Surtrix Privacy & Terms

Surtrix (“Surtrix”, “we”, “us”, or “our”) provides a service that turns learning material into playable browser games using an automated AI pipeline. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices and rights you have.

It applies to the Surtrix website, applications, and related services (together, the “Service”). By creating an account or using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Service.

We collect the following categories of information:

Information you provide

• Account details— your name, username, email address, and (if you sign up with email and password) a securely hashed password. We never store your password in plain text.
• Profile information— optional details such as your education level and role, which help us tailor the experience.
• Learning material— the documents, text, images, and prompts you upload or type so that Surtrix can generate games from them, along with the games and related content produced from that material.
• Communications— messages you send us, such as support requests sent to our contact address.

Information from Google sign-in

If you choose to sign in with Google, Google shares with us basic profile information from your Google Account — your name, email address, and profile picture — so we can create and secure your account. We request only the limited scopes needed to authenticate you; we do not access your Gmail, Google Drive, contacts, or other Google services. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Information collected automatically

• Usage data— actions you take in the Service, such as games created, edits made, and features used.
• Device and log data— your IP address, browser type, device information, and timestamps, collected through standard server logs and security mechanisms.

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Run the AI generation pipeline on the material you upload to create your games;
• Authenticate you, secure your account, and send verification or sign-in codes by email;
• Respond to your requests and provide customer support;
• Monitor, debug, and improve the Service, including its reliability, quality, and safety;
• Detect, prevent, and address fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use the content of your uploads to serve advertising.

To generate your games, material you upload is processed by third-party AI providers — primarily Google’s Gemini API (with Google Vertex AI as a fallback). This processing happens solely to deliver the Service you requested: extracting concepts from your material and producing the resulting game.

This processing is subject to the AI provider’s terms and data policies. We send only what is needed to generate your game, and we do not authorize these providers to use your content to train their general-purpose models outside the scope of providing the Service to us.

We share information only as described below, and never sell it:

• Service providers (subprocessors) — we use trusted vendors to run the Service, including Google Cloud (hosting, storage, and database), Google Gemini / Vertex AI (AI generation), and Resend (transactional email such as sign-in codes). They may process your information only on our behalf and under appropriate confidentiality and security obligations.
• Legal and safety— we may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Surtrix, our users, or the public.
• Business transfers— if Surtrix is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
• With your direction— when you choose to share a game or otherwise instruct us to share information.

We use cookies and similar technologies that are necessary to operate the Service — for example, to keep you signed in and to maintain your session and security. These are essential to providing the Service and cannot be disabled without affecting functionality. We do not use third-party advertising cookies.

Your content and account data are stored using cloud infrastructure provided by Google Cloud (including Cloud Storage and Cloud SQL). Passwords are stored only as salted, one-way hashes, and connections to the Service are encrypted in transit.

We use reasonable technical and organizational measures designed to protect your information against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide the Service. We also keep information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we delete or de-identify your personal data and associated content within a reasonable period, except where we are required or permitted to retain it. See the Delete Account tab for how to request deletion.

Depending on where you live, you may have some or all of the following rights regarding your personal data:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data;
• Export or receive a copy of your data (portability);
• Object to or restrict certain processing; and
• Withdraw consent where processing is based on consent.

You can update much of your profile information directly in your account settings. To exercise any other right, contact us using the details below. We will respond as required by applicable law, and we will not discriminate against you for exercising these rights.

Surtrix is designed to support learners of many levels, including younger students. Where the Service is used by a child, it must be set up and supervised by a parent, guardian, or teacher who agrees to this Policy on the child’s behalf. Selecting an education level describes the intended learner and does not by itself create an account for a child.

We do not knowingly collect personal information directly from children under the age of 13 (or the equivalent minimum age in your jurisdiction) without appropriate consent. If you believe a child has provided us personal information without the required consent, contact us and we will take steps to delete it.

We operate using cloud infrastructure that may store and process information in countries other than the one in which you live, including the United States. Where we transfer personal data across borders, we take steps to ensure it remains protected consistent with this Policy and applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

If you have questions or requests about this Policy or your personal data, contact us at hello@surtrix.com.