Privacy Policy
What Surf Studio keeps about the people who use it, and why, in force from 13 November 2026.
Version of 13 November 2026, in force from that day.
1. Who we are
Surf Studio is run by Surf Platforms Inc., a Delaware corporation, 5434 Manderston Drive, San Jose, CA 95138, United States. For the data in this policy we are the controller. Write to legal@surfplatforms.com about your data.
2. What we keep, and why
- Your email address, to create your account and send your 6-digit sign-in codes.
- Your workspace: its name and who belongs to it.
- Your prompts: the sentences you type, to make your films.
- Your films and their files: the film, its code and the rendered video, so you can watch and download them.
- Your model connection: the provider, its label, the last 4 characters of a key, when it was last used and the last error code. A key itself is stored encrypted (AES-256-GCM) and is never shown again after you save it.
- Which model account directed each film, Studio's or yours, so the record of each film is accurate.
- Your sign-ins: when you signed in, and the network address and browser it came from, to keep your account secure.
- Your acceptance of the legal texts: which versions you accepted, when, and the network address and browser you accepted from, to show what you agreed to.
We keep this to provide Studio under our Terms with you, and to keep Studio secure. We do not sell your data, use it for advertising, or use your prompts or films to train any model.
3. Who handles it
The vendors that handle data for Studio are on the Sub-processor List: Supabase, Vercel, Resend and Microsoft Azure, and Anthropic for workspaces that run on Studio's own model account.
If you connect your own model account, your prompts and the film's working text go to the provider you chose (Anthropic or OpenAI), under your own agreement with it. If you pair your own machine, the film's work runs there under your own Claude Code or Codex login, which Studio never sees.
We give data to an authority only when the law requires it, and we tell you unless the law forbids it.
4. Where it is
Studio's systems are in the United States.
5. How long we keep it
We keep your data while your account is open. When you delete your account in Settings, we delete your films, their stored files, your model connections and your sign-in. In a workspace you share with others, we remove you, and the workspace stays with them. We keep your legal acceptances, and any billing ledger records, for as long as the law requires.
6. Cookies
Studio's public pages set no cookies. When you sign in, Supabase sets session cookies on the same site, to keep you signed in. Studio uses no advertising or tracking cookies.
7. Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Write to legal@surfplatforms.com. You can also complain to your data protection authority.
8. Children
Studio is not for anyone under 18.
9. Changes
A new version of this policy is published here with its date. If a change matters to you, we tell you by email first.