Privacy Policy

This policy explains what Abdelmalek Salah Eldin Abdelalim Elsayed Abdelwahab, trading as SurchargeBack (“we”) collects when you use SurchargeBack, why, and your choices.

What we collect

• Account data: your email address, used to sign you in and contact you about your scans.
• Documents you upload and the data we extract from them (supplier names, invoice numbers, dates, charges).
• Usage and outcome data: what you confirm or reject, and any request status or outcome you record.
• Payment data is collected and processed by Paddle, our merchant of record. We never see your card details.

How we use it

Only to provide the Service: reading your documents, showing results, generating your reports, handling payment, support, and keeping the Service secure. We don't sell your data and don't use it for advertising.

Sub-processors

• Supabase (database, file storage, authentication) — United States region.
• OpenAI (reading documents through its API; API data is not used to train OpenAI models by default, and may be retained briefly for abuse monitoring).
• Vercel (hosting).
• Paddle (payments, tax, invoicing).
• Resend (sign-in and service emails).

Retention

Uploaded files are deleted automatically 30 days after the last activity on a scan you haven't paid for, and 120 days after you unlock a pack. Extracted findings and outcomes are kept until you delete the scan or your account. You can delete any scan, with its files, at any time from the app.

Security

Files are stored privately and encrypted at rest. Each account can only access its own scans. Access to files uses short-lived signed links.

Your rights

You can access, correct, export or delete your data. Email support@surchargeback.com and we'll respond within 30 days.

Contact

Abdelmalek Salah Eldin Abdelalim Elsayed Abdelwahab, trading as SurchargeBack, Egypt · support@surchargeback.com