Privacy Policy

Last updated: 10/31/2026

1. Data Controller

Company Name: Questly Kft.

Country: Hungary

Tax Number: 32757402-1-42

Registered Office: 1065 Budapest, Révay utca 6. Fsz. 7. ajtó

Email: hello@sum.video

Questly Kft. is the data controller responsible for processing your personal data in accordance with the General Data Protection Regulation (GDPR) and Hungarian data protection laws.

2. Types of Personal Data We Collect

Account Information

  • Email address (for authentication and communication)
  • Password (encrypted and stored securely)
  • Account creation date and last login information

Service Usage Data

  • YouTube video URLs submitted for processing
  • Video metadata (title, duration, channel information)
  • Generated summaries and transcripts
  • Usage patterns and frequency
  • Subscription status and payment information

Technical Data

  • IP address and location data
  • Browser type and version
  • Device information and operating system
  • Cookies and similar tracking technologies

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: To provide the summarization service you have subscribed to
  • Legitimate Interest: To improve our service, prevent fraud, and ensure security
  • Consent: For marketing communications and optional data processing
  • Legal Obligation: To comply with applicable laws and regulations

4. How We Use Your Data

Service Provision

  • Process YouTube videos and generate summaries
  • Maintain your account and subscription
  • Provide customer support
  • Process payments through Stripe

Service Improvement

  • Analyze usage patterns to improve AI accuracy
  • Optimize service performance and reliability
  • Develop new features and capabilities
  • Conduct research and analytics (anonymized)

Communication

  • Send service-related notifications
  • Provide updates about your subscription
  • Respond to your inquiries and support requests
  • Send marketing communications (with consent)

5. Data Sharing and Third Parties

We may share your data with the following third parties:

Supabase (Database & Authentication)

We use Supabase for user authentication and data storage. Your account information and usage data are stored securely on Supabase's infrastructure.

Stripe (Payment Processing)

Payment information is processed by Stripe. We do not store credit card details on our servers.

OpenRouter (AI Processing)

Video transcripts are sent to OpenRouter for AI-powered summarization. We do not share personal information with OpenRouter beyond the content you submit.

YouTube API Services

sum.video uses YouTube API Services to retrieve metadata of public videos and to publish our own tutorial videos on our own YouTube channel. By using sum.video you agree to be bound by the YouTube Terms of Service. YouTube API Services are provided by Google; see the Google Privacy Policy.

We only access, use and store publicly available video information (such as title, channel name, duration and transcript) to provide summaries. We do not access your YouTube account or any private YouTube data, and we do not share YouTube data with third parties except the processors listed on this page.

You can ask us to delete any stored data at any time by deleting your account in the dashboard or by writing to the contact address in section 1; we delete it without undue delay. If you ever granted sum.video access to a Google account, you can revoke it on the Google security settings page.

PostHog (Analytics)

We use PostHog for user behavior analytics and event tracking to improve our service. PostHog may set cookies for analytics purposes.

Sentry (Error Tracking)

We use Sentry for error monitoring and performance tracking. Sentry may set cookies to track application performance and errors.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

ແອັບມືຖື ແລະ ການຊື້ໃນແອັບ

ແອັບ sum.video iOS ແລະ Android ໃຊ້ບັນຊີ ແລະ ບົດສະຫຼຸບດຽວກັນກັບເວັບໄຊທ໌, ໂດຍມີຄວາມແຕກຕ່າງດັ່ງນີ້:

  • ການສະໝັກໃຊ້ Pro ທີ່ຊື້ໃນແອັບຈະຖືກເກັບເງິນໂດຍ Apple App Store ຫຼື Google Play, ບໍ່ແມ່ນໂດຍ Stripe.
  • ພວກເຮົາໃຊ້ RevenueCat ເພື່ອຢືນຢັນໃບຮັບເງິນຂອງຮ້ານຄ້າ ແລະ ຊິງຄ໌ສະຖານະການສະໝັກໃຊ້ກັບບັນຊີຂອງທ່ານ.
  • ແອັບມືຖືບໍ່ລວມ PostHog analytics ຫຼື SDKs ຕິດຕາມການໂຄສະນາ.
  • ທ່ານສາມາດລຶບບັນຊີຂອງທ່ານຈາກບັນຊີໃນແອັບມືຖື ຫຼື ຈາກແດຊບອດຂອງທ່ານໃນເວັບໄຊທ໌. ນັ້ນຈະລຶບຂໍ້ມູນບັນຊີສ່ວນຕົວຂອງທ່ານໃນ sum.video.
  • ການລຶບບັນຊີຂອງທ່ານຈະບໍ່ຍົກເລີກການສະໝັກໃຊ້ App Store ຫຼື Google Play ທີ່ກຳລັງໃຊ້ງານຢູ່. ຍົກເລີກສິ່ງເຫຼົ່ານັ້ນໃນການຕັ້ງຄ່າການສະໝັກໃຊ້ Apple ID ຫຼື Google Play.

