Privacy Policy

This Privacy Policy describes how SurfLocal Media LLC ("SurfLocal," "we," "us," or "our") handles information in connection with SurfLocal.biz, SurfLocal Phone, SurfLocal Office, SurfLocal AI, customer portals, business communication tools, and related services.

A SurfLocal customer may also use the platform to communicate with its own customers, employees, leads, vendors, or other contacts. When a SurfLocal business customer determines why and how information is used, that business may have its own privacy obligations and policies in addition to this Policy.

Depending on how the service is used, SurfLocal may process information including:

• Business and account information such as names, business names, email addresses, telephone numbers, account credentials, settings, and service configuration.
• Communication information such as telephone numbers, call records, text messages, voicemail, transcriptions, recordings, routing information, timestamps, delivery information, and saved communications.
• Customer, lead, appointment, order, note, and business-workflow information entered by users or generated through use of the service.
• Messaging consent, opt-in, opt-out, suppression, and communication preference records.
• Transaction and subscription information associated with purchases. Payment information may be collected and processed directly by a payment service provider.
• Technical and security information such as IP addresses, browser or device information, session information, authentication events, system logs, and audit records.
• Information submitted through support, onboarding, contact, assessment, or other service interactions.

We may use information to provide, secure, administer, maintain, and improve the SurfLocal services. Uses may include:

• Creating and administering accounts and subscriptions.
• Providing calling, messaging, voicemail, transcription, routing, and communication-history features.
• Providing business tools, customer records, appointments, leads, orders, documents, and workflow features.
• Sending service, security, account, reminder, and other communications requested or authorized through the service.
• Maintaining opt-out, suppression, consent, and preference records.
• Preventing fraud, abuse, unauthorized access, and security incidents.
• Providing customer support and troubleshooting.
• Complying with legal obligations, lawful requests, and applicable communications requirements.
• Operating and improving authorized AI-assisted features and workflows.

SurfLocal does not use a person's consent to one messaging program as blanket authorization for unrelated messaging programs.

Mobile information may be processed by service providers that help SurfLocal deliver requested communications, operate telecommunications infrastructure, prevent fraud, maintain security, or otherwise provide the service. Those service-provider activities do not authorize those providers to use mobile opt-in data for their own marketing.

Message frequency varies according to the service, feature, and communications the user has requested or authorized. Message and data rates may apply.

Where supported, recipients may reply STOP to opt out of applicable text messages and may reply HELP for assistance. Additional reasonable opt-out requests will be handled as required by applicable law.

We may disclose information when reasonably necessary to operate the service, including to categories of providers such as hosting, telecommunications, communications-delivery, payment, security, technical-support, and technology service providers.

We may also disclose information when reasonably necessary to:

• Comply with law, regulation, court process, or lawful governmental requests.
• Protect the rights, safety, property, or security of SurfLocal, our customers, users, or others.
• Investigate fraud, abuse, security incidents, or violations of our agreements.
• Complete a merger, acquisition, financing, reorganization, or transfer of business assets, subject to applicable law.

The mobile-information restriction described above continues to apply: mobile phone numbers and messaging opt-in or consent data are not shared with third parties or affiliates for their own marketing or promotional purposes.

SurfLocal may use cookies, authenticated sessions, browser storage, or similar technologies that are reasonably necessary for login, security, application state, preferences, fraud prevention, and operation of the service.

Some browser settings allow users to control cookies or stored site data. Disabling required storage may prevent authentication or other service functions from working correctly.

Certain SurfLocal Phone features support voicemail recording, transcription, and intentional call recording. Recording and transcription may create communication content and metadata that is stored with the applicable business account or communication record.

Customers and authorized users are responsible for using recording features lawfully, including providing disclosures or obtaining consent when required by the laws that apply to the participants and the location of the communication.

We retain information for as long as reasonably necessary to provide the service, maintain business and security records, honor consent and opt-out history, resolve disputes, enforce agreements, and satisfy legal obligations.

Different information may have different retention periods. Some records may need to be retained after an account is closed, including billing, security, audit, suppression, consent, and legally required records.

Where deletion or archive controls are available to a customer, those controls do not necessarily delete information that must be preserved for security, legal, billing, backup, or compliance purposes.

SurfLocal uses administrative, technical, and organizational measures designed to protect information from unauthorized access, alteration, loss, or misuse. No internet-connected service or storage system can be guaranteed to be completely secure.

Users are responsible for protecting their credentials, using authorized devices, maintaining appropriate access controls, and promptly reporting suspected account compromise.

Depending on where a person resides and which laws apply, that person may have rights concerning access, correction, deletion, restriction, or other handling of personal information.

Requests may be submitted to the secure contact form below. We may need to verify identity and authority before fulfilling a request. Some information may be exempt from a request or retained when required or permitted by law.

SurfLocal's business services are not directed to children under 13. We do not knowingly offer the business platform for use by children under 13 as account holders.

We may update this Privacy Policy as services, technology, or legal requirements change. The date at the top of this page identifies the most recent revision. Material changes may also be communicated through the service when appropriate.