Privacy Policy
Last updated: November 9, 2026
This policy explains what information Summl, of California ("Summl", "we"), collects when you use summl.com and app.summl.com, how we use it, and your choices. The short version: we use your information to provide Summl to you, we don't sell it, and you can ask us to delete it.
What we collect
- Account details: your email address, your restaurant's name, and your accounting basis.
- Documents you upload and what Summl reads from them: transactions, amounts, dates, vendors and account labels. These can include financial information about your business, your employees (for example payroll totals) and your suppliers.
- What you tell Summl: your answers in the setup interview, your questions, and the answers Summl gives.
- Reports Summl builds for you.
- Purchases: what you bought and its amount. Card details are collected and stored by Stripe, never by Summl.
- Early-access list: the email address you leave on summl.com.
- Technical information: basic logs (such as IP address and request times) kept to run and secure the service, and privacy-friendly, cookie-free visit statistics for summl.com.
How we use it
- To provide Summl: read your documents, build your reports, and answer your questions.
- To sign you in, take payments, and send you service emails (sign-in links, receipts, and, if you joined it, the early-access announcement).
- To keep Summl secure, prevent abuse, and fix problems.
- To meet legal, tax and accounting obligations of our own.
We don't sell or rent your information, and we don't use your documents for advertising.
Artificial intelligence
Summl uses Anthropic's Claude models, through Anthropic's commercial API, to read documents and answer questions. Your documents and questions are sent to Anthropic for this processing. Under Anthropic's commercial terms, this data isn't used to train their models.
Service providers we use
| Provider | What for |
|---|---|
| Supabase | Database, file storage and sign-in (servers in the United States) |
| Railway | Hosting for the Summl app (United States) |
| Anthropic | AI processing of documents and questions |
| Stripe | Payments and receipts |
| Resend | Sign-in and service emails |
| Render | Hosting for summl.com |
| Cloudflare | Cookie-free visit statistics for summl.com |
They process information only to provide their services to Summl. We may also disclose information if the law requires it, to protect our rights or users, or as part of a sale or merger of Summl (in which case this policy continues to apply).
How long we keep it
We keep your account, documents and reports while your account is open, so you can come back to them. When you ask us to delete your account, we delete your documents, reports and conversations within 30 days, except records we must keep by law (such as payment records). Early-access emails are kept until you ask us to remove them or Summl opens and we've told you.
Security
Connections use HTTPS. Files and data are stored encrypted at rest in private storage that only Summl's servers can reach. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects it, as the law requires.
Your choices and rights
You can ask to see, correct, download or delete your information, or to be removed from the early-access list, by emailing support@summl.com. California residents have rights under the California Consumer Privacy Act, including to know, delete and correct personal information, and not to be discriminated against for using them. We don't sell or share personal information for cross-context behavioral advertising.
Children
Summl is for businesses and isn't meant for anyone under 18.
Changes
If we change this policy in a significant way, we'll tell you by email or in the app before it takes effect.