Privacy, explained clearly.

This Privacy Policy applies to the SummAsync website, account workspace, PDF analysis features, and related support services (the “Service”). SummAsync is the service responsible for the processing described here.

By using the Service, you acknowledge the practices described in this policy. If you do not agree, do not upload documents or use the Service.

We collect only the information needed to operate, secure, and improve the Service:

• Account data: Name, email address, authentication identifiers, and basic profile information supplied by you or an identity provider such as Google or Microsoft.
• Document data: Uploaded PDF files, extracted text, generated summaries, analyses, and export files.
• Usage and technical data: Feature usage, credit consumption, timestamps, browser and device information, IP address, security events, and diagnostic logs.
• Billing data: Plan, subscription status, transaction references, and billing contact information. Payments are processed by Creem; SummAsync does not receive or store your complete payment-card number.
• Support data: Messages and information you provide when contacting support.

• Authenticate users and maintain account sessions.
• Accept PDFs, extract text, generate summaries and structured analysis, save document history, and prepare exports.
• Track plan entitlements and usage credits and administer subscriptions.
• Respond to support requests and service communications.
• Detect abuse, protect accounts, troubleshoot errors, and maintain service reliability.
• Comply with legal obligations and enforce our Terms of Service.

SummAsync is an independent application that provides a document workflow built on third-party AI technology. We use the DeepSeek API, with deepseek-chat as the default model, to produce summaries and structured document analysis.

When a user requests AI analysis or summarization, the document content required for that task may be securely transmitted to the AI processing provider used by SummAsync, including DeepSeek, for the purpose of generating the requested result. Relevant text extracted from your PDF—not unrelated account or billing data—is sent using encrypted network transport.

DeepSeek acts as an independent third-party AI processing provider, and its processing is also governed by its own terms and privacy practices. Do not upload information that you are not authorized to share with an AI service.

AI output may be incomplete or inaccurate. Review important conclusions against the original document before relying on them. SummAsync is not affiliated with, endorsed by, or sponsored by DeepSeek.

We share information only as needed to operate the Service, comply with law, or protect users. Key providers include:

• Supabase: Authentication, database, and document storage infrastructure.
• DeepSeek: AI processing of relevant extracted document text.
• Creem: Merchant-of-record checkout, payment processing, tax, invoicing, and subscription administration.
• Hosting and infrastructure providers: Application delivery, security, monitoring, and operational support.

We may also disclose information when legally required, to investigate abuse or fraud, or in connection with a business reorganization subject to appropriate protections.

Uploaded PDF files, extracted text, and generated document results are retained for 24 hours from upload and are then automatically deleted from the active document workspace. This short retention window gives you time to download available exports while limiting how long document content remains stored.

You may delete a document sooner from your authenticated workspace. Account, billing, fraud-prevention, security, and legally required records may be retained for as long as reasonably necessary to provide the Service, meet legal obligations, resolve disputes, and prevent abuse. To request account deletion or help with data removal, email support@summasync.com.

We use reasonable administrative and technical safeguards, including authenticated access and access controls, to protect information. No online service can guarantee absolute security, so you should use a strong account credential and avoid uploading unnecessary sensitive information.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, or to receive a portable copy of personal data. You may also withdraw consent where consent is the legal basis for processing.

Send requests to support@summasync.com. We may need to verify your identity before completing a request.

The Service is not directed to children under 13, or below the minimum age required to consent to online services in their location. We do not knowingly collect personal data from children in violation of applicable law.

We may update this policy when our product, providers, or legal obligations change. The current version and effective date will remain publicly available on this page.

Privacy questions and requests: support@summasync.com.