Overview
This Privacy Policy explains how SmartSurf, powered by Senlay (collectively “SmartSurf”, “we”, “us”, or “our”), handles personal information when you use the SmartSurf Rider website and related services at app.smartsurf.cloud.
SmartSurf does not sell your personal information. Google sign-in requests only the basic information needed to create, identify, and secure your Rider account.
Information we collect
Information you provide
- Account details, such as your name, email address, and password credentials. Passwords are stored as one-way hashes, not in readable form.
- Rider preferences and optional profile details, including watersport, skill level, home spot, body measurements, gear, and safety preferences.
- Saved spots, coordinates, Watchdog conditions, session feedback, questions, and notification preferences.
- Messages you send us for support or account requests.
Google account information
If you choose “Continue with Google” or link Google from your profile, Google provides your Google account identifier, name, email address, email-verification status, and profile picture when available. We use this information only to create, link, authenticate, and display your SmartSurf account. We do not request access to Gmail, Google Drive, contacts, calendars, or your Google password.
SmartSurf’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Information collected automatically
We may collect service logs and technical information such as browser type, device type, pages or features used, timestamps, referring source, approximate location inferred from an IP address, and security or error events. Authentication cookies keep you signed in. We may also receive weather, forecast, sensor, and evidence data for coordinates you request; that physical-world data is not ordinarily personal information by itself.
How we use information
- Provide and secure your account, saved spots, Watchdogs, notifications, and personalized watersports context.
- Call Senlay and relevant forecast or sensor services for the coordinates and questions you submit.
- Send transactional messages such as password resets, account notices, and requested Watchdog alerts.
- Measure reliability, diagnose errors, prevent abuse, and improve SmartSurf.
- Comply with legal obligations and protect users, the public, and our services.
We do not use Google user data for advertising, sell it, or allow people to read it except when necessary for security, support, legal compliance, or service operation.
When we share information
We disclose only the information reasonably necessary to service providers that help us operate hosting, authentication, email delivery, payments, monitoring, analytics, customer support, and physical-world data processing. These providers may process information only for the service they provide to us. Coordinates and activity fields may be sent to Senlay or upstream data providers to retrieve relevant conditions.
We may also disclose information when required by law, to investigate abuse or security incidents, to protect legal rights or safety, or as part of a merger, financing, acquisition, or transfer of the service. If ownership changes, this policy continues to apply until you are notified otherwise.
Retention and deletion
We retain account information while your account is active and keep operational records only as long as reasonably needed for the purposes described above, including security, dispute resolution, and legal compliance. Retention periods vary by data type. Backup copies may remain for a limited period before being overwritten.
You may request access, correction, export, deletion, or disconnection of your Google account by emailing viktor@senlay.cloud. Disconnecting Google does not necessarily delete your SmartSurf account or information you provided separately. You may also revoke SmartSurf access in your Google Account permissions.
Security
We use reasonable technical and organizational safeguards designed to protect personal information, including encrypted transport, restricted access, hashed passwords, and protected session cookies. No online system is completely secure, so we cannot guarantee absolute security. Contact us promptly if you believe your account has been compromised.
Your choices and rights
You may update many profile details in SmartSurf, pause or delete Watchdogs, and control browser cookies through your browser settings. Blocking essential authentication cookies may prevent sign-in. Depending on where you live, you may have additional rights to access, correct, delete, restrict, or object to processing of personal information. Contact us to exercise those rights; we may need to verify your identity.
Children
SmartSurf is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided personal information without appropriate permission, contact us so we can review and delete it.
International processing
SmartSurf and its service providers may process information in countries other than the one where you live. Data-protection rules may differ between countries. Where required, we use appropriate safeguards for international transfers.
Changes to this policy
We may update this policy as SmartSurf evolves. We will post the revised policy here and update its effective date. If a change materially affects how we use personal information, we will provide additional notice where reasonably possible or legally required.
Contact
For privacy questions, requests, or complaints, contact viktor@senlay.cloud.