← Back

Privacy Policy

Effective 2026-05-24 · v0.1 draft

Who we are

Summon ("we", "us") is a cloud-browser-agent platform. We act on your behalf when you submit a task, then bill on completion. We're a small team — feedback goes to support@runsummon.com.

What we collect

  • Identity: email and name via Clerk; nothing else is required at signup.
  • Task content: the prompt you submit, the agent's actions, screenshots and recordings of the cloud browser session, the outcome.
  • AI ID: optional profile fields you provide so the agent can fill forms — name, address, phone, date of birth, signature. Stored encrypted; never sold or shared with third parties without your explicit action.
  • OAuth tokens: when you connect a third-party account (e.g. Google), we store refresh and access tokens encrypted via KMS envelope encryption. We use them only to perform the tasks you submit.
  • Payment data: handled by Stripe. We see only the last four digits and the brand of your card. Card numbers never touch our servers.
  • Diagnostics: standard product analytics via PostHog (anonymized event metadata, no personal content).

How we use it

To run your tasks, charge you on completion, debug issues you report, improve completion rates, and detect abuse. Specifically:

  • Browser session recordings are retained 30 days for debugging.
  • Failed-task logs are retained 90 days to improve the agent.
  • Audit logs of sensitive actions are retained 7 years for compliance.
  • We do not sell your data. We do not use your data to train third-party models.

What we never do

  • Run a task against an airline, big-four bank, or government portal in V1.
  • Read your inbox unless you explicitly grant a Gmail-content scope (V2).
  • Charge you when a task fails.
  • Share your data with third parties for marketing.

Your rights

  • Revoke any connected account from Settings → Sign-in methods.
  • Export all your data as JSON from Settings → Account.
  • Delete your account from Settings → Account → Delete. A 30-day grace period precedes permanent deletion.
  • Contact us: privacy@summon.app.

Updates

We'll email you before any material change. The current version is always at this URL.