Legal

Privacy Policy

We take your privacy seriously. This policy explains exactly what data we collect, how we use it, and the rights you have over it.

Last updated: June 26, 2026

Introduction

Welcome to SummarizeAPI ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our text summarization platform and API.

This policy applies to all users who access SummarizeAPI through our website, API, or any related service. By using SummarizeAPI, you agree to the practices described in this policy.

If you have any questions about this policy, please contact us.

Information We Collect

2.1 Information You Provide

  • Account information: Your name and email address when you create an account.
  • Payment information: Billing details for paid plans — processed securely by Stripe or PayPal; we never store raw card numbers.
  • Communications: Messages and attachments you send via our contact form or support system.

2.2 Automatically Collected Information

  • Usage data: API request counts, timestamps, endpoints called, response times, and error rates.
  • Device & browser data: IP address, browser type and version, operating system, and referral URLs.
  • Cookies: Small data files to maintain your session and remember your preferences.
Important: Text submitted for summarization is processed in real-time and is never stored on our servers. Your content is discarded immediately after the API response is generated.

How We Use Your Data

  • Service delivery: To authenticate your requests, process your API calls, and return summarization results.
  • Account management: To manage your subscription, usage limits, and billing.
  • Service improvement: Aggregated, anonymized usage data helps us improve API performance and reliability.
  • Communications: Transactional emails (password resets, invoices, usage alerts) and optional product updates.
  • Security: To detect abuse, fraud, and unauthorized API usage.
  • Legal compliance: To comply with applicable laws, regulations, and court orders.

We do not sell your personal data to third parties. We do not use your data for advertising.

Data Storage & Retention

Your account data is stored on secure servers in the European Union. We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will permanently delete your personal data within 30 days, except where retention is required by law.

API request logs (timestamps, request counts) are retained for 12 months for billing and abuse-prevention purposes, then permanently deleted.

Data Sharing

We only share your data with trusted third parties in the following circumstances:

  • Payment processors: Stripe and PayPal process payment transactions. They are PCI-DSS compliant.
  • Email delivery: We use a transactional email provider to deliver system emails. Only your email address is shared.
  • AI providers: Text submitted via the API is sent to our AI provider (OpenRouter) for processing. It is subject to their data processing agreement and is not retained by them for training.
  • Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of SummarizeAPI and its users.

We never sell, rent, or trade your personal data to marketing companies or data brokers.

Security

We implement industry-standard security measures to protect your data:

  • All data in transit is encrypted using TLS 1.2/1.3.
  • Passwords are hashed using bcrypt and never stored in plain text.
  • API keys are generated with cryptographically secure random functions.
  • Access to production systems is restricted and audited.
  • Regular security reviews and dependency updates.

While we strive to protect your data, no method of transmission over the Internet is 100% secure. Please keep your API keys confidential and report any suspected security issues to security@summarizeapi.com.

Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights under GDPR:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Portability: Request your data in a machine-readable format.
  • Restriction: Request that we limit the processing of your data.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us. We will respond within 30 days.

Cookies

We use essential cookies only — small files stored on your device to maintain your login session and remember your preferences. We do not use advertising or tracking cookies from third parties.

You can disable cookies in your browser settings, though this may prevent you from logging in to your account.

Children's Privacy

SummarizeAPI is not intended for users under the age of 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.

Contact Us

If you have questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact us:

We will respond to all privacy-related inquiries within 30 days.