Sunsama
Review these first
Source provenance
Verified official sourceWhat changedMaterial language shifts detected around personal data, privacy, sell your, share your. 308 new line(s), 272 removed line(s).
Snapshot hash d395f1ddc02a2d1300a629adfed8c75ef464bf622a1e98dab8814101f4fb4daf
Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Your data may persist in backup systems for up to 90 days even after deletion. Sunsama states it never sells your data and will not train AI models on your personal information. The company commits to law enforcement transparency, global data rights, and non-retaliation for exercising privacy rights. They also provide notice for policy changes, options to disable AI features, and protections for children's privacy.
90% confidence
Critical issues and red flags that may indicate potential harm or significant risk.
Even after data is deleted, information may persist in backup systems for up to 90 days.
Why it matters: Your personal information may remain in backup systems for up to 90 days after you delete it, meaning it's not immediately and completely removed from the company's systems.
Information may persist in our backup systems for up to 90 days after deletion.
Practices related to the collection, processing, and sharing of personal information.
Not clearly stated
No cited data-use findings — wording is unclearTerms and conditions related to subscription cancellation, service termination, and automatic renewals.
Not clearly stated
No cited billing terms — wording is unclearLess obvious but important clauses that users should be aware of, which might include limitations of liability, changes to terms, or specific user responsibilities.
Not clearly stated
No cited gotchas — wording is unclearCommitments and features designed to protect user rights and privacy.
The company states it never sells personal data and never will.
Why it helps: This commitment provides a strong assurance that your personal information will not be monetized by being sold to third parties.
Our promise: We never sell your data. Never have, never will.
User tasks, calendar information, notes, and usage patterns are never used to train AI models by the company or third-party providers.
Why it helps: This protects the privacy of your personal data by ensuring it is not used to improve AI models, maintaining confidentiality of your activities and content.
Your personal tasks, calendar information, notes, and usage patterns are never used to train AI models - not ours, not third-party providers', not anyone's. Your data is used solely to provide the AI features you've requested for your own account.
The company applies data rights granted by GDPR and CCPA to all customers, regardless of their location.
Why it helps: This ensures that all users benefit from strong privacy protections and rights, such as access, portability, correction, and deletion, regardless of their geographical location.
At Summay, we apply the same data rights to all customers, regardless of their location. Currently, some of the most privacy-forward regulations are the EU's GDPR and California's CCPA. We recognize all rights granted in these regulations for all our users.
Users have the right to disable or limit AI-powered features in their account settings.
Why it helps: This gives you control over how AI features use your data and allows you to opt out of certain AI functionalities if you prefer.
You can also disable or limit AI-powered features in your account settings.
The company commits not to retaliate or discriminate against users for exercising their privacy rights.
Why it helps: This reassures you that you can exercise your privacy rights without fear of negative consequences from the company.
No Retaliation: We do not retaliate or discriminate against you for exercising your privacy rights.
The company will notify users via email or through the Services and provide at least 30 days' notice before significant policy changes take effect.
Why it helps: This ensures you are informed of upcoming changes to the privacy policy, giving you time to review and understand any new terms before they are implemented.
We'll provide at least 30 days' notice before changes take effect
Users have the right to lodge a complaint with their local data protection authority if they are not satisfied with the company's response to a privacy request.
Why it helps: This provides an external avenue for recourse and ensures that you can escalate privacy concerns to an independent regulatory body if needed.
If you're not satisfied with our response to a privacy request, you have the right to lodge a complaint with your local data protection authority.
Sunsama is not intended for children under 16, and the company does not knowingly collect personal information from children under 16. Any such information found will be promptly deleted.
Why it helps: This policy helps protect the privacy of children by preventing the collection of their personal information and ensuring swift deletion if inadvertently collected.
Sunsama is not intended for children under 16. We don't knowingly collect personal information from children under 16. If we discover we've collected such information, we'll delete it promptly.
The company states it practices data minimization by design and collects only the information needed to deliver the Services, not seeking unsolicited personal information.
Why it helps: This commitment helps reduce the amount of your personal data collected and stored, lowering the risk of exposure in case of a data breach and limiting its use.
We practice data minimization by design and collect only the information needed to deliver the Services. We do not seek unsolicited personal information.
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.