VerbatermBetaVerbaterm is in beta. You may encounter bugs, incomplete features, or unexpected results while we improve reliability.

Privacy policy

Sunsama

Review a contract that is not in the library with credits or Pro · Get an API key

Review these first

Score107.0
Reviewed
Policy typePrivacy policy
Concern findings1
Protections11
Source supportStrong

Source provenance

Verified official source
Retrieved
Last checked
Published
Source URLhttps://sunsama.com/privacy

Canonical URL: https://www.sunsama.com/privacy

What changedMaterial language shifts detected around personal data, privacy, sell your, share your. 308 new line(s), 272 removed line(s).

Snapshot hash d395f1ddc02a2d1300a629adfed8c75ef464bf622a1e98dab8814101f4fb4daf

Snapshot of the source text at fetch time, not a live mirror of the policy page.

Plain-English summary

Sunsama explicitly commits to never selling user data and not using personal information to train AI models. The policy outlines comprehensive data rights for all users globally, including the right to access, portability, deletion, and control over AI features. The company also states it does not collect protected characteristics or biometric data and provides advance notice for significant policy changes. However, users' general location information may be collected based on IP address.

90% confidence

Ask Verbaterm

Follow up on findings with grounded answers from this review. Not legal advice.

Risk Flags

Not clearly stated

Critical issues that need immediate attention and may indicate a high risk to user rights or data. These concerns often involve irreversible harm, significant privacy invasion, or explicit waivers of important user protections.

Not clearly stated

No cited risk flags — wording is unclear

There were no risk flags identified in the provided policy.

Data Use and Sharing

1 finding

This section examines how your data is collected, processed, and shared with others. It highlights practices that might affect your privacy, such as broad data collection, sharing with third parties, or less transparent data handling.

Not clearly stated: The policy states that the company does not sell personal information and never will. It also explicitly states that personal tasks, calendar information, notes, and usage patterns are never used to train AI models by the company or third-party providers. However, some sections refer to a list of subprocessors and their locations being "available upon request" without providing a direct link or specific instructions on how to obtain this list, making it less transparent for immediate user access.
medium90% confidence

Location Information Collection

The company may collect general location information based on your IP address.

Why it matters: Your general location, such as country, region, or city, may be collected based on your IP address.

Location Information: We may collect general location information (such as country, region, or city) based on your IP address to optimize performance, comply with local laws, and provide region-appropriate features.

Account security status and verification information, paragraph 2 · Citation strength: strong

Cancellation and Renewal

Not clearly stated

This section focuses on terms related to account cancellation, data deletion post-cancellation, and subscription renewal processes. Concerns might include difficult cancellation procedures, data retention after account closure, or unclear automatic renewal terms.

Not clearly stated

No cited billing terms — wording is unclear

The policy mentions that if a user doesn't use Sunsama for an extended period, the company may delete their account and associated data after providing reasonable notice. However, it does not specify what constitutes an "extended period" or what "reasonable notice" entails. The policy also does not address explicit cancellation procedures for paid subscriptions or details about automatic renewals.

Gotchas

Not clearly stated

This section covers less obvious but potentially important clauses that could affect your user experience or rights. These include aspects like broad indemnification clauses, arbitration requirements, or one-sided modification rights that might disadvantage you.

Not clearly stated

No cited gotchas — wording is unclear

The policy states that continued use of services after changes take effect means you accept the updated policy, which is a common but notable clause regarding policy updates. There were no additional "gotchas" identified within the provided clauses.

Protections

11 findings

This section highlights clauses that are beneficial to the user, such as strong data protection commitments, clear user rights, and transparent practices. These provisions demonstrate a commitment to user privacy and control.

Not clearly stated: The policy mentions that records of data subject and privacy requests are retained for at least 24 months for compliance and audit purposes, but it does not specify if this includes cases where the user specifically requested deletion of all data associated with their account. The policy also mentions that some information may be retained in anonymized form for analytics after account deletion, without providing details on the anonymization process or guarantees that the data cannot be re-identified.
Protection100% confidence

No sale of user data

The company states that it never sells user data.

Why it helps: This commitment provides a strong assurance that your personal information will not be monetized through sale to third parties.

Our promise: We never sell your data. Never have, never will.

Summay Privacy Policy, paragraph 4 · Citation strength: strong

Protection90% confidence

Data Minimization Practice

The company collects only information necessary to provide and improve its services.

Why it helps: This minimizes the amount of your personal data collected, reducing the potential impact of a data breach or misuse.

We collect only the information necessary to provide and improve our Services.

