Privacy and security posture
Privacy Notice
Last updated: June 6, 2026. This notice explains the account, access, and operational data MoveSurge uses to provide the service. MoveSurge is operated by Swift Core Digital Marketing LLC, a company registered in New York, USA, operating from Zurich, Switzerland, which is the data controller for the purposes of this notice.
1. Information collected
We collect information needed to create and operate accounts, including email address, password-authentication metadata, account status, tier, firm or company information when supplied, access-request details, workflow needs, and communication preferences.
The service may also collect operational records such as login events, session metadata, IP address, browser/device information, feature usage, performance reports, audit logs, support messages, and acceptance of legal terms.
2. How information is used
We use this information to authenticate users, manage tiered access, review institutional access requests, protect source licensing, monitor reliability, improve product quality, provide support, prevent abuse, and satisfy contractual or legal obligations.
3. Service providers and data handling
MoveSurge may use infrastructure, authentication, payment, analytics, email, logging, market-data, and AI service providers to operate the product. These providers should only receive data needed for their function and should not be treated as owners of your account data.
Do not submit confidential portfolio holdings, client personal data, MNPI, or regulated personal data unless your firm has approved that use case in writing.
Approximate IP geolocation (city/country, for security and analytics) is derived locally from the free DB-IP Lite database. IP geolocation by DB-IP.
4. Retention and access controls
Account and access records are retained while needed to provide the service, preserve security/audit logs, resolve disputes, comply with legal obligations, or maintain source-licensing records. Access to operational data should be limited to personnel and providers with a business need.
Connection and activity logs — including IP address, page views, time on page, on-site actions, and search queries — are retained for up to 90 days for security and product analytics, then automatically deleted. IP addresses flagged for abuse may be kept longer for security blocklisting.
5. Your choices
You may request account updates, access review, or deletion where legally and contractually available. Some records may be retained for security, audit, billing, compliance, or dispute-resolution purposes.
6. Contact
For privacy, security, or data-handling questions, contact [email protected].
