Privacy Policy

This policy applies to personal information we collect through the Summand platform at summand.com, our APIs, and any related tools and documentation. It does not apply to third-party services that integrate with Summand, which are governed by their own privacy policies.

Account Information. When you create an account, we collect your name, email address, and password. If you sign in through a third-party provider (e.g., Google or enterprise SSO), we receive your name and email from that provider.

Customer Data. You may upload CSV files, connect databases, or otherwise provide data for analysis. We process this data solely to provide the Service. We do not access your Customer Data except as needed to operate, maintain, or improve the Service, or as directed by you.

Usage Information. We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, browser type, operating system, and IP address.

Payment Information. If you subscribe to a paid plan, our payment processor (Stripe) collects your payment details. We do not store full credit card numbers on our servers.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your data uploads and generate analysis results
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Send transactional communications (e.g., account confirmations, security alerts)
• Send product updates and announcements (you may opt out at any time)
• Monitor and improve the Service's performance, reliability, and security
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Comply with legal obligations

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors that help us operate the Service (e.g., AWS for hosting, Stripe for payments, PostHog for analytics)
• Enterprise Customers:If you use Summand through an organization with enterprise SSO, your organization's administrator may have access to account and usage information
• Legal Requirements: When required by law, legal process, or to protect the rights, property, or safety of Intelligible, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

Access and Correction. You can access and update your account information through your Account settings at any time.

Deletion. You may request deletion of your account and associated data by contacting us at privacy@intelligible.ai. We will process deletion requests within 30 days, except where retention is required by law.

Data Export. You can export your Customer Data at any time through the Service.

Email Opt-Out. You can unsubscribe from non-essential emails using the unsubscribe link in any email or through your Account settings. Transactional emails (e.g., security alerts, billing receipts) cannot be opted out of.

We use cookies and similar technologies to authenticate sessions, remember preferences, and analyze usage patterns. Specifically:

• Essential Cookies: Required for authentication and core functionality. These cannot be disabled.
• Analytics: We use PostHog for product analytics to understand how the Service is used and improve it.

We retain your personal information for as long as your account is active or as needed to provide the Service. Customer Data is deleted within 30 days of account termination. We may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, audit logs).

We implement industry-standard security measures including encryption at rest and in transit, access controls, monitoring, and regular security assessments. All data is hosted on AWS in the US-East-1 region.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected information from a child under 16, we will take steps to delete it promptly.

California Residents (CCPA). You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@intelligible.ai.

EEA/UK Residents (GDPR). Our legal basis for processing personal information includes: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), consent (marketing communications), and legal obligations. You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise your rights, contact us at privacy@intelligible.ai.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last modified" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

For questions about this Privacy Policy or our data practices, contact us at privacy@intelligible.ai.

Intelligible AI, Inc.