Privacy Policy

Account Information: When you create an account, we collect your email address and optional name.

Email Content: When you forward emails for summarization, we process the content of those emails to generate summaries. This content is stored securely to provide you with summary history and regeneration capabilities.

Usage Data: We collect information about how you use our service, including timestamps, summary counts, and feature usage.

Authentication Data: We store hashed authentication tokens and login attempt logs for security purposes.

We implement multiple layers of security to protect your data:

• Encryption at Rest: All data is encrypted using AES-256 encryption—the same standard used by banks and government agencies.
• Encryption in Transit: All data transmission occurs over HTTPS/TLS.
• Two-Factor Authentication: Optional TOTP-based MFA is available for additional account protection using authenticator apps like Google Authenticator or Authy.
• Authenticated Access Only: All data access is strictly controlled through authenticated API endpoints. No anonymous access is permitted.
• Comprehensive Audit Logs: We maintain detailed logs of all data access and modifications, including who accessed data, when, and what actions were taken.

Email content and summaries are stored to provide you with history and regeneration features. You can delete individual summaries or your entire account at any time from your dashboard.

We use the following third-party services to operate SmartSummary.ai:

• Anthropic (Claude AI): AI analysis and summarization of your content. Anthropic Privacy Policy
• Postmark: To process inbound emails and send summary responses
• Supabase: For secure database storage with AES-256 encryption
• Vercel: For web application hosting
• Railway: For backend API hosting

Each of these services maintains their own privacy policies and data handling practices. We encourage you to review them.

We provide you with control over how long your data is retained:

• Auto-Delete Options: You can configure automatic deletion of summaries after 30, 60, or 90 days from your dashboard
• Manual Deletion: You can delete individual summaries at any time
• Account Deletion: You can delete your entire account, which permanently removes all associated data including summaries, authentication records, and account information
• Default: If no auto-delete policy is set, summaries are retained until manually deleted

When data is deleted (manually or automatically), it is permanently removed from our systems and cannot be recovered.