Last updated: November 2024
Privacy Policy
At summry, we are committed to protecting your privacy and ensuring that your personal data is handled with the utmost care and transparency.
We only collect the essential information necessary to provide our AI-powered newsletter service—nothing more.
You can review our full privacy policy below for details on how we collect, use, and protect your data. If you have any questions or concerns, feel free to contact us at privacy@summry.io.
Who is this privacy policy for?
summry places great importance on the protection and confidentiality of your personal data, considering it a fundamental pillar of trust. Our Privacy Policy reflects our commitment to ensuring compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR). This policy aims to inform you about how and why we process your personal data in connection with the services we provide.
What services are covered by this policy?
This policy applies to all services related to our AI-powered newsletter platform, specifically:
- •Account data — Information you provide when creating an account, including your email address and authentication credentials.
- •Newsletter configuration — Topics, frequency preferences, and recipient lists you create to generate your newsletters.
- •Recipient data — Email addresses of individuals you add to receive your newsletters, processed with double opt-in confirmation.
- •Payment information — Processed securely through our payment provider; we do not store your card details.
- •Technical data — IP addresses, browser information, and usage patterns collected for security and service improvement.
Technical infrastructure and third-party services
We use carefully selected third-party services to provide our platform. All processors are GDPR-compliant and bound by data processing agreements:
| Processor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database & authentication | Email addresses, newsletter configs, recipient emails | Frankfurt, Germany |
| Resend | Email delivery | Recipient email addresses | Dublin, Ireland |
| Vercel | Hosting & security (WAF) | IP addresses, request metrics | USA (EU-US DPF) |
| Lemon Squeezy | Payment processing | Payment card data (not stored by us) | USA (PCI DSS) |
| Perplexity AI | Content generation | None (only topic queries) | USA |
All processors are bound by data processing agreements (DPAs). For US-based processors, transfers are protected under the EU-US Data Privacy Framework or Standard Contractual Clauses.
How long do we keep your data?
We retain your information only for as long as necessary to provide our services:
- •Active accounts: Data is retained while your account remains active.
- •Deleted accounts: All data is permanently deleted within 30 days of account deletion.
- •Unsubscribed recipients: Recipient data is immediately and permanently deleted upon unsubscription.
- •Inactive free accounts: May be scheduled for deletion after 6 months of inactivity, with prior notice.
Cookies
We use only essential cookies necessary for the proper functioning of our service, such as maintaining your session and authentication state. We do not use tracking cookies, advertising cookies, or any third-party analytics that would track your behavior across websites.
What are your rights?
Under the GDPR, you have several rights regarding your personal data:
- •Right to Access: You can request access to the personal data we hold about you.
- •Right to Rectification: You can request correction of any inaccurate personal information.
- •Right to Erasure: You can request that we delete your personal data.
- •Right to Object: You can object to the processing of your personal data.
- •Right to Data Portability: You can request to receive your data in a structured format.
How to exercise your rights?
To exercise any of your rights, please contact us at privacy@summry.io. We will respond to your request within one month as required by GDPR. You can also manage most of your data directly through your account settings, including downloading your data or deleting your account.
For newsletter recipients
If you receive newsletters through summry (as a recipient, not an account holder):
- •You were added by a newsletter creator and received a confirmation email (double opt-in).
- •You must confirm your subscription before receiving any newsletters.
- •You can unsubscribe at any time using the link in any newsletter email.
- •Upon unsubscription, your data is immediately and permanently deleted.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on our service. Your continued use of summry after such modifications constitutes acceptance of the updated policy.
Contact us
For questions or concerns about this Privacy Policy or our data practices, contact us at: privacy@summry.io