Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Sunsama explicitly commits to never selling user data and not using personal information to train AI models. The policy outlines comprehensive data rights for all users globally, including the right to access, portability, deletion, and control over AI features. The company also states it does not collect protected characteristics or biometric data and provides advance notice for significant policy changes. However, users' general location information may be collected based on IP address.
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
Not clearly stated
Critical issues that need immediate attention and may indicate a high risk to user rights or data. These concerns often involve irreversible harm, significant privacy invasion, or explicit waivers of important user protections.
?
Not clearly stated
No cited risk flags — wording is unclear
There were no risk flags identified in the provided policy.
Data Use and Sharing
1 finding
This section examines how your data is collected, processed, and shared with others. It highlights practices that might affect your privacy, such as broad data collection, sharing with third parties, or less transparent data handling.
Not clearly stated: The policy states that the company does not sell personal information and never will. It also explicitly states that personal tasks, calendar information, notes, and usage patterns are never used to train AI models by the company or third-party providers. However, some sections refer to a list of subprocessors and their locations being "available upon request" without providing a direct link or specific instructions on how to obtain this list, making it less transparent for immediate user access.
medium90% confidence
Location Information Collection
The company may collect general location information based on your IP address.
Why it matters: Your general location, such as country, region, or city, may be collected based on your IP address.
Location Information: We may collect general location information (such as country, region, or city) based on your IP address to optimize performance, comply with local laws, and provide region-appropriate features.
Account security status and verification information, paragraph 2 · Citation strength: strong
Cancellation and Renewal
Not clearly stated
This section focuses on terms related to account cancellation, data deletion post-cancellation, and subscription renewal processes. Concerns might include difficult cancellation procedures, data retention after account closure, or unclear automatic renewal terms.
?
Not clearly stated
No cited billing terms — wording is unclear
The policy mentions that if a user doesn't use Sunsama for an extended period, the company may delete their account and associated data after providing reasonable notice. However, it does not specify what constitutes an "extended period" or what "reasonable notice" entails. The policy also does not address explicit cancellation procedures for paid subscriptions or details about automatic renewals.
Gotchas
Not clearly stated
This section covers less obvious but potentially important clauses that could affect your user experience or rights. These include aspects like broad indemnification clauses, arbitration requirements, or one-sided modification rights that might disadvantage you.
?
Not clearly stated
No cited gotchas — wording is unclear
The policy states that continued use of services after changes take effect means you accept the updated policy, which is a common but notable clause regarding policy updates. There were no additional "gotchas" identified within the provided clauses.
Protections
11 findings
This section highlights clauses that are beneficial to the user, such as strong data protection commitments, clear user rights, and transparent practices. These provisions demonstrate a commitment to user privacy and control.
Not clearly stated: The policy mentions that records of data subject and privacy requests are retained for at least 24 months for compliance and audit purposes, but it does not specify if this includes cases where the user specifically requested deletion of all data associated with their account. The policy also mentions that some information may be retained in anonymized form for analytics after account deletion, without providing details on the anonymization process or guarantees that the data cannot be re-identified.
Protection100% confidence
No sale of user data
The company states that it never sells user data.
Why it helps: This commitment provides a strong assurance that your personal information will not be monetized through sale to third parties.
Our promise: We never sell your data. Never have, never will.
The company collects only information necessary to provide and improve its services.
Why it helps: This minimizes the amount of your personal data collected, reducing the potential impact of a data breach or misuse.
We collect only the information necessary to provide and improve our Services.
What Information We Collect, paragraph 1 · Citation strength: strong
Protection95% confidence
No collection of protected characteristics
The company does not collect characteristics of protected classifications such as age, race, gender, or physical abilities, unless voluntarily provided for specific purposes like pronouns.
Why it helps: This reduces the risk of discrimination and enhances privacy by avoiding the collection of sensitive personal information.
Protected Characteristics: We do not collect characteristics of protected classifications including age, race, gender, religion, sexual orientation, gender identity, gender expression, or physical and mental abilities or disabilities. You may voluntarily provide some of this information (such as pronouns in your profile), but we do not actively collect it.
Information from Third Parties, paragraph 15 · Citation strength: strong
Protection100% confidence
No collection of biometric data
The company explicitly states it does not collect biometric data such as fingerprints or face recognition data.
Why it helps: This safeguards your highly sensitive biometric information from being collected and potentially misused.
Biometric Data: We do not collect fingerprints, face recognition data, or other biometric identifiers.
Information from Third Parties, paragraph 16 · Citation strength: strong
Protection95% confidence
Profile picture analysis not performed
While users can add a profile picture, the company does not extract or analyze information from it; it is solely for user use.
Why it helps: This ensures that your profile picture is not used for analytics or identification purposes without your knowledge or consent.
Profile Picture Analysis: While you can add a profile picture, we do not extract any information from it or analyze its contents. It's solely for your use.
Information from Third Parties, paragraph 17 · Citation strength: strong
Protection100% confidence
User data not used for AI model training
The company explicitly commits that personal tasks, calendar information, notes, and usage patterns are never used to train AI models, whether their own or third-party models.
Why it helps: This protects your personal data from being used to develop AI technologies, ensuring your information remains private and is only used for features you've requested for your own account.
Our Commitment: We Never Train Models on Your Data. Your personal tasks, calendar information, notes, and usage patterns are never used to train AI models - not ours, not third-party providers', not anyone's. Your data is used solely to provide the AI features you've requested for your own account.
Process payments and manage subscriptions, paragraph 10 · Citation strength: strong
Protection95% confidence
Comprehensive data rights for all users
The company applies the same data rights to all customers, recognizing all rights granted in privacy-forward regulations like the EU's GDPR and California's CCPA, regardless of user location.
Why it helps: This extends strong privacy protections and control over your data to all users globally, not just those in specific jurisdictions.
At Summay, we apply the same data rights to all customers, regardless of their location. Currently, some of the most privacy-forward regulations are the EU's GDPR and California's CCPA. We recognize all rights granted in these regulations for all our users.
Users have the right to disable or limit AI-powered features in their account settings.
Why it helps: This allows you to control the extent to which AI features process your data, giving you agency over personalized functionalities.
AI Features: Disable or limit AI-powered features in your account settings
Restriction: Limit how we process your information, paragraph 3 · Citation strength: strong
Protection100% confidence
Commitment to not collect data from children under 16
The company states that Sunsama is not intended for children under 16 and that they do not knowingly collect personal information from them, promising to delete such information if discovered.
Why it helps: This protects the privacy of minors by preventing the collection of their personal information.
Sunsama is not intended for children under 16. We don't knowingly collect personal information from children under 16. If we discover we've collected such information, we'll delete it promptly.
Right to challenge automated decisions and disable AI features
Users have the right not to be subject to decisions based solely on automated processing (including profiling) that significantly affect them. They can request human review, express their viewpoint, contest the decision, or disable/limit AI-powered features.
Why it helps: This empowers users to ensure fairness and accuracy in AI-driven decisions and control the use of AI features that might impact them.
Automated decision-making and profiling : You have the right not to be subject to decisions based solely on automated processing (including profiling) that significantly affect you. Where we use AI in a way that could have such effects, you can request human review, express your point of view, or contest the decision. You can also disable or limit AI-powered features in your account settings.
Restriction: Limit how we process your information, paragraph 2 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.