ScubaSearch
Legal

Privacy Policy

Last updated: June 2025  ·  Surge Minds

1. Overview

ScubaSearch is a product of Surge Minds, founded by Ayush Patil. This Privacy Policy explains what data we collect, how we use it, and your rights as a user.

By using ScubaSearch, you agree to the practices described in this policy. If you have questions, contact us at ayushpatil9977@gmail.com.

2. Data We Collect

We collect the following categories of data:

  • Account data - name, email address, and store details provided during sign-up.
  • Product catalog - product titles, descriptions, prices, images, and metadata you upload or sync.
  • Search logs - anonymised search queries, session signals (click, idle, enter), result counts, and response times from your store's visitors.
  • Usage data - API call counts, session counts, and plan usage for billing and rate-limiting purposes.
  • Integration credentials - Shopify OAuth tokens or external database connection strings, stored encrypted and used only to sync your catalog.

3. How We Use Your Data

We use collected data to:

  • Provide, operate, and improve the ScubaSearch service
  • Index your product catalog in Meilisearch and generate vector embeddings via OpenAI
  • Display analytics (top queries, zero-result reports, click-through rates) in your dashboard
  • Enforce plan limits and prevent abuse
  • Send transactional emails (account, billing, security alerts)

We do not use your data for advertising, and we do not sell it to any third party.

4. Data Storage

Your data is stored on servers hosted on DigitalOcean (Mumbai region) and Cloudflare Pages (global CDN for the dashboard). Product vectors are stored in Meilisearch on the same VPS.

Search query snapshots are temporarily held in Redis (in-memory) before being settled and written to PostgreSQL. Redis data is not persisted to disk for session buffers.

5. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with the following sub-processors, strictly to provide the service:

  • OpenAI - product text is sent to generate vector embeddings. No personal data is included.
  • Cashfree Payments - payment processing; governed by Cashfree's own privacy policy.
  • Clerk - authentication provider; stores your login credentials securely.
  • Cloudflare - CDN and DNS; may log IP addresses per their privacy policy.

6. Data Retention

  • Active accounts - data is retained for as long as your subscription is active.
  • After cancellation - product data and search indexes are retained for 30 days, then permanently deleted.
  • Search logs - anonymised query logs are retained for up to 90 days for analytics, then purged.
  • Billing records - kept for 7 years as required by Indian financial regulations.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your product catalog from the dashboard at any time

To exercise these rights, email ayushpatil9977@gmail.com. We will respond within 5 business days.

8. Cookies

The ScubaSearch dashboard uses only essential cookies required for authentication (managed by Clerk). We do not use tracking, advertising, or analytics cookies. The embeddable widget does not set any cookies on your customers' browsers.

9. Contact

For privacy-related questions or data requests, contact us at: