SUMMATA

Privacy Policy

Last updated September 23, 2026.

What we process

When you submit an image or PDF, Summata temporarily processes the file and its contents to return extracted text and a summary. We do not save uploaded files, extracted text, summaries, or prompts after the request.

Third-party AI processing

Your submitted image or PDF is sent as request data to our configured third-party AI provider, OpenRouter, to perform the requested analysis. OpenRouter states that prompts and completions are not retained by OpenRouter unless logging is enabled, but model providers may have separate data practices. Summata requests Zero Data Retention routing where available; this does not replace reviewing the applicable provider policy. Do not upload confidential, regulated, or material you do not have permission to process.

Cookies and email

The Free allowance resets at 00:00 UTC. Signed-in Free users have an account-based daily allowance. Anonymous visitors share an allowance for their network; we use a keyed, daily-changing hash of the network IP address to enforce it, and do not store the raw IP. These anonymous records are deleted after seven days during subsequent processing. A strictly necessary HttpOnly cookie also supports the allowance display. If you previously joined the Pro notification list, your normalized email and signup source remain subject to the consent given at signup. You may request deletion by emailing support@summata.io.

Analytics

When analytics is enabled, we use Google Analytics to understand aggregate use of the site, such as pages visited, approximate location, device and browser information, and interactions. Google may set or read cookies and process this information under its own privacy policy. We use these reports to improve Summata and do not send uploaded files, extracted text, summaries, or prompts to Google Analytics.

Google sign-in

When you sign in with Google, we store your Google account identifier, name, email address, profile image URL, and authentication credentials needed to maintain your account. Session cookies keep you signed in. We use this information to associate your subscription and usage with your account; we do not access your Gmail messages.

Payments and accounts

Stripe hosts the payment form. Summata stores an internal account, subscription and customer references, subscription status, billing dates, scheduled plan changes, and payment-event identifiers to confirm and manage your subscription. We do not receive or store full payment card numbers. Checkout explicitly marked as sandbox uses test payments only.

A temporary HttpOnly cookie connects checkout to the browser that started it. Your Google sign-in session links the purchase to your account. Stripe sends payment receipts to the email address supplied at checkout. Existing waitlist consent does not become a payment or marketing authorization.

For monthly allowances, we store account-linked processing identifiers, timestamps, allowance periods, and whether processing succeeded, failed, or is still reserved. These records enforce usage limits and support refund review; they do not contain uploaded files, extracted text, or summaries.

Sign in with the same Google account to regain access on another browser. Contact support if you cannot access that account. Short-term submission counters are linked to the account or daily network hash and are cleaned up during subsequent requests.

Contact

Questions and privacy requests: support@summata.io.