Privacy Policy

Last Updated: 15th December, 2024.

At Surflash, we prioritize your privacy. This Privacy Policy explains how we collect, use, share, and protect your data, including metadata from emails processed through Google APIs, in order to provide SMS or WhatsApp notifications based on your preferences. By using Surflash, you agree to this policy.

1. Information We Collect

Surflash collects only the information necessary to provide you with timely and accurate notifications.

1.1 Data You Provide

• Contact Information: Your phone number, email address, and notification preferences.
• Sender/Subject Preferences: The email addresses or keywords you configure to trigger notifications.

1.2 Data Collected from Google APIs

If you connect your Google account, we collect and process only the following metadata from emails:

• Sender Email Address: To match with your configured preferences.
• Email Subject: To detect keywords or topics you’ve configured.
• Timestamp: To ensure notifications are timely and relevant.

Important: We do not access, store, or process the content or body of your emails. We strictly adhere to Google’s API Services User Data Policy.

1.3 Automatically Collected Data

We collect the following data automatically when you use our services:

• Device Information: Browser type, IP address, and operating system.
• Usage Logs: Actions such as configuring preferences or updating your account.

2. How We Use Your Information

We use the data collected to provide and enhance our notification services, including:

• Sending WhatsApp or SMS alerts based on your configured preferences.
• Maintaining service reliability and ensuring timely delivery of notifications.
• Improving our platform through anonymized analytics.

2.1 Google API Data Usage

Data obtained via Google APIs is used solely to detect emails that match your sender or subject preferences. This enables us to send real-time SMS or WhatsApp notifications. We do not share or use this data for advertising or any other purpose.

3. Data Sharing, Transfer, and Disclosure

We do not sell or rent your personal data. However, we may share your data with:

3.1 Service Providers

We share data with trusted service providers to deliver notifications, including:

• WhatsApp Messaging APIs: For sending WhatsApp alerts.
• Company Phone Line: We send SMS notifications directly through our company-managed phone line for greater security and privacy.

3.2 Legal and Compliance

We may disclose your data if required by law or to protect against fraud or abuse.

3.3 International Transfers

Your data may be transferred to servers outside your country. We ensure compliance with global data protection laws (e.g., GDPR, NDPR) during these transfers.

4. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of your data.
• Deletion: Request deletion of your data and revoke Google API access.
• Update: Modify your notification preferences at any time.

5. How We Protect Your Data

We implement robust security measures, including:

• End-to-end encryption for data transmission.
• Regular vulnerability assessments and security audits.
• Restricted access to sensitive information.

6. Changes to This Policy

We may update this policy from time to time. Changes will be communicated via email or on this page.

7. Contact Us

For questions or concerns, contact us at:

• Email: support@surflash.com
• Address: Kumo, Gombe, Nigeria.