ຕົວເຊື່ອມຕໍ່ Claude ແລະ ChatGPT

ຖ້າທ່ານເຊື່ອມຕໍ່ Claude ຫຼື ChatGPT ກັບ sum.video, ແອັບຯເຫຼົ່ານັ້ນຈະສົ່ງ URL ວິດີໂອ YouTube ແລະຄໍາຖາມທີ່ທ່ານຖາມຜ່ານຕົວເຊື່ອມຕໍ່. ພວກເຮົາປະມວນຜົນພວກມັນພາຍໃຕ້ບັນຊີທີ່ມີຢູ່ແລ້ວຂອງທ່ານ, ໂຄຕ້າສະຫຼຸບປະຈໍາອາທິດ, ແລະໂຄຕ້າການສົນທະນາ. ພວກເຮົາບໍ່ໄດ້ຮັບສ່ວນທີ່ເຫຼືອຂອງການສົນທະນາ Claude ຫຼື ChatGPT ຂອງທ່ານ.

6. Data Retention

Account Data

Retained for the duration of your account plus 3 years after account closure for legal and business purposes.

Usage Data

Video URLs and summaries are retained for 2 years to improve service quality and provide account history.

Payment Data

Retained for 7 years as required by Hungarian accounting and tax regulations.

Technical Data

Logs and technical data are retained for 1 year for security and performance monitoring.

ສິດທິຂອງທ່ານພາຍໃຕ້ GDPR

ໃນຖານະເປັນເຈົ້າຂອງຂໍ້ມູນ, ທ່ານມີສິດທິດັ່ງຕໍ່ໄປນີ້:

ສິດທິໃນການເຂົ້າເຖິງ

ຮ້ອງຂໍສຳເນົາຂໍ້ມູນສ່ວນຕົວທັງໝົດທີ່ພວກເຮົາເກັບກ່ຽວກັບທ່ານ.

ສິດທິໃນການແກ້ໄຂ

ແກ້ໄຂຂໍ້ມູນສ່ວນຕົວທີ່ບໍ່ຖືກຕ້ອງ ຫຼື ບໍ່ຄົບຖ້ວນ.

ສິດທິໃນການລຶບ

ຮ້ອງຂໍການລຶບຂໍ້ມູນສ່ວນຕົວຂອງທ່ານໃນບາງກໍລະນີ.

ສິດທິໃນການຈຳກັດ

ຈຳກັດວິທີທີ່ພວກເຮົາປະມວນຜົນຂໍ້ມູນສ່ວນຕົວຂອງທ່ານ.

ສິດທິໃນການເຄື່ອນຍ້າຍຂໍ້ມູນ

ຮັບຂໍ້ມູນຂອງທ່ານໃນຮູບແບບທີ່ມີໂຄງສ້າງ, ສາມາດອ່ານໄດ້ດ້ວຍເຄື່ອງຈັກ.

ສິດທິໃນການຄັດຄ້ານ

ຄັດຄ້ານການປະມວນຜົນໂດຍອີງໃສ່ຜົນປະໂຫຍດທີ່ຖືກຕ້ອງ.

ທ່ານສາມາດລຶບບັນຊີຂອງທ່ານເອງໃນແອັບມືຖື (ບັນຊີ → ລຶບບັນຊີ) ຫຼື ໃນແຜງຄວບຄຸມເວັບໄຊທ໌. ບົດສະຫຼຸບສາທາລະນະທີ່ແບ່ງປັນຈະບໍ່ຖືກລຶບອອກ.

ສຳລັບຄຳຮ້ອງຂໍຄວາມເປັນສ່ວນຕົວອື່ນໆ, ຕິດຕໍ່ພວກເຮົາທີ່ hello@sum.video. ພວກເຮົາຈະຕອບກັບພາຍໃນ 30 ວັນ.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication
  • Secure data centers and infrastructure
  • Employee training on data protection
  • Incident response procedures

9. Cookies and Tracking

We use cookies and similar technologies for:

  • Authentication and session management (Supabase)
  • Remembering your preferences (theme, sidebar state)
  • Analytics and user behavior tracking (PostHog)
  • Error monitoring and performance tracking (Sentry)
  • Security and fraud prevention

We also use browser localStorage for certain preferences like theme selection and video URL storage. Unlike cookies, localStorage data is not sent to our servers automatically.

You can control cookie settings through your browser preferences. Some features may not work properly if cookies are disabled. For detailed information about our cookie usage, please see our Cookie Policy.

10. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Certification schemes and codes of conduct
  • Binding corporate rules

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete such information.

12. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or service notification. We encourage you to review this policy periodically.

13. Supervisory Authority

You have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

NAIH

Address: 1055 Budapest, Falk Miksa utca 9-11.

Website: https://naih.hu

14. Contact Information

For questions about this privacy policy or to exercise your rights, please contact us:

Data Protection Officer: Questly Kft.

Address: 1065 Budapest, Révay utca 6. Fsz. 7. ajtó

Email: hello@sum.video

Response Time: Within 30 days

This privacy policy is compliant with the General Data Protection Regulation (GDPR) and Hungarian data protection laws.