Who operates this service
M Squared is operated by SurfBreak Digital, a Panama-based sole proprietorship. In this policy, “M Squared,” “we,” “us,” and “our” refer to that operator.
Privacy questions and requests may be sent to surfbreakdigital@gmail.com.
Information we collect
Depending on how you use the service, we may collect:
- Website information: the URL or domain you submit, publicly available pages and technical signals found during an analysis, scan findings, and generated reports.
- Contact information: your email address and, if you contact us, your name, message, requested help type, and related details.
- Transaction and subscription information: purchase, subscription, amount, currency, status, and Stripe identifiers needed to provide and administer a paid service. We do not directly store complete payment-card details.
- Security and usage information: browser or device information, timestamps, request activity, verification status, and security signals used to prevent abuse, enforce rate limits, and protect the service. Internet Protocol addresses may be processed and transformed into a one-way value for rate limiting and security.
- Temporary browser information: limited local storage used to preserve progress and safely move you between verification, checkout, and report steps.
How we use information
- Run the website check, produce a Website Visibility Score, and generate the analysis or monitoring report you request.
- Verify email addresses, deliver reports, respond to support requests, and communicate about a purchase or subscription.
- Process billing, reconcile payments, administer subscriptions, and prevent duplicate or unauthorized access.
- Protect the service, investigate misuse, enforce limits, debug errors, and improve reliability and methodology.
- Meet legal, accounting, fraud-prevention, and regulatory obligations.
Service providers
We use service providers only where needed to operate the service. These currently include Stripe for checkout and billing; Cloudflare for hosting, storage, database, website rendering, security, and privacy-focused traffic measurement on public pages; Resend for verification, report, and support email; and OpenAI for explanatory or recommendation language in paid reports.
The Website Visibility Score is based on versioned, rules-based checks. AI may help explain verified evidence; it does not independently invent or change the score.
These providers may process information in countries other than yours under their own terms and safeguards. We may also disclose information when required by law, to protect rights or safety, or in connection with a legitimate business transfer.
What we do not do
We do not sell personal information. We do not use complete payment-card details because Stripe handles payment entry and processing. We do not intentionally scan private areas of a website; the analyzer evaluates publicly accessible website content and signals.
Retention and security
We retain information only as long as reasonably needed to provide the service, maintain reports and subscription history, resolve disputes, prevent fraud, comply with legal and accounting duties, and protect our systems. Retention may vary by record type and applicable law.
We use technical and organizational safeguards designed to protect information, including verification controls, access tokens for private reports, rate limits, and security screening. No online service can guarantee absolute security.
Your choices and rights
Subject to applicable law, you may ask to access, correct, update, or delete personal information associated with you, or object to or limit certain processing. Panama's Law 81 of March 26, 2019 recognizes rights concerning personal data, and Executive Decree 285 of May 28, 2021 regulates that framework.
Send a request to surfbreakdigital@gmail.com. We may need to verify your identity and may retain information where required for legal, security, billing, or legitimate operational reasons.
You may cancel a monitoring subscription through the Stripe customer portal made available by the service. Browser storage can be cleared through your browser settings, although doing so may interrupt an unfinished analysis or checkout flow.
Children
The service is intended for businesses and adults and is not directed to children. We do not knowingly collect personal information from children through the service.
Changes to this policy
We may update this policy as the service, vendors, or legal requirements change. The effective date above will show when the current version took effect. Material changes may also be communicated through the website or by email when appropriate.
Contact
M Squared, operated by SurfBreak Digital, a Panama-based sole proprietorship
surfbreakdigital@gmail.com