This Privacy Policy explains how Surely Networks, LLC (“Surely Networks,” “Surely,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with our websites at GetSurely.AI and SurelyNetworks.com (the “For Everyone” layer) and the Surely application across all interfaces — cloud, desktop, and mobile (the “For All Users” layer) — together with related features (collectively, the “Services”). This Privacy Policy is incorporated into, and forms part of, the Surely Terms of Use.
Enterprise customers. Where Surely is provided to an organization under an Enterprise License Agreement, that agreement and any Data Processing Addendum govern the handling of that organization’s data and may modify or supersede this Policy for that organization. Unless otherwise stated in an Enterprise License Agreement, this Policy describes how the Services handle your information today, when Surely operates the harness and cloud infrastructure on your behalf.
1. Information We Collect
1.1 Information You Provide
- Account Information. Your email address and, if you choose to provide them, your name and profile preferences. If you sign in through a third-party identity provider (SSO), we receive basic account identifiers from that provider.
- Billing Information. If you purchase a paid plan, our third-party payment processor collects and processes your payment details. We receive limited billing records such as your plan, transaction history, and billing contact; we do not store full payment-card numbers.
- Your Content. The notes, documents, prompts, and other content you create, import, or store in your brain.
- Connected Data. When you connect a data source — such as email, calendar, cloud storage, documents, or meeting transcripts — we access and process the data from that source that you authorize, in order to build and operate your brain.
- AI Conversations. Prompts, questions, and other input you provide to the Surely assistant or any AI feature, and the AI Output you receive.
- Skills, Routines, and Configurations. The skills, routines, agents, knowledge packs, integrations, and settings you create, install, or configure.
- Feedback and Support. Information you provide when you contact us for support or give us feedback.
1.2 Information Collected Automatically
- Usage Data. Features used, actions taken, timestamps, and similar interaction and performance data (telemetry).
- Device and Log Data. IP address, browser or app type, device identifiers, operating system, and general location derived from your IP address.
- Cookies and Similar Technologies. On our websites, as described in Section 6 and our Cookie Policy.
1.3 Information from Third Parties
- Connected Services. Data from the third-party services you choose to connect, retrieved with your authorization.
- Identity and SSO Providers. Authentication and basic profile information from an identity provider you use to sign in.
- Billing and Fraud-Prevention Providers. Transaction and risk signals from our payment and fraud-prevention vendors.
1.4 Sensitive Information
The content and connected data you bring into Surely may include information that is considered “sensitive” under applicable privacy laws — for example, the contents of your communications and files. We collect and process this information only to provide the Services you have requested and as described in this Policy. You control which sources you connect and what content you store, and you can disconnect a source or delete content at any time.
2. How We Use Information
- Provide, operate, secure, and improve the Services;
- Read, organize, summarize, link, and index the content and connected data you provide in order to build and operate your brain and produce AI Output for you;
- Synchronize your brain across the devices and interfaces you use;
- Process payments and manage subscriptions;
- Send you service-related communications, and, where permitted, updates about the Services;
- Maintain the security, reliability, and integrity of the Services, including detecting fraud, abuse, and violations of the Acceptable Use & Community Guidelines;
- Analyze aggregated or de-identified usage to understand and improve the Services; and
- Comply with legal obligations and enforce our agreements.
3. How We Share Information
3.1 What We Never Do
Surely does not sell your personal information. Surely does not use the content of your brain or your connected data to train foundation models, and does not share your content to serve you third-party advertising. As used in this Policy, the terms “sell” and “share” have the meanings given to them under applicable state privacy laws.
3.2 Service Providers and Subprocessors
We share information with vendors and service providers who perform services on our behalf, including cloud hosting, artificial-intelligence model providers, connector and integration providers, payment processing, analytics, and customer support. These providers are contractually restricted to using information only to provide services to Surely and are prohibited from independently using it for their own purposes, including for training their own general-purpose models where we can obtain that contractual protection. Our artificial-intelligence model providers currently include OpenAI, L.L.C. and Anthropic, PBC; when you use AI features, the content reasonably necessary to fulfill your request is made available to these providers to process it, subject to their applicable terms and conditions and our agreements with them. A current list of our subprocessors is available on request or through the Services.
