This Privacy Policy describes how Sum AI, LLC ("Sum AI", "we", "us", "our") collects, uses, shares, and protects information when you use our products and services, marketed under the names "Keanu" and "HeyKeanu" (the "Service"). By using the Service, you consent to the practices described here.
1. Information We Collect
1.1 Information you provide
- Account information. Email address, name, and any password or PIN you create.
- Payment information. Billing name and payment method, processed and stored by our payment processor (Stripe or equivalent). We do not store full card numbers.
- Communications. Messages you send to support, feedback, and any content you submit through the Service.
1.2 Information you authorize the Service to access
- Email content. When you connect a Gmail account, we read messages from your inbox to identify, classify, and triage client requests. We do not send mail on your behalf without your action; drafts are saved to your Drafts folder for your review.
- Code repositories. When you point the Service at a Git repository, we read source code to draft fixes, run tests, and prepare pull requests. We may temporarily clone repositories into isolated worktrees on the local machine where the Service runs.
- GitHub issues and pull requests. When you connect a GitHub account, we read issues and PR data and may post comments or create PRs on your behalf according to the workflows you configure.
- Attachments. Image attachments included in incoming emails or issues may be downloaded and stored alongside the corresponding internal record.
1.3 Information collected automatically
- Usage data. Logs of feature usage, session timestamps, error reports, and aggregate metrics we use to operate and improve the Service.
- Device and connection data. Browser type, operating system, IP address, and similar technical information.
2. How We Use Information
We use information to:
- Provide, operate, and maintain the Service.
- Process subscriptions, billing, and account management.
- Generate AI output (drafts, classifications, code suggestions) by transmitting your data to third-party AI providers as described below.
- Communicate with you about the Service, security alerts, and policy changes.
- Detect, prevent, and respond to abuse, fraud, or security incidents.
- Comply with legal obligations.
3. Third-Party Sharing
We share information only with:
- AI model providers (such as Anthropic, OpenAI, and similar). We transmit Customer Data, including email content, code, and issue text, to these providers as necessary to generate AI Output. Their use of that data is governed by their respective terms and privacy policies.
- Cloud and infrastructure providers that host portions of the Service.
- Payment processors for billing.
- Analytics and error-monitoring providers for operational metrics. We aim to use providers that respect privacy and do not sell user data.
- Legal compliance. We may disclose information when required by law, subpoena, or to protect our rights or the safety of others.
- Acquirers. If Sum AI is acquired or merged, your information may transfer as part of that transaction; we will give notice in that case.
We do not sell or rent your personal information to third parties for advertising.
4. Data Retention
- Account information is retained while your account is active and for a reasonable period afterward to handle billing, disputes, and legal obligations.
- Customer Data ingested into the Service (e.g. issue records, draft fixes) is retained while you use the Service. You may delete records at any time through the dashboard.
- Logs and aggregate usage metrics are retained for up to 24 months unless legal obligations require longer.
- Payment records are retained as required by tax and accounting law (typically 7 years in the U.S.).
- Upon account closure, we will delete or anonymize personal information within 90 days, except where retention is legally required.
5. Security
We use industry-standard administrative, technical, and physical safeguards to protect your information. These include encryption in transit, access controls, and regular review of our practices. No system is perfectly secure; we cannot guarantee absolute security and you use the Service at your own risk.
6. Your Rights and Choices
Depending on your jurisdiction, you may have rights to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of personal information, subject to legal retention obligations.
- Object to or restrict certain processing.
- Receive a copy of your data in a portable format.
- Withdraw consent for processing that relies on consent.
To exercise any of these rights, email privacy@heykeanu.app. We will respond within a reasonable time. If you are in California, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect and the right to non-discrimination for exercising your rights.
7. Cookies and Tracking
The Service uses cookies and similar technologies to keep you signed in, remember your preferences, and operate basic functionality. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling cookies may break sign-in.
8. Children's Privacy
The Service is not directed to children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will delete it.
9. International Users
Sum AI is based in California, U.S.A. If you access the Service from outside the U.S., your information will be processed in the U.S. and other countries where our service providers operate. By using the Service you consent to that processing.
10. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. The "Effective" date at the top of this page reflects the most recent update. Continued use of the Service after changes take effect constitutes acceptance.
11. Contact
Sum AI, LLC
Email: privacy@heykeanu.app