Privacy Policy

This policy explains what aisummary collects, what we do with it, and what we will never do. It covers accounts, summaries, billing, and support. If a specific case isn't covered, write to us through the contact form and we'll write an answer here so the next person gets it for free.

What we collect, and why

Your email, when you open an account. We need a way to tell you that something has gone wrong with billing, that we've shipped a feature that might break your workflow, or that someone has tried to sign into your account from a new device. We don't use your email to sell you things.

Your password, in hashed form. We never see your password. What we store is a cryptographic hash. If we lost the entire database tomorrow, no one could read your password from it.

The URLs you summarize and the summaries we return. These are attached to your account so you can find them later. If you delete a summary, we delete it from our database within seven days. If you close your account, we delete your entire library within thirty days.

Billing information for Pro subscribers. We use Stripe. Your card details never touch our servers. Stripe stores them and gives us a token we can use to charge you each month.

Anonymous product usage. Which pages load, how long summaries take, which features get used. We use Vercel Analytics, which is cookieless and doesn't build a profile of you. We use it to make the product faster, and that's all.

Crash reports. If the app throws an error, we log the error, the URL where it happened, and a timestamp. No personal content.

What we don't collect

We don't collect your IP address beyond the short window our hosting provider needs to route requests. We don't fingerprint your browser. We don't use advertising trackers. There is no Facebook pixel on aisummary.link, nor on the app.

What we don't do with your data

We don't sell it. We don't rent it. We don't share it with data brokers. We don't train language models on the URLs you save or the summaries you keep. We don't show your reading history to other users. We don't use your library to target ads at you, because we don't sell ads.

If we ever change any of the above, we will tell you at least ninety days in advance, and we will give you a clean export before it takes effect.

Who has access

The three of us can read support tickets when you send them, because otherwise we can't answer them. We cannot see your library unless you explicitly share a URL with us in a support message. We don't poke around.

Our database is on a cloud provider in the United States. Our model calls go to a third-party provider we've vetted, who is contractually forbidden from keeping or training on your prompts. If that ever changes, we'll update this page.

Cookies

We use one cookie: the session cookie that keeps you signed in. It's strictly necessary, it doesn't track you across sites, and it expires when you sign out. See the Cookie Policy for the details.

Your rights

You can ask us for a copy of everything we have on you at any time. You can ask us to delete everything we have on you at any time. Both requests go through the contact form. We reply within a week. Most requests take less than ten minutes to fulfill on our side, so it's usually faster than that.

If you're in the EU, the UK, or California, you have additional rights under local law. Those rights apply here too, without conditions. If you want to exercise one of them, say so in your message and we'll handle it accordingly.

Children

aisummary is not intended for anyone under sixteen. If we find out we've opened an account for someone under sixteen, we close it and delete it.

Security

We encrypt connections in transit with TLS. We encrypt the database at rest. We rotate credentials quarterly. If we ever have a security incident that puts your data at risk, we tell you within seventy-two hours, we tell you what happened, we tell you what we did about it.

Changes

If we change this policy, we update the date at the top and we email you before the change takes effect. We don't change it quietly.

Getting in touch

Privacy questions go through the contact form. We answer within a few days. We don't have a dedicated privacy officer because we're three people and we all care.