Privacy Policy
Last updated: 10/13/2026
What we collect: Email, YouTube URLs you submit, usage data, and technical information
Why we collect it: To provide AI summaries, improve our service, and process payments
Who we share with: Supabase (data storage), Stripe (payments), OpenRouter (AI processing), PostHog & Sentry (analytics)
Your rights: Access, correct, delete your data, or withdraw consent anytime
Contact us: [email protected] for any privacy concerns
1. Data Controller
Company Name: Questly Kft.
Country: Hungary
Tax Number: 32757402-1-42
Registered Office: 1065 Budapest, Révay utca 6. Fsz. 7. ajtó
Email: [email protected]
Questly Kft. is the data controller responsible for processing your personal data in accordance with the General Data Protection Regulation (GDPR) and Hungarian data protection laws.
2. Types of Personal Data We Collect
Account Information
- Email address (for authentication and communication)
- Password (encrypted and stored securely)
- Account creation date and last login information
Service Usage Data
- YouTube video URLs submitted for processing
- Video metadata (title, duration, channel information)
- Generated summaries and transcripts
- Usage patterns and frequency
- Subscription status and payment information
Technical Data
- IP address and location data
- Browser type and version
- Device information and operating system
- Cookies and similar tracking technologies
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: To provide the summarization service you have subscribed to
- Legitimate Interest: To improve our service, prevent fraud, and ensure security
- Consent: For marketing communications and optional data processing
- Legal Obligation: To comply with applicable laws and regulations
4. How We Use Your Data
Service Provision
- Process YouTube videos and generate summaries
- Maintain your account and subscription
- Provide customer support
- Process payments through Stripe
Service Improvement
- Analyze usage patterns to improve AI accuracy
- Optimize service performance and reliability
- Develop new features and capabilities
- Conduct research and analytics (anonymized)
Communication
- Send service-related notifications
- Provide updates about your subscription
- Respond to your inquiries and support requests
- Send marketing communications (with consent)
5. Data Sharing and Third Parties
We may share your data with the following third parties:
Supabase (Database & Authentication)
We use Supabase for user authentication and data storage. Your account information and usage data are stored securely on Supabase's infrastructure.
Stripe (Payment Processing)
Payment information is processed by Stripe. We do not store credit card details on our servers.
OpenRouter (AI Processing)
Video transcripts are sent to OpenRouter for AI-powered summarization. We do not share personal information with OpenRouter beyond the content you submit.
YouTube API
We access YouTube's API to retrieve video metadata. We only process publicly available video information.
PostHog (Analytics)
We use PostHog for user behavior analytics and event tracking to improve our service. PostHog may set cookies for analytics purposes.
Sentry (Error Tracking)
We use Sentry for error monitoring and performance tracking. Sentry may set cookies to track application performance and errors.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
모바일 앱 및 인앱 구매
sum.video iOS 및 Android 앱은 웹사이트와 동일한 계정 및 요약을 공유하지만, 다음과 같은 차이점이 있습니다:
- 앱에서 구매한 Pro 구독은 Stripe가 아닌 Apple App Store 또는 Google Play를 통해 청구됩니다.
- RevenueCat을 사용하여 스토어 영수증을 확인하고 구독 상태를 계정에 동기화합니다.
- 모바일 앱에는 PostHog 분석 또는 광고 추적 SDK가 포함되어 있지 않습니다.
- 모바일 앱의 계정 또는 웹사이트 대시보드에서 계정을 삭제할 수 있습니다. 이렇게 하면 sum.video의 개인 계정 데이터가 제거됩니다.
- 계정을 삭제해도 활성 App Store 또는 Google Play 구독이 취소되지 않습니다. Apple ID 또는 Google Play 구독 설정에서 취소하세요.
Claude and ChatGPT connectors
If you connect Claude or ChatGPT to sum.video, those apps send the YouTube video URLs and questions you ask through the connector. We process them under your existing account, weekly summary quota, and chat quota. We do not receive the rest of your Claude or ChatGPT conversation.
6. Data Retention
Account Data
Retained for the duration of your account plus 3 years after account closure for legal and business purposes.
Usage Data
Video URLs and summaries are retained for 2 years to improve service quality and provide account history.
Payment Data
Retained for 7 years as required by Hungarian accounting and tax regulations.
Technical Data
Logs and technical data are retained for 1 year for security and performance monitoring.
GDPR에 따른 귀하의 권리
데이터 주체로서 귀하는 다음과 같은 권리를 가집니다:
접근권
당사가 귀하에 대해 보유하고 있는 모든 개인 데이터 사본을 요청하세요.
정정권
부정확하거나 불완전한 개인 데이터를 수정하세요.
삭제권
특정 상황에서 개인 데이터 삭제를 요청하세요.
처리 제한권
개인 데이터 처리 방법을 제한하세요.
데이터 이동권
구조화되고 기계 판독 가능한 형식으로 데이터를 받으세요.
이의 제기권
정당한 이익에 기반한 처리에 이의를 제기하세요.
모바일 앱(계정 → 계정 삭제) 또는 웹사이트 대시보드에서 직접 계정을 삭제할 수 있습니다. 공유된 공개 요약은 제거되지 않습니다.
다른 개인 정보 보호 요청은 [email protected]으로 문의하세요. 30일 이내에 답변해 드리겠습니다.
8. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication
- Secure data centers and infrastructure
- Employee training on data protection
- Incident response procedures
9. Cookies and Tracking
We use cookies and similar technologies for:
- Authentication and session management (Supabase)
- Remembering your preferences (theme, sidebar state)
- Analytics and user behavior tracking (PostHog)
- Error monitoring and performance tracking (Sentry)
- Security and fraud prevention
We also use browser localStorage for certain preferences like theme selection and video URL storage. Unlike cookies, localStorage data is not sent to our servers automatically.
You can control cookie settings through your browser preferences. Some features may not work properly if cookies are disabled. For detailed information about our cookie usage, please see our Cookie Policy.
10. International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA). We ensure adequate protection through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Certification schemes and codes of conduct
- Binding corporate rules
11. Children's Privacy
Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete such information.
12. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email or service notification. We encourage you to review this policy periodically.
13. Supervisory Authority
You have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
14. Contact Information
For questions about this privacy policy or to exercise your rights, please contact us:
Data Protection Officer: Questly Kft.
Address: 1065 Budapest, Révay utca 6. Fsz. 7. ajtó
Email: [email protected]
Response Time: Within 30 days
This privacy policy is compliant with the General Data Protection Regulation (GDPR) and Hungarian data protection laws.