Privacy Policy
Last Updated: July 28, 2026
Privacy at a Glance
What We Collect
Content you summarize, auth tokens, usage stats
Why We Collect
To provide AI summarization services
How We Protect
HTTPS encryption and strict access controls
Your Control
Delete individual summaries anytime; delete your account on request
Introduction
Sumwise Tech Labs Ltd ("we," "our," or "us") operates the Sumwise browser extension and the Sumwise web app at sumwise.ai (together, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Content You Choose to Summarize
When you use the Service to summarize content, we process:
- Web Page Content: Text from pages you choose to summarize
- PDF Documents: Text from PDFs you upload or provide URLs for
- YouTube Videos: The video identifier and the video's transcript, which we fetch to generate the summary
Important: We only process content when you explicitly trigger a summary — for example, clicking "Summarize" in the extension or pasting a URL or text in the web app. We do not automatically scan or collect your browsing data.
1.2 Authentication Information
- Authentication Tokens: Stored locally to maintain your session
- Account Information: Email and user ID (server-side only)
1.3 Usage Data
- Summary Count: For rate limiting purposes
- Content Type: Web/PDF/YouTube tracking
- Timestamps: When summaries were created
1.4 Google Sign-In (Optional)
If you choose "Continue with Google," we receive only the following from your Google account:
- Email address: to identify your account
- Google account identifier: a stable ID Google assigns to your account, which we store so we can recognize you on future sign-ins
We do not receive or store your name, profile photo, or any other Google profile data, and we do not access any Google services on your behalf.
2. How We Use Your Information
2.1 Core Functionality
- AI summarization through our models
- User authentication and session management
- Daily usage limit enforcement
2.2 Service Improvement
- Improving summarization accuracy
- Bug fixing and technical improvements
- Feature development based on usage patterns
2.3 Marketing Communications
If — and only if — you explicitly opt in, we may email you product updates and news about Sumwise. This is never bundled with account creation or Terms acceptance, and you can withdraw your consent at any time by emailing info@sumwise.ai. We do not sell or share your email address for others' marketing.
3. Data Storage and Retention
3.1 Local Storage (Your Browser)
- Auth Tokens: Until sign out or expiration
- Session Summaries (local view): Temporary local/session browser state, cleared on tab close. This refers only to the local view — your saved summaries remain available server-side in History (see 3.2).
3.2 Server Storage
- Account Data: While account is active
- Usage Stats: Retained while your account is active; used for rate limiting and service analytics
- Summaries: Stored server-side to power your History — retained while your account is active or until you delete them
Your control: You can delete individual summaries at any time from your History. Requesting account deletion also deletes all of your summaries.
4. Data Sharing and Disclosure
We Do NOT Sell Your Data
We do not sell, trade, or rent your personal information to third parties.
Third-Party Services
- AI Processing: Amazon Bedrock (AWS) — AI inference
- Hosting: Chrome Web Store, AWS infrastructure
- Payment Processing: Stripe — handles your payment and card details when you subscribe
- Analytics (web app only): Google Analytics — usage analytics on our website; sets cookies. The browser extension does not use Google Analytics
Cookies & Analytics
Our web app uses Google Analytics, which sets cookies to measure usage and improve the Service. A consent mechanism governs non-essential cookies such as these.
First-Party Analytics (No Cookies)
We also run our own privacy-preserving analytics to understand how the Service is used. This system:
- Uses no cookies or device storage: nothing is placed on or read from your device
- Processes your IP address and browser user agent transiently: in memory only, to compute a salted, anonymized identifier and to derive your country. The salt rotates daily, so this identifier cannot be linked across days
- Never stores your IP address — not in our database and not in our logs
- Does no cross-site tracking: measurement is limited to our own Service
- Covers the browser extension too: extension usage events — such as opening the extension, changing the summary language, or an error type — are recorded in this same first-party system. The extension does not send analytics to Google Analytics
We process this data on the basis of our legitimate interest in understanding and improving the Service.
5. Data Security
We implement robust security measures:
Encryption
All data uses HTTPS/TLS encryption
Access Controls
Strict backend system controls
Secure Storage
Tokens stored safely in browser
Least-Privilege Access
Scoped credentials and restricted access to production systems
6. Your Rights and Choices
Access and Control
- View your data at sumwise.ai
- Delete individual summaries from your History at any time
- Request account deletion (this also deletes your summaries)
- Uninstall the extension anytime
Contact Us
To exercise your privacy rights or for any questions:
Email: info@sumwise.ai
Website: https://sumwise.ai
7. Children's Privacy
Our Service is not intended for children. In the United States, we do not knowingly collect personal information from children under 13 (COPPA). Under UK and EU GDPR, the minimum age to consent to data processing varies by jurisdiction (generally between 13 and 16), so the applicable minimum age depends on where you live. If you believe a child has provided us with personal information, please contact us at info@sumwise.ai.
8. Policy Changes
We may update this Privacy Policy. We'll notify you by:
- Posting updates on this page
- Updating the "Last Updated" date
- In-app notifications for material changes
9. Regional Privacy Rights
California (CCPA)
California residents have the right to:
- Know what personal information is collected
- Opt-out of data sales (we don't sell data)
- Request deletion of personal information
European Union (GDPR)
EEA residents have the right to:
- Access, rectify, and erase personal data
- Data portability and processing restrictions
- Lodge complaints with supervisory authorities