Last updated October 26, 2026

Privacy policy

This explains what Surface Marketing Services ("Surface", "we") collects when you use our website, our free plan and our client portal, why, and what you can ask us to do with it.

1. What we collect

  • Account details you give us: your name, email address and a password (stored only as a secure hash).
  • Details about your business you give us: its name, website, services, the places you serve, and your answers to our intake questions.
  • Your website's public pages, which our audit reads the way a search engine would.
  • With access you grant, data from your Google Search Console and Google Analytics properties, read through our own service account.
  • Where you came from when you signed up (for example the campaign in the link you followed), so we know which of our channels work.
  • On our public pages, once enabled, Google Analytics measures visits and clicks.

2. How we use it

  • To audit your online presence, plan the work, draft it and show it to you for approval.
  • To email you about work waiting for you, your account and your results. You can turn the work emails off in your portal settings.
  • To measure whether our work is helping, using the numbers you have given us access to.

3. Who processes it for us

We use these services to run Surface. Each receives only what it needs for its part:

  • Anthropic and Google (Gemini), for AI research and drafting, through paid business services. We never send client information to a free AI tier.
  • DataForSEO and Serper, for search and keyword data.
  • Google, for Search Console, Analytics, PageSpeed and Places information.
  • Resend, to send email.
  • Vercel and Neon, to host the application and its database.

4. How long we keep it

  • Business details from Google Places, other than a place ID, are deleted after 30 days.
  • Account and work records are kept while you are a client or have an account, so every change we made stays recorded and reversible.
  • Website credentials you give us are encrypted and used only to make approved changes.

5. What we never do

We don't sell your information, and we don't share it with anyone except the services above, as needed to do the work, or where the law requires it.

6. Your choices

You can ask us for a copy of your information, to correct it, or to delete your account and its information, by emailing bailey@surfacemarketingservices.com. California residents have these rights under the CCPA, and we extend them to everyone.

7. Changes and contact

If this policy changes, the date at the top changes too. Questions go to bailey@surfacemarketingservices.com. Surface Marketing Services, Santa Barbara, California.