Skip to content
Legal

Privacy Policy

Last updated June 24, 2026

This policy explains what data Sumio collects, how we use it, and the choices you have. We aim to collect as little as possible and to keep your spreadsheet data yours.

1. Information we collect

Account data you provide (name, email, and optional company/role) when you sign up through our authentication provider.

Files you upload and the operations you run, so we can process your request and show your history. You control these and can delete them at any time.

Basic usage and device information (e.g. pages visited, errors) to keep the service reliable.

2. How we use your data

To run the operations you ask for, return results, and let you download files with live formulas.

To maintain, secure, and improve the product, and to provide support.

We do not sell your data, and we do not use the contents of your files to train models.

3. AI processing

When you type an instruction, only the text of that instruction and a structural summary of your file (column names and inferred types) are sent to the AI model to produce a validated Operation Plan. Trusted code then runs that plan on your file.

On plans that support it, sensitive fields can be masked before anything reaches the AI (see your Compliance settings).

4. Storage and retention

Files and versions are stored to power downloads, undo, and history. You can delete files from the Files page; deletion removes them from active storage.

We retain account data for as long as your account is active and as required to meet legal obligations.

5. Sharing

We share data only with the service providers needed to run Sumio (e.g. hosting, authentication, the AI model provider), under contracts that limit their use of it.

6. Your rights

Depending on your region, you may access, correct, export, or delete your personal data. You can also close your account, which deletes associated data subject to legal retention.

To exercise these rights, contact privacy@sumio.app.

7. Security

Data is encrypted in transit (TLS) and at rest. Access is restricted and audited. No system is perfectly secure, but we work to protect your data and to notify you of incidents as required.

8. Contact

Questions about this policy? Email privacy@sumio.app.

This document is a working template, not legal advice. Have your counsel review and tailor it to your organization before relying on it.