Privacy Policy

Last updated: September 1, 2026

1. Overview

This policy describes how Summa (“we”, “us”) handles personal data collected through summa.shop and our early-access service. We collect as little as we can and never sell personal data.

2. What we collect

• Contact data — your name and email address when you write to us or request early access.
• Account data — information you provide when using the early-access service (shop name, product listings, order details).
• Payment data — payments are processed by Stripe; we receive transaction metadata (amount, status, last four digits) but never full card numbers.
• Technical data — basic server logs (IP address, browser type, pages visited) used for security and troubleshooting.

3. How we use it

• To operate and improve the service.
• To respond to your messages and manage early access.
• To process payments and prevent fraud (via Stripe).
• To meet legal and accounting obligations.

4. Sharing

We share data only with service providers needed to run Summa — notably Stripe, Inc. for payment processing and our hosting provider — and where the law requires it. See Stripe’s Privacy Policy for how Stripe handles payment data.

5. Retention

We keep personal data only as long as needed for the purposes above, then delete or anonymize it. Transaction records are retained as required by tax and accounting law.

6. Your rights

Depending on where you live (including under the GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. Email us and we will act on your request.

7. Cookies

This website currently uses no advertising or analytics cookies. The early-access application may use strictly necessary cookies to keep you signed in.

8. Contact

Privacy questions or requests: hello@summa.shop.