Privacy Policy
Effective October 18, 2026. Surfra collects what it needs to run your workloads and bill for them, and nothing for advertising.
What we keep, and why.
We do not sell personal data and do not use it for advertising.
What we collect
Account. Your name and email from sign-in, the organizations you belong to, and your role in each.
Workloads. App and job settings, container image names, environment variables, request and job metadata, and the logs your apps print. Environment values and cloud keys are encrypted when stored.
Cloud keys. Keys for the cloud accounts you connect. They are encrypted with your organization's own key and never shown again, as described on the security page.
Registered machines. Hardware details the runner reports, such as CPU, memory, GPU, and online status.
Billing. Plan, invoices, and payment status. Card numbers go straight to Stripe. Surfra never sees or stores them.
Service logs. IP addresses and request details in our own server logs, used for security and debugging.
How we use it
To run your apps and jobs, to bill your organization, to send trial, billing, and invite emails, to keep the service secure, and to answer support requests. We may look at metadata and logs to fix a problem you report or to stop abuse.
Who processes it
WorkOS for sign-in. Stripe for payments. DigitalOcean for the API servers. PlanetScale for the database. Cloudflare for the website, email delivery, and log storage. Axiom for log search on Team. The cloud providers you connect receive what is needed to start your machines in your own accounts.
How long we keep it
Logs are deleted after 24 hours on Free Forever and 30 days on Team. Request history follows the same windows. Account, organization, and billing records are kept while the account exists, and billing records as long as tax law requires.
Your choices
You can remove cloud keys, apps, machines, and members at any time from the dashboard. To have your account and its data deleted, or to get a copy of it, email hello@surfra.io from the address on the account. We answer within 30 days.
Cookies
The dashboard keeps your sign-in in browser storage. The website sets no tracking or advertising cookies.
Changes
If this policy changes materially, we email owners and admins before it applies.
Run it on your own clouds.
Free on your own clouds, with no card. Team adds 30 days of logs and more seats.
Start free