Surfacedd is a dual-entity company — a US operating entity and a Singapore holding entity act as the contracting parties in their respective regions. The eight documents below form the complete legal framework. Privacy and the Cookie Policy apply to everyone who interacts with the platform or the website. The Master Services Agreement and the two role-specific addenda apply to every advertiser and publisher. The Data Processing Addendum and Acceptable Use Policy are incorporated by reference into both sets of commercial terms. Last reviewed 2026-04-20.
How Surfacedd collects, uses, and shares personal data. Covers advertisers, publishers, end users of publisher AI apps, and marketing-site visitors. Rights under GDPR, UK GDPR, US state privacy laws, India DPDP, Singapore PDPA, Brazil LGPD.
Cookies used on the surfacedd.com marketing website. Surfacedd is a contextual ad network and does not use cookies to deliver ads inside publisher AI applications.
The shared commercial foundation applicable to every Surfacedd counterparty. Incorporated by reference from the Advertiser and Publisher addenda.
Specific terms for brands buying inventory through Surfacedd. Insertion Orders, ad creative standards, pricing, invalid-traffic credits, measurement.
Specific terms for AI app developers integrating the Surfacedd SDK. Sponsored-label rendering, EU AI Act deployer obligations, revenue share, Stripe Connect payout.
Terms governing use of the surfacedd.com marketing website. Applies to anyone visiting, browsing, or reading the site.
Data-protection terms incorporated into every commercial agreement. Standard Contractual Clauses, UK IDTA, India DPDP processor clauses, Singapore PDPA transfer, subprocessor list.
Prohibited content, technical conduct, AI conduct, and audience targeting. Applies to every counterparty using Surfacedd. Amended without reopening the MSA.
Every Surfacedd legal document directs privacy, policy, and contractual inquiries to [email protected]. Named jurisdictional roles — Article 27 representatives for the GDPR and UK GDPR, the Data Protection Officer for the Singapore PDPA, and the Grievance Officer for the India DPDP Act — will be appointed and published in the Privacy Policy before general availability of the platform. Until that point, the same address reaches the team responsible for each regime.