Privacy policy

Draft for legal review. Last updated 20 October 2026.

Who we are

Surge Migrate is a product of Surge Software Solutions Private Limited (CIN U72200KA2021PTC154343), registered office Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066. The company decides how the personal data described here is used: it is the data fiduciary under India's Digital Personal Data Protection Act 2023 and, where the EU or UK GDPR applies, the controller. Contact: [email protected].

Grievance officer

Venu Gopal Reddy Muvva, Director, Surge Software Solutions Private Limited, Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066. Write to [email protected] with "Grievance" in the subject.

Readiness scan

Files you scan are read in your browser and are not uploaded. If you request an AI summary, we send aggregated results (finding types, counts and estimates; no file contents or paths) to our server. The summary is written by an AI model on servers we operate; if that is unavailable, the aggregated results may be sent to Anthropic's Claude API instead. We do not store the summary.

Client code during engagements

Code and configuration from client repositories are processed only by AI models on servers we operate. They are not sent to external AI services unless the client agrees in writing.

Client portal

For portal users we store your email address and name, the workspaces and projects you belong to, scan results (finding types, file paths and line numbers, never file contents), Blueprints, decisions, delivery status and an audit trail of actions. A session cookie keeps you signed in; it is essential, not used for tracking. If your company connects a repository, Jira, Cloud Manager, Slack or Teams, the access tokens and webhook addresses it provides are stored encrypted and used only for that project. Code downloaded from a connected repository is scanned on our servers; only the findings are kept.

Contact and lead forms

We collect your name, work email, company, country, timeline and message, plus the aggregated scan if you attach it. We use them only to reply to you and to prepare a proposal. We do not sell personal data or add you to marketing lists without your consent.

Your rights

Under India's Digital Personal Data Protection Act 2023 and, where it applies, the EU and UK GDPR, you can ask to access, correct or delete your data, or withdraw consent, by writing to [email protected].

Cookies and analytics

The site sets no tracking cookies. Your currency choice is remembered in your browser's local storage.

Processors

Our hosting and database providers; Anthropic (fallback for AI summaries of aggregated scan results only); the CRM or spreadsheet that receives form submissions (for example HubSpot or Salesforce, when enabled); and our email provider for sign-in links and project notifications (Resend or an SMTP relay). Integrations your company connects (GitHub, GitLab, Azure DevOps, Jira, Adobe Cloud Manager, Slack, Teams, your identity provider) receive only what is needed for the feature you turned on. Each processes data only on our instructions.