Last updated: February 2026
Privacy Policy
At summry, we are committed to protecting your privacy and ensuring that your personal data is handled with the utmost care and transparency.
We only collect the essential information necessary to provide our AI-powered personalized news digest service—nothing more.
You can review our full privacy policy below for details on how we collect, use, and protect your data. If you have any questions or concerns, feel free to contact us at privacy@summry.io.
Who is this privacy policy for?
summry places great importance on the protection and confidentiality of your personal data, considering it a fundamental pillar of trust. Our Privacy Policy reflects our commitment to ensuring compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR). This policy aims to inform you about how and why we process your personal data in connection with the services we provide.
What services are covered by this policy?
This policy applies to all services related to our AI-powered personalized news digest service, specifically:
- •Account data — Information you provide when creating an account, including your email address and authentication credentials.
- •Digest configuration — Topics, frequency preferences, and tone settings you configure for your digests.
- •Payment information — Processed securely through our payment provider; we do not store your card details.
- •Technical data — IP addresses, browser information, and usage patterns collected for security and service improvement.
Technical infrastructure and third-party services
We use carefully selected third-party services to provide our platform. All processors are GDPR-compliant and bound by data processing agreements:
| Processor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database & authentication | Email addresses, digest configurations | Frankfurt, Germany |
| Loops | Email delivery | Your email address (for digest delivery) | United States |
| Vercel | Hosting, security (WAF), web analytics | IP addresses, request metrics, anonymous page view data | USA (EU-US DPF) |
| Google Analytics | Web analytics (consent-gated) | Anonymous usage data, page views, sessions | USA (EU-US DPF) |
| Lemon Squeezy | Payment processing | Payment card data (not stored by us) | USA (PCI DSS) |
| Perplexity AI | AI news search | Topic queries, content summaries | USA (EU-US DPF) |
| Google (Gemini) | AI content generation | Topic queries, content summaries | USA (EU-US DPF) |
All processors are bound by data processing agreements (DPAs). For US-based processors, transfers are protected under the EU-US Data Privacy Framework or Standard Contractual Clauses.
How long do we keep your data?
We retain your information only for as long as necessary to provide our services:
- •Active accounts: Data is retained while your account remains active.
- •Deleted accounts: All data is permanently deleted within 30 days of account deletion.
- •Unsubscribed digests: Digest subscription data is retained for 30 days after unsubscription, then permanently deleted.
- •Inactive free accounts: May be scheduled for deletion after 6 months of inactivity, with prior notice.
Cookies
We use essential cookies necessary for the proper functioning of our service, such as maintaining your session and authentication state.
With your explicit consent, we also use analytics cookies (Google Analytics 4) to understand how visitors use our site and to measure the effectiveness of our marketing channels. Analytics cookies are only activated after you give explicit consent via our cookie banner.
You can manage your cookie preferences at any time via our Cookie Policy or the "Cookie Settings" link in the footer of every page.
What are your rights?
Under the GDPR, you have several rights regarding your personal data:
- •Right to Access: You can request access to the personal data we hold about you.
- •Right to Rectification: You can request correction of any inaccurate personal information.
- •Right to Erasure: You can request that we delete your personal data.
- •Right to Object: You can object to the processing of your personal data.
- •Right to Data Portability: You can request to receive your data in a structured format.
How to exercise your rights?
To exercise any of your rights, please contact us at privacy@summry.io. We will respond to your request within one month as required by GDPR. You can also manage most of your data directly through your account settings, including downloading your data or deleting your account.
For digest recipients (Business tier)
This section applies to Business tier users who send digests to additional recipients. If you use Business tier to send digests to additional recipients, we process those email addresses with double opt-in confirmation.
Your digest delivery
Digests are delivered to your own registered email address. As a summry account holder:
- •Digests are sent only to the email address associated with your account.
- •You can manage digest preferences or pause delivery at any time through your account settings.
- •You can unsubscribe from individual digests at any time using the link in any digest email.
- •Upon unsubscription, your digest subscription data is marked for deletion and permanently removed after 30 days.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on our service. Your continued use of summry after such modifications constitutes acceptance of the updated policy.
Contact us
For questions or concerns about this Privacy Policy or our data practices, contact us at: privacy@summry.io