Privacy Policy

Who we are

Sumdown is an independent learning and knowledge-management service operated by browser s.r.o., Kvacalova 14, 821 08 Bratislava, Slovakia, European Union ("Sumdown", "we", "us"). This policy explains how we process information when you use sumdown.com and the Sumdown application (the "Service"). Sumdown is not affiliated with, endorsed by, or sponsored by YouTube or Google.

For privacy questions or requests, email support@sumdown.com.

Other information we collect

• Account and identity: email address, name, profile image, authentication records, account preferences, country and timezone information made available during sign-in or by the request context, and encrypted Google OAuth access and refresh tokens while your YouTube connection is active.
• Your library activity: selected channels and playlists, liked-video import state, videos added, hidden or marked read, synchronization and pagination checkpoints, language and display preferences, credit use, and subscription status.
• Transcripts and comments from SocialKit: Sumdown sends a public YouTube video identifier to SocialKit to request available transcripts or comments. SocialKit is a separate third-party provider; it is not YouTube and is not presented as an official YouTube API. When available, complete transcript text, transcript timing, comment samples, and related processing metadata may be stored and reused for the same public video.
• Sumdown-generated information: summaries, comment summaries, transcript chunks, previews, tags, topics and research articles, chat prompts and responses, recommendation and interest profiles, digest content, and search indexes. These are generated by Sumdown from source material and your private library activity; they are not data supplied by YouTube as generated outputs.
• Information you choose to share: if you create a share link, the linked summary and source details can be viewed by anyone who has the link until it expires or is removed. Your library remains private by default.
• Payments and communications: plan and transaction status from our merchant of record, email delivery preferences, transactional messages, and support correspondence. We do not receive full payment-card details.
• Technical and analytics information: IP address, browser and device details, requested pages, referral information, interaction events, diagnostics, security logs, and identifiers stored in cookies or local storage. On the marketing site this may include PostHog and Amplitude analytics, including interaction capture and session replay when configured.

How we use information

We use information to authenticate users; connect selected YouTube sources; synchronize and organize a private library; retrieve, process, search, and display transcripts and source metadata; generate summaries and other requested AI features; provide timestamps, standard YouTube embeds, and links back to original videos; deliver digests and service messages; process subscriptions and credits; provide exports and user-controlled share links; troubleshoot, secure, and improve the Service; and comply with legal obligations.

We do not sell Google user data, use it for targeted advertising, or use it to train a general-purpose AI model. AI providers process source text and the instructions needed to produce a requested Sumdown output. We do not intentionally include your Google OAuth token in AI requests.

Storage and service providers

Sumdown uses Cloudflare Workers, D1, R2, Durable Objects, Workflows, queues, caching, and related security and delivery services. D1 holds account, connection, library, preference, billing-status, and workflow records. R2 holds available transcript text and generated artifacts, including summaries, topic articles, comment processing, and digests. Durable Objects and workflows coordinate synchronization and background work.

We disclose information only as needed to operate the Service: Cloudflare processes hosted service data; Google provides sign-in, YouTube API Services, and some AI inference; Cloudflare Workers AI provides AI inference; SocialKit receives public video identifiers and returns available transcript or comment data; Polar processes subscription and payment records as merchant of record; Plunk processes email address, delivery preferences, and message content; and PostHog and Amplitude process marketing-site analytics. A provider may process data in the regions where it operates, subject to its terms and applicable safeguards.

We may also disclose information when required by law, to protect the Service or its users, or as part of a corporate transaction with appropriate notice and protections.

Retention, shared caches, and refresh

We keep account and private library information while your account is active and as needed to provide the features you use. Authorized YouTube data is periodically refreshed during synchronization. Connection records are disabled when you disconnect and are removed when you delete your account. Operational logs, fraud-prevention records, analytics, and support communications may be retained for a limited period needed for security, compliance, and service operation.

Public video/channel metadata and transcript, comment, or generated artifacts associated with a public video may be held in a shared, non-user-specific cache. Deleting one account removes that user's private associations and artifacts but does not necessarily remove a shared object used independently by other users. We refresh or remove cached source data when required by source changes, provider requirements, or applicable law.

Disconnecting YouTube and deleting data

Disconnect YouTube: Using Disconnect in Sumdown marks the connection inactive, stops future authorized synchronization, and programmatically revokes Sumdown's Google authorization. It does not delete your Sumdown library or data held by YouTube. Alternatively, you can remove Sumdown's access through Google Account Permissions, select Sumdown, and remove access.

Delete account: The Delete Account control begins deletion immediately. It removes your Sumdown account, sessions, YouTube connection record, private library associations, preferences, chats, interests, digests, topics, private R2 artifacts, share links, and user-specific Durable Object state. Shared non-user-specific cache objects may remain as described above. Account deletion also programmatically revokes Sumdown's Google authorization. You can alternatively remove Sumdown's access through Google Account Permissions.

Deleting or disconnecting data in Sumdown does not delete or modify data stored by YouTube. To change or delete information on YouTube, use YouTube's own controls. If an in-app deletion does not complete, contact us at support@sumdown.com so we can complete the request as soon as possible and no later than seven calendar days after a valid deletion request, unless we must retain a limited record by law.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to processing of, or delete your personal information, and to withdraw consent. You can update preferences, export available account data, disconnect YouTube, and delete your account from Settings. You can also control browser storage and use supported browser privacy signals; disabling essential storage may prevent sign-in or other Service functions.

Email support@sumdown.com to exercise a right or ask about a request. We may need to verify your identity. EU/EEA users may complain to their local data protection authority, and other jurisdictions may provide additional rights.

Children and policy changes

Sumdown is not intended for children under 16, and we do not knowingly collect personal information from children under 16. Contact us if you believe a child has provided information to the Service.

We may update this policy as the Service changes. We will post the revised policy here, update the effective date, and provide additional notice when required.

Contact

browser s.r.o.
Kvacalova 14, 821 08 Bratislava, Slovakia, European Union
support@sumdown.com