Privacy Policy

1. Overview

SurFlow (“SurFlow,” “we,” “us,” or “our”) operates a surplus inventory management and donation routing platform for grocery retail operators. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit surflow.net or use our platform services. Please read this policy carefully. If you do not agree with its terms, please discontinue use of our site and services.

2. Information We Collect

Information you provide directly

When you contact us, request a demo, or sign up for our platform, we may collect: your name, business email address, company name, phone number, job title, and any information you voluntarily provide in correspondence.

Business and operational data

As part of delivering our platform services to grocery operators, we process inventory data, expiration records, donation transaction data, and related operational records provided by or on behalf of your organization. This data is processed solely to deliver the contracted services.

Automatically collected information

We may automatically collect certain technical information when you visit our website, including IP address, browser type, operating system, referring URLs, pages visited, and time spent on pages. This information is used to maintain and improve our website and services.

3. How We Use Your Information

We use collected information to:

• Respond to inquiries and provide requested information about our platform
• Deliver, maintain, and improve our surplus orchestration services
• Generate §170(e)(3) tax documentation and compliance reports on behalf of customers
• Communicate service updates, security notices, and administrative messages
• Comply with applicable legal obligations
• Analyze aggregate usage patterns to improve platform functionality

We do not sell your personal information to third parties. We do not use your information for behavioral advertising.

4. Information Sharing and Disclosure

We may share your information only in the following circumstances:

• Service providers: Trusted vendors who assist us in operating our platform (e.g., hosting, analytics, payment processing), under confidentiality agreements
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected parties
• With your consent: For any other purpose with your explicit consent

Operational data processed on behalf of grocery operator customers is governed by our customer data processing agreements and is not used for any purpose other than service delivery.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law. Operational data processed under customer agreements is retained per the terms of those agreements. You may request deletion of your personal information by contacting us at the address below.

6. Data Security

We implement technical and organizational security measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to legal retention requirements
• Opt out of certain communications from us

To exercise these rights, contact us at contact@surflow.net.

8. Cookies

Our website may use cookies and similar technologies to improve your browsing experience and collect usage analytics. You can control cookie preferences through your browser settings. Disabling cookies may affect some website functionality.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact: