Privacy Policy

Last updated 19 October 2026

Surge Jobs helps you find jobs, tailor each application and prepare for interviews, in a chat on LINE, WhatsApp or Telegram. This policy explains what we collect, why, who receives it, how long we keep it and your rights. In short: we use your data to run your job search, we only send applications you approve (or that you switch on auto-apply for), we don't sell it, and you can delete it from the chat at any time.

Who we are

Surge Jobs is run by Ruminate Studios, 91 Ratchapruek Soi 9, Imamporn 2, Soi 15B, Taling Chan, Bang Chueak Nang, Bangkok 10170, Thailand. Contact: hello@mail.surge.channel. We are the controller of the personal data described here.

What we collect

How we use it

We do not sell your information, and we do not use it for advertising.

AI processing

Surge Jobs uses an AI provider to read your CV, files and voice notes, understand job ads, match and score jobs, write and check your applications, give interview feedback, and read replies aloud when you tap Listen. When it searches the web for jobs, companies about to hire, or who to contact at a company, it sends the kind of role, field, place and skills you're looking for (and the company's name), not your name or contact details. AI can make mistakes, so every application is shown to you before it's sent (unless you switch on auto-apply), and the fit check and our truth check only use facts from your profile.

Connecting your email

Connecting Gmail is optional. It lets applications go from your own address and lets us spot employers' replies. The connection is made through an email-connection service, and you approve it on Google's own sign-in page. That page will ask for full access to your Gmail, plus your basic profile, contacts, addresses, birthday and phone numbers, because that is the permission set of the connection we use. Surge Jobs only uses it to search your inbox for replies from the employers you applied to (from the date you applied), to send the emails you approve, and to send scheduled follow-ups for your applications. You can disconnect at any time on your account page (type settings), and it's disconnected automatically when you delete your data. If you'd rather not connect, Surge Jobs gives you the finished email to send yourself.

Who receives your data

Some of these providers process data outside your country. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Deleting your data and your rights

UK and EU: under the UK GDPR and EU GDPR you can access, correct, delete, restrict or object to the processing of your data, ask for it in a portable form, and withdraw consent at any time. We process your data to provide the service you asked for (our contract with you), for our legitimate interests (security, preventing abuse, improving matches) and to meet legal obligations. You can complain to the UK Information Commissioner's Office or your local EU data protection authority.

Thailand: under the Personal Data Protection Act B.E. 2562 (PDPA) you have the same rights, on the same legal bases, and can complain to the Office of the Personal Data Protection Committee (PDPC).

Security

Connections are encrypted (HTTPS), backups are encrypted (AES-256), and your email connection is held by our email-connection service after you approve it on Google's page; we never see your password. Applications are only sent when you tap Send (each waits 60 seconds so you can undo it), or by auto-apply within the limits you set. More: How we protect your data.

Children

Surge Jobs is for people looking for work and is not intended for anyone under 18.

Changes

We may update this policy and will change the date above. For significant changes we'll tell you in the chat.

Contact

Ruminate Studios · 91 Ratchapruek Soi 9, Imamporn 2, Soi 15B, Taling Chan, Bang Chueak Nang, Bangkok 10170, Thailand · hello@mail.surge.channel