Privacy policy

Last updated: September 2026

Your privacy matters to us. This policy explains what data we collect, why we collect it, and how we protect it.

Who we are

Sumlo is operated by Simplepage Limited, a company registered in the Isle of Man (company no. 139122C). Sumlo is an internal tool and is not sold or open for public sign-up.

What data we collect

When you use Sumlo, we collect:

• Account information: your email address and password (stored hashed, never in plain text) when your account is created
• Timesheet data: the CSV files you upload to generate reports. This data is processed to create your reports and is not shared with third parties except as described under AI processing below.
• Usage data: a count of the reports and PDF exports generated on your account

We do not take payments and do not collect or store any payment or card details.

How we use your data

We use your data to:

• Provide the Sumlo service and generate your reports
• Send you important account notifications

We will never sell your data to third parties. We will never use your timesheet data for any purpose other than generating your reports.

AI processing

Sumlo uses AI (Claude by Anthropic) to generate narrative summaries for your reports. When you generate a report, anonymised timesheet data is sent to the AI to create the summary. No personally identifiable information about your clients is shared.

Data retention

Uploaded timesheet data is held only in your browser session while you work on a report. It is discarded when the session ends (after 30 minutes of inactivity), when you start over, or when you sign out. We do not store uploaded CSV files or generated reports on our servers.

Account data is retained while your account is active. You can request deletion of all your data at any time.

Your rights

Under applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate data
• Request deletion of your data
• Export your data in a portable format

To exercise any of these rights, email us at [email protected].

Cookies

We use essential cookies only, to keep you signed in and remember your preferences. We do not use analytics, tracking or advertising cookies.

Security

All data is transmitted over HTTPS. Passwords are hashed using industry-standard algorithms. Sumlo runs on infrastructure we operate and maintain directly, with regular security updates.

Changes to this policy

We may update this policy from time to time. We'll notify you of any significant changes by email.

Contact

For questions about this policy or your data, email [email protected].