Privacy Policy

• Account details such as name, email address, phone number, role, authentication provider, and organization membership.
• Candidate profile details such as resume, profile photo, work history, education, skills, compensation expectations, location, work preferences, and blocked companies.
• Recruiter and organization details such as company name, team members, job postings, billing records, pipeline activity, feedback, and interview scheduling data.
• Messages, applications, saved jobs, hidden jobs, interview coordination, feedback forms, and other content you submit through Surge.
• Technical data such as device type, app version, operating system, IP address, push notification token, login timestamps, and security/session identifiers.
• Payment and purchase records needed to process credits, invoices, receipts, refunds, and billing support.

Candidates may upload a PDF, DOC, or DOCX resume to prefill profile fields. Surge extracts resume text on the server and may use an LLM provider, currently Gemini, to convert that text into structured profile fields. The candidate sees a preview and can edit or remove parsed values before saving.

Resume parsing is used only to support onboarding and profile completion. Do not upload documents containing information you do not want processed for this purpose.

• Create and maintain candidate, recruiter, and organization accounts.
• Build candidate profiles and calculate job/profile match context.
• Show candidate profiles to recruiters at organizations the candidate has not blocked, subject to visibility controls.
• Enable job discovery, applications, messaging, interview scheduling, feedback, and pipeline workflows.
• Process payments, credits, receipts, refunds, and billing support.
• Send transactional emails, push notifications, security messages, and product updates related to your account.
• Prevent fraud, enforce platform rules, protect users, debug issues, and improve reliability.

• Recruiters at organizations a candidate has not blocked may see profile information when profile visibility is enabled.
• Organizations blocked by a candidate cannot search for, view, or contact that candidate through Surge.
• Application-related information is shared with the recruiter or organization connected to that application.
• Compensation and sensitive preference information is used for matching and recruiter evaluation where shown in the product.

We use trusted service providers to operate Surge, including cloud hosting, authentication, storage, push notifications, email delivery, payment processing, analytics/reliability tooling, and resume parsing infrastructure. These providers process information on our behalf and only for platform operation, security, support, and improvement.

• Edit your profile information in the app.
• Hide your candidate profile from recruiter search.
• Block companies from viewing your candidate profile.
• Request access to, correction of, or export of your data.
• Delete your account from profile/settings. Deletion starts a 30-day recovery period before permanent removal.
• Contact support for privacy questions or requests.

Active account data is retained while your account is active and as needed to provide Surge. Deleted accounts enter a 30-day recovery period. After that period, account data is scheduled for permanent deletion unless retention is required for security, legal, billing, fraud-prevention, or dispute reasons.

We use encryption in transit, controlled production access, authentication controls, and operational safeguards designed to protect account and profile information. No system can be guaranteed completely secure, so please use a strong password and protect your login credentials.

Surge is intended for working professionals and is not directed to children. Users must be at least 18 years old to use the platform.

We may update this policy as Surge evolves. Material changes will be communicated in-app, by email, or through an updated notice on this page.