Security and data
Plain facts about where your scripts and recordings go. We do not claim certifications we do not have.
Where your data lives
- CleanTake's application, database and audio files are on Surge's own servers in Bengaluru, India.
- Recordings are stored as files on that server; scripts, results and comments are in its database.
- The database is backed up every night and backups are kept for 7 days on the same servers.
- Traffic to the website passes through Cloudflare's network, which may handle it outside India.
Speech recognition and your audio
- English recordings are transcribed by speech recognition (Whisper) running on Surge's own server. They do not leave our servers for this.
- Recordings in Indian languages are cut into pieces under 30 seconds and sent to Sarvam AI (India) for transcription. If our monthly Sarvam allowance is used up, they are transcribed on our own server instead.
- We do not use your scripts or recordings to train AI models, ours or anyone else's.
- The free try page (no sign-up) deletes the recording as soon as the check finishes.
Who can see your work
- Every project belongs to one account. The server checks the account on every request, so one account cannot open another's projects or audio.
- A review link is off until you switch it on. Anyone with the link can listen and comment. You can switch it off at any time, which stops the link working.
- Audio is streamed only to the signed-in owner or to a visitor with a live review link.
Security controls in the product
- The site is served over HTTPS only.
- Passwords are stored as salted scrypt hashes, never in plain text. Sign-in uses an httpOnly session cookie.
- Password-reset links are single use, expire in 30 minutes, and sign out every other device.
- Payment notifications from Razorpay are checked with a signature and applied only once. We never see full card or bank details.
- Sign-up has a bot check.
How long we keep data
- Projects, recordings and results stay until you delete them. Deleting a project deletes its recordings from the server straight away; nightly backups roll off within 7 days.
- If you close your account, write to us and we delete your data within 30 days.
Sub-processors
- Cloudflare: network and security for this website.
- Sarvam AI (India): speech-to-text for Indian-language recordings.
- Razorpay: payments for plans.
- Resend: service email.
Questions or a security report
Write to [email protected].