Privacy Policy — Summly
This Privacy Policy explains how the Summly application and related services (collectively, the "Services") collect, use, disclose, transfer, and protect personal data.
Controller contact: For privacy-related questions or requests, contact support@callanalysis.com.
1. Scope
This Privacy Policy applies to personal data processed through the Services. If a separate contract or data processing agreement (DPA) applies between us and your organization, that agreement may supplement this policy for processing carried out on behalf of your organization.
2. Roles and Responsibilities
When we provide Services to business customers, we generally act as a processor (or service provider) processing data on behalf of the customer, which acts as controller. We act as controller for account administration, service operations, billing, product security, and direct communications we send in our own capacity.
3. Categories of Personal Data
Depending on your use of the Services, we may process:
- Account data: name, email, phone, login credentials, authentication tokens, role, and profile preferences.
- Workspace data: organization name, teams, memberships, permissions, and invitation records.
- Call and audio data: recordings, imports, call metadata, participants (where available), transcripts, speaker labels, and analytics.
- AI output data: summaries, extracted action items, sentiment or tags, and generated insights.
- Contact and CRM data: contact details, notes, associations between contacts and calls, and related business records.
- Document data: files you upload, extracted text, metadata, and sync status.
- Technical data: device and browser details, app version, IP address, diagnostics, crash logs, and feature usage metrics.
- Support data: communications and information provided in support or feedback channels, including in-app support tickets, optional screenshots, and diagnostics attachments.
4. Purposes of Processing and Legal Bases
We process personal data to provide and secure the Services, perform contractual obligations, support your organization, improve service quality, and comply with legal obligations. Where required by law, we rely on applicable legal bases such as contract performance, legitimate interests, consent, and legal obligation.
5. How We Use Personal Data
We use personal data to:
- provide core product functionality, including recording workflows, transcription, search, and collaboration;
- authenticate users and enforce role-based access controls;
- maintain system security, detect abuse, and investigate incidents;
- deliver customer support and service communications;
- manage billing and subscriptions where applicable;
- develop and improve features using aggregated and de-identified insights where permitted.
6. AI Processing Notice
The Services use automated tools, including on-device and cloud machine learning models, to generate transcriptions and analytical outputs. Automated outputs may be imperfect and should be reviewed by users before being used for operational, legal, or compliance decisions.
Third-party AI (OpenAI). If you enable Cloud AI (OpenAI) in the app and agree to the in-app disclosure, we send the personal data you choose to process to OpenAI, LLC (https://openai.com) to provide transcription, summarization, Ask AI chat, document AI, and related features. This may include call audio, transcripts, summaries, chat messages, optional call or contact context you select, document text, and limited account context (such as your display name). We do not use OpenAI for advertising. You can withdraw consent by turning off Cloud AI in Settings. OpenAI processes data under its own terms and privacy policy; we select providers that offer appropriate contractual protections where required.
7. Sharing of Personal Data
We may share personal data with:
- service providers supporting hosting, analytics, communications, payments, and infrastructure security;
- OpenAI, LLC when you enable Cloud AI and consent in the app (see Section 6);
- your organization administrators and authorized users based on configured permissions;
- professional advisors under confidentiality obligations;
- public authorities or counterparties where disclosure is required by law or necessary to protect legal rights and safety.
8. International Data Transfers
Personal data may be processed in Israel, the United States, the European Union, and other jurisdictions where we or our subprocessors operate. Where required, we implement transfer safeguards such as Standard Contractual Clauses or equivalent legal mechanisms.
9. Data Retention
We retain personal data for the period necessary to provide the Services, satisfy legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on data type, contractual commitments, and configuration chosen by your organization. Backup copies may be retained for a limited recovery window.
10. Security Measures
We implement administrative, technical, and organizational safeguards designed to protect personal data, including encryption in transit, access control mechanisms, monitoring, and secure development practices. No security system is infallible, and absolute security cannot be guaranteed.
11. Children's Privacy
The Services are intended for business use and are not directed to children. We do not knowingly collect personal data from children below the applicable minimum age in relevant jurisdictions. If such data is identified, we will take reasonable steps to delete it.
12. Data Subject Rights
Depending on applicable law, you may have rights to access, correct, delete, or restrict processing of personal data, object to certain processing, receive data portability, and withdraw consent where consent is the legal basis. To exercise your rights, contact support@callanalysis.com. If your organization controls the relevant data, we may direct you to your organization administrator.
13. California Privacy Notice
Where California law applies, we provide rights and disclosures under the CCPA/CPRA, including rights to know, correct, and delete personal information (subject to legal exceptions), and to limit use of sensitive personal information where applicable. We do not sell personal information in the traditional sense for monetary consideration.
14. Cookies and Similar Technologies
Our web properties may use cookies and related technologies for authentication, preference management, analytics, and security. Where legally required, we request consent before setting non-essential cookies.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, operational, or product changes. Updated versions become effective when posted unless stated otherwise. If required by law, we will provide additional notice.
16. Contact
For privacy inquiries, contact support@callanalysis.com.
Product information and support: https://talkmind-ca95c.web.app/support