Privacy Policy
Privacy Policy for Summarizer.xyz
Last updated: 29 August 2026
1. Who we are
Omnio Tech AB (559476-2337), with registered address in Stockholm, Sweden (“we”, “us”, “our”) is the data controller for the personal data processed through the Summarizer.xyz service (the “Service”).
Contact: privacy@summarizer.xyz
If you have questions about this policy or your personal data, contact us at the email above.
2. What personal data we collect
We collect and process the following categories of data:
- Account data (from Google Sign-In): name, email address, Google account ID, profile picture (if provided).
- Service data: YouTube channel IDs and channel names you choose to follow (maximum 3), video IDs and titles of videos we process, timestamps of when we last checked a channel, and records of which videos have already been summarised.
- Content data: Transcripts of videos (when available via YouTube) and the AI-generated summaries we create.
- Technical & usage data: IP address, browser type, device information, and logs related to authentication and email delivery (for security and debugging).
We do not collect payment data at this time (the Service is currently free).
3. How and why we use your data
Purposes and legal bases under GDPR:
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing your account, authenticating you via Google | Performance of a contract (Art. 6(1)(b)) |
| Fetching new videos from the channels you follow, generating summaries, and sending them to your email | Performance of a contract (Art. 6(1)(b)) |
| Keeping records of processed videos so we do not send duplicates | Legitimate interest (Art. 6(1)(f)) – providing a reliable service |
| Improving the Service, debugging, security, and preventing abuse | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Third parties we share data with
- Google – for Sign-In and (when you use Gmail) email delivery. Subject to Google’s own privacy policy and data processing terms.
- YouTube / Google – via the YouTube Data API to fetch channel and video information and available captions/transcripts. We only request the minimum data needed.
- AI / language model provider(s) – we send video transcripts to generate the business-development oriented summaries.
- Hosting / infrastructure providers – for running the Service and storing data securely within the EU/EEA where possible.
We do not sell your personal data.
5. International transfers
Where data is transferred outside the EU/EEA (e.g. to certain AI providers or Google services), we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).
6. How long we keep your data
- Account data: for as long as your account is active + a reasonable period after deletion (normally 30 days) for backup and legal purposes.
- Channel follow list and processing history: for as long as you keep the channels in your account.
- Transcripts and summaries: retained only as long as needed to provide the Service and for a limited period afterwards for support/debugging (normally no longer than 90 days after the email is sent, unless you request longer retention).
- Logs: typically 30–90 days.
You can request earlier deletion at any time (see section 8).
7. Security
We use industry-standard technical and organisational measures to protect your data (encryption in transit, access controls, etc.). No method of transmission or storage is 100% secure, but we take the protection of your data seriously.
8. Your rights under GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent (where processing is based on consent)
To exercise any of these rights, email us at privacy@summarizer.xyz.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another EU supervisory authority.
9. Cookies and similar technologies
We use only essential cookies/technical storage necessary for authentication and the functioning of the Service. We do not use advertising or third-party tracking cookies at present.
10. Children
The Service is not directed at children under 16. We do not knowingly collect data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available in the Service. Significant changes will be notified by email where appropriate.