Privacy Policy
Privacy policy
Last updated: December 2024
Your privacy matters to us. This policy explains what data we collect, why we collect it, and how we protect it.
Who we are
Sumlo is operated by Simon Antony Ltd, a company registered in England and Wales. Our registered address is in North Wales, UK.
What data we collect
When you use Sumlo, we collect:
- Account information: Your email address and password (encrypted) when you register
- Timesheet data: The CSV files you upload to generate reports. This data is processed to create your reports and is not shared with third parties.
- Usage data: Basic analytics about how you use Sumlo, to help us improve the service
- Payment information: If you subscribe to a paid plan, payment is processed securely through Stripe. We do not store your card details.
How we use your data
We use your data to:
- Provide the Sumlo service and generate your reports
- Send you important account notifications
- Improve our product based on usage patterns
- Process payments for paid subscriptions
We will never sell your data to third parties. We will never use your timesheet data for any purpose other than generating your reports.
AI processing
Sumlo uses AI (Claude by Anthropic) to generate narrative summaries for your reports. When you generate a report, anonymised timesheet data is sent to the AI to create the summary. No personally identifiable information about your clients is shared.
Data retention
- Uploaded CSV files are deleted within 24 hours of processing
- Generated reports are stored for 30 days, then automatically deleted
- Account data is retained while your account is active
- You can request deletion of all your data at any time
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for marketing communications
To exercise any of these rights, email us at [email protected]
Cookies
We use essential cookies to keep you logged in and remember your preferences. We use analytics cookies to understand how people use Sumlo. You can disable non-essential cookies in your browser settings.
Security
All data is transmitted over HTTPS. Passwords are hashed using industry-standard encryption. Our infrastructure is hosted on secure cloud servers with regular security updates.
Changes to this policy
We may update this policy from time to time. We'll notify you of any significant changes by email.
Contact
For privacy-related questions, email [email protected]