Legal Information

SummitAI is owned and operated by S&B Technologies LLC ("we," "our," or "us"), an AI-powered study platform. This Privacy Policy describes how we collect, use, store, and share your personal information when you access or use our website, mobile application, or any related services (collectively, the "Service"). By using the Service you consent to the practices described herein.

a. Account & Identity Data — name, email address, and hashed credentials provided at registration.

b. Study Content — notes, lecture slides, PDFs, and other documents you upload; AI-generated quizzes, summaries, and study plans derived from that content.

c. Usage & Performance Data — study session durations, question attempt logs, test scores, concept mastery ratings, and feature interaction events.

d. Technical Data — IP address, browser type, operating system, device identifiers, and session cookies used for security and analytics.

e. Communications — messages sent to our support team or AI support agent.

• Deliver, personalize, and improve the Service and its AI features
• Generate and refine adaptive study materials based on your performance
• Enforce daily and per-minute usage limits to maintain platform integrity
• Send transactional emails (account verification, streak reminders, billing receipts)
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Comply with applicable laws and respond to lawful legal process
• Conduct aggregated, anonymized internal research and product analytics

We do not sell, rent, or exchange your personal data with third parties for marketing purposes.

Portions of your uploaded content may be transmitted to third-party AI providers (currently OpenAI) solely to generate study materials on your behalf. These providers process data under their own data-processing agreements and are contractually prohibited from using your content to train their models beyond your session. We do not store raw prompts or model outputs longer than necessary to deliver the Service.

We share data only in the following limited circumstances:

• Service providers (cloud infrastructure, AI APIs) under confidentiality agreements and only to the extent necessary
• When required by applicable law, subpoena, court order, or governmental authority
• To protect the rights, property, or safety of SummitAI, its users, or the public
• In connection with a merger, acquisition, or sale of assets — you will be notified in advance
• With your explicit written consent

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time via the Profile page. Upon confirmed deletion, all personal data and uploaded content will be permanently purged from our production systems within 30 days and from backup systems within 90 days, except where retention is required by law.

• Data in transit is encrypted with TLS 1.2 or higher
• Data at rest is encrypted using AES-256
• Passwords are stored as salted cryptographic hashes and never in plain text
• Access to production data is restricted to authorized personnel on a need-to-know basis
• We perform regular security reviews and vulnerability assessments

Despite these measures, no system is completely secure. You use the Service at your own risk.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure ("right to be forgotten") — exercised via account deletion
• Restrict or object to certain processing
• Data portability — export your notes and study history
• Withdraw consent at any time without affecting prior lawful processing
• Lodge a complaint with your local data protection authority (GDPR/EU users)
• Opt out of the "sale" of personal information (CCPA/California users — note we do not sell data)

To exercise any right, email us at support@mysummitai.net. We will respond within 30 days.

SummitAI is a tool used independently by students and is not directly subject to FERPA as a school official. However, we treat all educational records you upload with the same confidentiality standards required by FERPA and will not disclose them to third parties without your consent except as required by law.

The Service is intended for users aged 16 and older. We do not knowingly collect personal information from anyone under 16. If we learn that we have inadvertently collected such data, we will delete it promptly.

We use strictly necessary cookies for session management and security. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but doing so may impair Service functionality.

We may update this Privacy Policy periodically. Material changes will be communicated via in-app notice or email at least 14 days before taking effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

For privacy inquiries: privacy@mysummitai.net