What Information We Collect, paragraph 1 · Citation strength: strong

Protection95% confidence

No collection of protected characteristics

The company does not collect characteristics of protected classifications such as age, race, gender, or physical abilities, unless voluntarily provided for specific purposes like pronouns.

Why it helps: This reduces the risk of discrimination and enhances privacy by avoiding the collection of sensitive personal information.

Protected Characteristics: We do not collect characteristics of protected classifications including age, race, gender, religion, sexual orientation, gender identity, gender expression, or physical and mental abilities or disabilities. You may voluntarily provide some of this information (such as pronouns in your profile), but we do not actively collect it.

Information from Third Parties, paragraph 15 · Citation strength: strong

Protection100% confidence

No collection of biometric data

The company explicitly states it does not collect biometric data such as fingerprints or face recognition data.

Why it helps: This safeguards your highly sensitive biometric information from being collected and potentially misused.

Biometric Data: We do not collect fingerprints, face recognition data, or other biometric identifiers.

Information from Third Parties, paragraph 16 · Citation strength: strong

Protection95% confidence

Profile picture analysis not performed

While users can add a profile picture, the company does not extract or analyze information from it; it is solely for user use.

Why it helps: This ensures that your profile picture is not used for analytics or identification purposes without your knowledge or consent.

Profile Picture Analysis: While you can add a profile picture, we do not extract any information from it or analyze its contents. It's solely for your use.

Information from Third Parties, paragraph 17 · Citation strength: strong

Protection100% confidence

User data not used for AI model training

The company explicitly commits that personal tasks, calendar information, notes, and usage patterns are never used to train AI models, whether their own or third-party models.

Why it helps: This protects your personal data from being used to develop AI technologies, ensuring your information remains private and is only used for features you've requested for your own account.

Our Commitment: We Never Train Models on Your Data. Your personal tasks, calendar information, notes, and usage patterns are never used to train AI models - not ours, not third-party providers', not anyone's. Your data is used solely to provide the AI features you've requested for your own account.

Process payments and manage subscriptions, paragraph 10 · Citation strength: strong

Protection95% confidence

Comprehensive data rights for all users

The company applies the same data rights to all customers, recognizing all rights granted in privacy-forward regulations like the EU's GDPR and California's CCPA, regardless of user location.

Why it helps: This extends strong privacy protections and control over your data to all users globally, not just those in specific jurisdictions.

At Summay, we apply the same data rights to all customers, regardless of their location. Currently, some of the most privacy-forward regulations are the EU's GDPR and California's CCPA. We recognize all rights granted in these regulations for all our users.

Investigate security incidents, paragraph 12 · Citation strength: strong

Protection90% confidence

Right to deletion of personal information

Users can request that the company delete their personal information, subject to certain limitations.

Why it helps: This allows you to remove your personal data from the company's systems, enhancing your privacy and control.

Deletion: Request that we delete your personal information (subject to certain limitations)

Correction: Update or correct inaccurate information, paragraph 1 · Citation strength: strong

Protection95% confidence

User control over AI-powered features

Users have the right to disable or limit AI-powered features in their account settings.

Why it helps: This allows you to control the extent to which AI features process your data, giving you agency over personalized functionalities.

AI Features: Disable or limit AI-powered features in your account settings

Restriction: Limit how we process your information, paragraph 3 · Citation strength: strong

Protection100% confidence

Commitment to not collect data from children under 16

The company states that Sunsama is not intended for children under 16 and that they do not knowingly collect personal information from them, promising to delete such information if discovered.

Why it helps: This protects the privacy of minors by preventing the collection of their personal information.

Sunsama is not intended for children under 16. We don't knowingly collect personal information from children under 16. If we discover we've collected such information, we'll delete it promptly.

Children's Privacy, paragraph 1 · Citation strength: strong

Protection95% confidence

Right to challenge automated decisions and disable AI features

Users have the right not to be subject to decisions based solely on automated processing (including profiling) that significantly affect them. They can request human review, express their viewpoint, contest the decision, or disable/limit AI-powered features.

Why it helps: This empowers users to ensure fairness and accuracy in AI-driven decisions and control the use of AI features that might impact them.

Automated decision-making and profiling : You have the right not to be subject to decisions based solely on automated processing (including profiling) that significantly affect you. Where we use AI in a way that could have such effects, you can request human review, express your point of view, or contest the decision. You can also disable or limit AI-powered features in your account settings.

Restriction: Limit how we process your information, paragraph 2 · Citation strength: strong

Report an issue

Flag a citation problem, stale policy text, or incorrect company match.

Verbaterm boundaries

This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.