Privacy Policy

summree is operated by Amplify Brand Consultancy Ltd. When we refer to "summree", "we", "us", or "our" in this policy, we mean Amplify Brand Consultancy Ltd acting as the data controller for the summree service.

If you have any questions about this policy or how we handle your data, contact us at alex.beeston@amplify-consulting.com.

We collect only what's necessary to provide the summree service:

• Your name and email address, provided when you create an account
• Your password, stored securely as a hashed value via Supabase Auth — we never see or store your plain-text password
• The YouTube channel URLs you add to monitor
• Your subscription and billing information, handled by Stripe — we store your Stripe customer ID and plan details, but never your card number or payment credentials
• Email notification preferences you set in your account settings
• Summaries generated from YouTube video transcripts, associated with your account
• Basic usage data such as when summaries are marked as read

We use your data to:

• Create and manage your summree account
• Monitor the YouTube channels you have selected and generate summaries of new videos
• Deliver summaries to you by email
• Process your subscription payments via Stripe
• Send transactional emails related to your account (e.g. password resets)
• Respond to support queries you send us

We do not use your data for advertising. We do not sell your data to third parties. We do not use your data to train AI models.

Under UK GDPR, we process your personal data on the following legal bases:

• Contract performance — processing your name, email, and payment details is necessary to provide the service you have subscribed to
• Legitimate interests — monitoring YouTube channels and generating summaries is the core function you signed up for
• Consent — where you have opted in to email notifications

summree uses a small number of trusted third-party services to operate:

• Supabase — our database and authentication provider. Your account credentials and data are stored on Supabase infrastructure (EU region)
• Stripe — our payment processor. Stripe handles all card data under PCI-DSS compliance. We never see your card details
• Resend — our email delivery provider. Used to send summaries and account emails from hello@summree.io
• Anthropic — the AI provider used to generate summaries. Video transcripts are sent to Anthropic's API for processing. Anthropic does not retain API data for training
• Supadata — the service used to extract transcripts from YouTube videos
• Vercel — our hosting provider for the summree web application

Each of these providers has their own privacy policy and data processing terms. We have data processing agreements in place where required.

We retain your personal data for as long as your account is active. When your subscription ends and your account is deleted — whether by you or as a result of subscription cancellation — we permanently delete all associated data including your profile, channel list, and all summaries.

Stripe may retain billing records for longer periods as required by financial regulations.

You have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can correct inaccurate data via your account settings or by contacting us
• Right to erasure — you can delete your account at any time, which permanently removes all your data
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances
• Right to data portability — you can request your data in a structured, machine-readable format
• Right to object — you can object to processing based on legitimate interests

To exercise any of these rights, contact us at alex.beeston@amplify-consulting.com. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

summree uses only functional cookies necessary to keep you signed in. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

We take reasonable technical and organisational measures to protect your data. All data is transmitted over HTTPS. Passwords are hashed using industry-standard algorithms. Access to production systems is restricted.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

We may update this policy from time to time. When we do, we will update the date at the top of this page. For significant changes, we will notify you by email. Continued use of summree after changes constitutes acceptance of the updated policy.

For any privacy-related questions, contact us at alex.beeston@amplify-consulting.com.

Data controller: Amplify Brand Consultancy Ltd, England.