← Back to SCR™

Privacy Policy

Last updated 29 June 2026

This policy explains how EVA DAVA EOOD ("we", "us"), operator of the beSurfaced™ / SCR™ service, collects and uses personal data. We are the data controller.

1. What we collect

2. Why we use it (legal basis, GDPR)

3. Who processes it

We use a small set of vetted processors: Supabase (database), Stripe (payments and invoicing), Vercel (hosting), and an email provider for delivery. Each processes data only on our instructions.

4. What we do NOT do

We do not sell your data, we do not train AI models on your content, and we do not share it with advertisers.

5. Retention

Lead data is kept until you ask us to delete it, or for up to 24 months of inactivity. Invoicing records are kept as required by Bulgarian law.

6. Your rights

Under the GDPR you may request access, rectification, erasure, portability, restriction, or object to processing. Email hello@getsurfaced.io and we will respond within 30 days. You may also complain to the Bulgarian Commission for Personal Data Protection (CPDP).

7. Cookies

The site uses only essential cookies needed to function. We do not run third-party advertising trackers.

8. Contact

Data controller: EVA DAVA EOOD · hello@getsurfaced.io