Not AGI. Not a chatbot that chats. An invisible digital employee that runs your school's logistics: it reads the sea — computes it, doesn't guess it — respects the safety rules, and handles the rest. 5 minutes become 5 seconds, sealed inside your school.
Every Agent on SurfBooking runs on the same hard foundation — privacy, audit, honesty, no-leak. Your school adds its own layer on top.
The platform charter we wrote and we follow. Defines what every Agent — on every school, on every device — must do and cannot do. Privacy between schools. Audit trail. No invention. No PII leak. We are bound by it just like you. It does not bend for revenue, for VCs, for shortcuts.
Built on top of ours. House rules, your school's voice, student quirks, special protocols. The Agent reads it before every answer. Evolves with you every day.
The Surf Booking team sees anonymised signals of how your Agent is used and whether people found it helpful — usage and thumbs up/down, aggregated. Nothing more. We never read what you said to the Agent, nor what it replied. Every conversation stays sealed inside your school.
Proprietary swell + wind + tide per spot. Suggests the best windows for each level.
Single, batch, pack or external (Airbnb / Booking). Wizards guide the school step by step.
Waiting list, equipment, instructor history, student progress, certifications. Pulls from your live data — never invents.
New class opens — notifies the right surfers (level, beach, language match) and tracks who answered.
Bookings, revenue, cancellations, average rating. Spots patterns you missed — "3 cancellations on windy Sundays this month".
Pedagogical ratios, age caps, regulatory limits — validated automatically before any class goes live.
The full charter is longer and audit-grade. These seven are the ones a school cares about most.
Each school is a sealed silo. No Agent, instructor or partner from one school can read another's data. Separation is enforced server-side, not in the UI.
The file where you write your rules, voice and quirks. The Agent reads it before every answer. Free to edit — evolves with you every day.
The Agent cites the source of every fact. When unsure, it declines. It doesn't invent. When it doesn't know, it says so — in plain language, no corporate-speak.
Hiding in the frontend is never enough. Every sensitive request is validated server-side. You never rely on what the screen hides — neither do we.
We never read the texts. We never know what you said to the Agent or what it replied — only anonymised usage metrics. Measuring the Agent's QUALITY over time is the next step (being built).
Max length per question. Hourly limits per user. Detector for Agent manipulation attempts. No room to abuse.
When a lesson bundles two or more coaches to expand capacity, Portuguese beach law requires students to be split into independent sub-groups on the sand — each sub-group respecting the single-coach ratio. The platform surfaces this rule on every creation, edit and check-in, in plain pedagogical copy. It doesn't block (the operation is the school's); it informs, protects and records.
Under NDA, regulators inspect the SHAPES below — not the content. Administrative actions land in an append-only audit log; the refund ledger goes further with a server-side hash chain so payout reconciliation is hash-verifiable on replay.
The Agent's prompts, its core configuration and your school's context never leave us. We don't share them with auditors, with other schools, with anyone. What we do open up — under NDA, when a regulator asks — are our controls: the code paths that prove privacy, audit-trail integrity and RGPD work. Never the content they protect.
Two mics in the calendar: header for bulk, lesson tile for surgical. Browser-native speech, no commands to memorise, never opens chat silently — stays in the calendar so you don't lose flow.
The foundation is already running. The school layer is yours to write. Open your school, edit the context file in two minutes, and the Agent starts answering with your house rules from the next conversation onwards.
Create my school's constitution →