookies.
If we make a material change to how we handle your data, we'll notify you directly — not just quietly update this page.
Reach out any time at privacy@surdio.in. This is a small, founder-run team — you'll hear back from a real person.