Privacy
Privacy statement
Last updated: 27 July 2026
Surge Agent is careful with data. We don't just sell that to our clients, we practise it ourselves. Below is exactly what we collect through surgeagent.dev, why, and what rights you have.
This English version is provided for convenience. The Dutch version prevails in case of differences.
1. Who is responsible?
Surge Agent, a trade name of Van Borg, is the controller for data collected through surgeagent.dev. Address: Kieler Bocht 104, 9642 CE Veendam, the Netherlands. Chamber of Commerce (KVK) number: to follow upon registration. Privacy contact: nicolaas@surgeagent.dev or +31642337737, or via the contact form on this site.
2. What data do we collect?
Contact form and free scan: name, company name, email address, phone number, your message and, if you use the calculator, your product selection. You provide this data yourself.
Chat conversations: what you type in the chat on this site, so we can answer your question and improve the assistant. The chat states at the start that you're talking to AI. Conversations that don't lead to a request are kept for at most 12 months. To prevent abuse of the chat we don't store IP addresses, only an encrypted derivative (hash); legally that remains personal data and we treat it as such.
Technical: this website uses no tracking cookies and no advertising pixels — which is why you don't see a cookie banner here; one isn't legally required then. We only remember your theme preference (light/dark) locally in your browser (localStorage); that never leaves your device. Our hosting provider briefly processes technical log data (such as IP address) to keep the site secure and available.
3. Why do we use this data?
To answer your request, schedule the free scan and make a fitting proposal (basis: performance of the agreement or pre-contractual phase).
To improve our site and chat assistant (basis: legitimate interest, with as little data as possible).
We don't use your data for unsolicited newsletters and never sell it to third parties.
4. How long do we keep data?
Contact requests that don't lead to an assignment: at most 12 months, after which we delete them. If you become a client, we keep the data needed for the agreement; records with fiscal relevance are kept for 7 years (statutory obligation).
5. Who do we share data with?
Only with providers needed to run the site and our services. Specifically: Vercel (hosting), Supabase (database, EU region), Anthropic (the AI model behind the chat assistant), Cal.com (scheduling the free scan), n8n (internal notifications) and Google (Sheets for our internal lead overview, Gmail for the confirmation email you receive after a request). Data processing agreements are in place with these parties.
Some of these providers process data in the United States. That happens with appropriate safeguards: certification under the EU-US Data Privacy Framework and/or EU standard contractual clauses. You can request a copy of those safeguards from us. We never sell data and share nothing for advertising purposes.
6. Our clients' data (when we act as processor)
When our agents run for your business, we process your customers' data (such as phone numbers and conversation content) on your behalf. You remain the controller; we are the processor and sign a data processing agreement for this. That data is and remains yours. If you stop renting, you receive an export and we delete the data.
For that service we engage sub-processors (such as the providers listed above). The current list is part of your data processing agreement; changes are announced by email at least 14 days in advance, so you can object before a new sub-processor handles any data.
7. Security
We take appropriate technical and organisational measures: encrypted connections (https), access restrictions, and as little data in as few places as possible. Should a data breach with risk to data subjects occur despite this, we report it according to the statutory rules.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Send your request via the contact form; we respond within a month. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
9. Changes
We may update this privacy statement, for example when our services change. The current version is always on this page, with the date of the latest change at the top.