3.3 Organization-Provisioned Brains and Administrator Access
Where an organization provisions Surely for you — for example, by seeding a brain that you later claim, or by leasing scoped access to you — that organization may retain certain visibility into or control over the provisioned brain as set out in its agreement with us and, where applicable, presented to you at the point you claim or accept the brain. We handle such information consistent with that arrangement, this Policy, and applicable law. See the Acceptable Use & Community Guidelines and any notice presented at claim or handover.
3.4 Sharing You Direct
If you use sharing, collaboration, or connected-brain features to share content with another user or brain, we share what you direct us to share with the recipients you choose. You are responsible for what you share and with whom.
3.5 Legal and Safety
We may disclose information if required by law, subpoena, or legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Surely Networks, our users, or the public, or to investigate violations of this Policy or the Terms of Use.
3.6 Business Transfers
If Surely Networks is involved in a merger, reorganization, financing, change of entity form, or transfer of assets, information may be transferred as part of that transaction, subject to this Policy or a policy providing comparable protection.
3.7 Affiliates
We may share information with our affiliates as necessary to provide and support the Services, subject to the same restrictions described in this Section 3.
4. Data Retention and Storage
We retain personal information for as long as your account is active and as needed to provide the Services, resolve disputes, and comply with our legal obligations. Depending on your configuration and plan, your brain may be stored locally on your device, synchronized to our cloud, or both. If you delete content or your account, we will delete the associated personal information within a commercially reasonable period, except where retention is required by law, needed to enforce our agreements, or where the information has already been aggregated or de-identified. You may request an export of your content as described in Section 5.
5. Your Rights and Choices
- Access and Correction. You may access and update most of your account information and content directly through the Services.
- Deletion. You may delete content, disconnect a source, or request deletion of your account and associated personal information by contacting us as described in Section 9.
- Connection Controls. You control which data sources you connect and can disconnect any source at any time; disconnecting stops future collection from that source.
- Portability / Export. You may request a copy of your content in a portable, and where technically feasible, readily usable format.
- Communications Preferences. You may opt out of non-essential communications. We may still send you essential service and security communications.
- State Privacy Rights. Depending on where you live, you may have additional rights. See the California Notice at Collection, Your Privacy Choices, and Multi-State Privacy Rights Notice.
- Right to Limit Sensitive Information. Where applicable law provides it, you may request that we limit our use of sensitive personal information to what is necessary to provide the Services.
- Appeals. If we deny a privacy request, you may appeal by contacting us as described in Section 9.
- Authorized Agents. You may use an authorized agent to submit a request on your behalf, subject to verification of the agent’s authority and your identity.
- No Retaliation. We will not discriminate or retaliate against you for exercising any of these rights.
6. Cookies and Similar Technologies
On our websites, we use cookies and similar technologies to operate the site, remember your preferences, keep you signed in, and understand how the site is used. You can control cookies through your browser settings; disabling cookies may limit some features. Where required by law, we honor recognized browser-based opt-out preference signals, such as the Global Privacy Control (GPC). We do not use cookies to serve third-party advertising, and we do not use your content or AI conversations to target you with ads. See our Cookie Policy for more detail.
7. Data Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and, where appropriate, at rest, access controls, and vendor security review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and your local device secure and for promptly notifying us of any suspected unauthorized access. If we become aware of a data breach affecting your personal information, we will notify you and any applicable regulators without undue delay and as required by law.
8. Children’s Privacy
The Services are intended for individuals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it and terminate the associated account.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise a privacy right described above, contact us at: Surely Networks, LLC — 2810 N Church St, PMB 548750, Wilmington, Delaware 19802-4447 — Email: privacy@surelynetworks.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services or by other reasonable means before the change takes effect. Your continued use of the Services after a change becomes effective constitutes your acceptance of the revised Policy.