Privacy Policy

Information We Collect

• Account information: email address, name if provided, password hash for email login, Google sign-in profile information when you choose Google login, authentication tokens, subscription status, and referral codes.
• Website content: page text, video transcripts, comments, titles, URLs, source links, and related metadata from pages, links, feeds, or selections you ask Summary Box to summarize, brief, preview, or research.
• Browser activity signals: a local visit log may include URLs, domains, page titles, timestamps, and dwell time. Compact activity snapshots, such as domains, time spent, and page titles, may be sent to our API to personalize digests, answers, and profile context.
• Optional Chrome history: if you grant the optional history permission, Summary Box reads recent Chrome history to derive site domains and visit counts for topic setup and personalization. It does not read page contents from Chrome history.
• Usage analytics: product events such as page views and feature usage, with device type and browser derived from your request. On our website we may derive an approximate location (country and region) from your IP address to understand where visitors come from. The Chrome extension does not collect your location.
• Billing and support: subscription, invoice, and payment status from Stripe; feedback, support messages, and operational logs needed to run and secure the service.

How We Use Information

• To mark feed items as worth it, skip, or already seen, and to explain those marks.
• To generate summaries, briefs, previews, receipts, profile context, and daily or on-demand digest results.
• To maintain accounts, trials, subscriptions, billing, referrals, abuse prevention, security, reliability, and customer support.
• To improve Summary Box features and performance, using only data reasonably needed for the product's disclosed purpose.

What Stays Local

The extension stores settings, cached results, and the local visit log in Chrome extension storage or IndexedDB. Some derived activity snapshots are sent to the API as described above, but the full local visit log is not uploaded as a raw browsing-history export.

Sharing and Service Providers

We do not sell your personal information. We share data only with service providers needed to operate Summary Box, such as hosting and database providers, AI model providers for generating requested outputs, Stripe for payments, Google for sign-in, and email providers for account or product messages. These providers may process data only for the services they provide to us.

Chrome Web Store Limited Use

The use of information received from Chrome extension APIs and Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Summary Box does not use or transfer user data for personalized advertising, does not sell user data to third parties, and does not use user data to determine creditworthiness or for lending purposes.

Your Choices

• You can use Summary Box without granting optional Chrome history access.
• You can revoke optional history access from Summary Box settings or Chrome's extension settings.
• You can cancel or manage billing through the Stripe billing portal from your account.
• You can request account or data help at jon@summarybox.com.

Security and Retention

We use reasonable technical and organizational measures to protect user data, including encrypted transport. We retain account, billing, activity, and generated-output records for as long as needed to provide the service, comply with legal obligations, prevent abuse, resolve disputes, and maintain product history unless deletion is requested and deletion is legally and technically feasible.

Children

Summary Box is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Contact

Questions or requests: jon@summarybox.com.