Privacy Policy
Privacy Policy for Summarizer.xyz
Last updated: 4 September 2026
1. Who we are
Omnio Tech AB (559476-2337), with registered address in Stockholm, Sweden (“we”, “us”, “our”) is the data controller for the personal data processed through the Summarizer.xyz service (the “Service”).
Contact: privacy@summarizer.xyz
If you have questions about this policy or your personal data, contact us at the email above.
2. What personal data we collect
We collect and process the following categories of data:
- Account data (from Google Sign-In): name, email address, Google account ID, profile picture (if provided).
- Service data: YouTube channel and playlist IDs and names you choose to follow, video IDs and titles of videos we process, timestamps of when we last checked a source, your per-source summary settings, and records of which videos have already been summarised.
- Content data: Transcripts of videos (when available) and the AI-generated summaries we create.
- Subscription and billing-related data: if you purchase Summarizer Pro, we receive and store your subscription status, plan, billing period, and the subscription and customer identifiers issued by our payment provider Paddle. Your email address is shared with Paddle to create the order.
- Technical & usage data: IP address, browser type, device information, and logs related to authentication and email delivery (for security and debugging).
We never see or store your full card details. Card and payment data is collected and processed directly by Paddle, which acts as the Merchant of Record and its own data controller for that payment data.
3. How and why we use your data
Purposes and legal bases under GDPR:
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing your account, authenticating you via Google | Performance of a contract (Art. 6(1)(b)) |
| Fetching new videos from the channels you follow, generating summaries, and sending them to your email | Performance of a contract (Art. 6(1)(b)) |
| Keeping records of processed videos so we do not send duplicates | Legitimate interest (Art. 6(1)(f)) – providing a reliable service |
| Improving the Service, debugging, security, and preventing abuse | Legitimate interest (Art. 6(1)(f)) |
| Processing subscriptions, payments, invoicing and tax compliance for Summarizer Pro | Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Third parties we share data with
- Paddle.com Market Ltd – our payment provider and Merchant of Record. Paddle receives your email address and an internal user identifier in order to process the sale, manage your subscription, take payment, issue invoices, handle tax compliance, and process refunds and customer billing enquiries. Paddle acts as its own controller for payment data. See Paddle’s privacy notice and buyer terms.
- Google – for Sign-In and (when you use Gmail) email delivery. Subject to Google’s own privacy policy and data processing terms.
- YouTube / Google – via the YouTube Data API to fetch channel and video information and available captions/transcripts. We only request the minimum data needed.
- AI / language model provider(s) – we send video transcripts to generate the summaries.
- Hosting / infrastructure providers – for running the Service and storing data securely within the EU/EEA where possible.
- Professional advisers and authorities – legal and accounting advisers, and public authorities where required by law.
We do not sell your personal data.
5. International transfers
Where data is transferred outside the EU/EEA (e.g. to certain AI providers or Google services), we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).
6. How long we keep your data
- Account data: for as long as your account is active + a reasonable period after deletion (normally 30 days) for backup and legal purposes.
- Channel follow list and processing history: for as long as you keep the channels in your account.
- Transcripts and summaries: retained only as long as needed to provide the Service and for a limited period afterwards for support/debugging (normally no longer than 90 days after the email is sent, unless you request longer retention).
- Subscription and billing records: retained for as long as the subscription is active and thereafter for as long as required by accounting and tax law (normally 7 years in Sweden).
- Logs: typically 30–90 days.
You can request earlier deletion at any time (see section 8).
7. Security
We use industry-standard technical and organisational measures to protect your data (encryption in transit, access controls, etc.). No method of transmission or storage is 100% secure, but we take the protection of your data seriously.
8. Your rights under GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent (where processing is based on consent)
To exercise any of these rights, email us at privacy@summarizer.xyz.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another EU supervisory authority.
9. Cookies and similar technologies
We use only essential cookies/technical storage necessary for authentication and the functioning of the Service. We do not use advertising or third-party tracking cookies at present.
10. Children
The Service is not directed at children under 16. We do not knowingly collect data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available in the Service. Significant changes will be notified by email where appropriate.