Privacy policy
SummarizAI (“we”, “us”) provides a Chrome extension and website at summarizai.ink that help you summarize YouTube videos and webpages with AI. This policy explains how the product collects, uses, handles, stores, and shares all user data, and names every party that data is shared with. None of those sections is omitted.
Effective date: September 18, 2026
This policy applies to the SummarizAI Chrome extension (including the side panel and in-page YouTube tools) and the website and API at www.summarizai.ink.
Required disclosures in this document:
- User data collection
- User data handling (how we use data, including secure handling)
- User data storage
- User data sharing (all parties named)
The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Who we are
SummarizAI operates the browser extension and the services at summarizai.ink. Privacy questions and data requests: support@summarizai.ink.
User data collection
We collect personal and usage data only as needed to run SummarizAI. Categories:
Account information
When you sign up or sign in with email and password or Google Sign-In, we collect your email address, optional display name and profile picture, password hash (email sign-in only), plan tier, and authentication tokens so you can use the service across devices.
YouTube-related data
When you tap Summarize or use chat, study, comments, or related tools on a YouTube watch page, the extension reads information needed to generate the result, such as:
- Video ID, title, channel, description, duration, and other public metadata
- Captions or transcript text and timing from the page or YouTube caption endpoints
- Visible comment text on the watch page when you use comment tools
- Your language, summary, and study preferences for that request
We do not access your private YouTube account, subscriptions, likes, or watch history beyond the page you are on when you use the product. If captions are missing, we may run audio transcription for that video. See how SummarizAI handles video data.
Webpage tools
When you use Summary, Chat, or Flashcards in the Chrome side panel on a non-YouTube page, we collect the page URL, title, and readable text you asked us to process. We send that page text only when you use those tools—not on every page load.
Uploaded documents
When you use Upload file in the Chrome side panel, the extension parses PDF, Word (.docx), or text files on your device and extracts readable text locally. We send that extracted text to our API and to OpenAI only when you use Summary, Chat, or Flashcards—not the original file. We do not store the raw file. History may keep a content hash, filename, and the generated summary the same way we store webpage summaries. The named parties listed under User data sharing are the only recipients.
Public text summarizer
The AI text summarizer on this site accepts pasted text or a PDF, DOCX, or TXT file without an account. We extract readable text from the file on the server, send that text to the summary model for the request, and do not write the source text or the file to the database. The response is not cached. Rate limits use the network address for abuse prevention. Model providers may retain a request for the time described in their policies.
Summaries, chat, study, and usage
We collect the prompts and outputs you generate (summaries, chat messages, flashcards, quizzes, notes, fact-check requests, and similar artifacts), plus video or page identifiers, language settings, token usage, and quota records tied to your account.
Extension, cookies, and device data
The extension uses Chrome storage for access and refresh tokens, language preference, and cached account details. With your permission, it may read our own httpOnly session cookies on summarizai.ink so a website sign-in can restore the extension session. Our servers receive technical metadata when you sign in or call the API, including IP address, date and time, browser user agent, and referrer. Marketing pages may load Google Tag Manager for aggregated traffic measurement. If you arrive with an affiliate referral, we may set first-party referral cookies.
Payments
Paid plans are processed by Stripe. We collect billing status, customer and subscription identifiers, and plan details from Stripe. We do not collect or store full payment card numbers on our servers.
How collection happens (Chrome extension)
The extension collects data in these ways:
- You provide it — email, password, Google Sign-In, chat prompts, and billing details you enter
- The page you are on, after you use a tool — YouTube metadata, captions, visible comments, readable webpage text from the active tab, or text extracted locally from a document you upload in the side panel
- Automatically when you call our API — IP address, user agent, time, and the request path, over HTTPS
- Chrome APIs we declare —
storagefor tokens and preferences;cookiesonly for summarizai.ink session cookies;activeTab,scripting, andtabsto read the current page after you choose a tool;sidePanelandnotificationsfor the product UI
User data handling
We handle the data listed above to operate the product you asked for—not to build advertising profiles. Specifically, we:
- Generate AI summaries, chapters, chat replies, study materials, and related features you request
- Authenticate you and sync settings between the extension, side panel, and website
- Recover a website session into the extension when you have signed in on summarizai.ink
- Enforce free and paid usage limits and prevent abuse
- Process subscriptions, invoices, refunds, and support requests
- Host, cache, and reuse generated outputs so the same request does not always call an AI model again
- Diagnose errors, secure the service, and meet legal obligations
- Measure marketing-site traffic (not the in-extension
/app/iframe) with Google Tag Manager
The extension injects a Summarize control on YouTube watch pages and may extract text from the active tab only after you use a tool. It loads the summary UI from summarizai.ink in an iframe. That hosted app talks to our API. We do not execute arbitrary third-party scripts from inside the packed extension.
YouTube content scripts run only on YouTube URLs listed in the manifest. Webpage extraction uses the active tab after you choose Summary, Chat, or Flashcards. The cookies permission is used to read SummarizAI session cookies on our origin, not to scrape other sites’ cookies.
We handle personal and sensitive user data securely: the extension and website send it to our API only over HTTPS (TLS). We do not use the data for personalized, retargeted, or interest-based advertising. Humans at SummarizAI do not read your transcripts, page extracts, or chat contents except with your consent for support, to investigate abuse or security incidents, to comply with law, or in aggregated anonymized form for internal operations.
User data storage
We store user data in these places:
- Our servers and database. Account records, authentication secrets (hashed passwords and refresh tokens), plan and quota usage, video and transcript records, generated AI artifacts, and support-related logs are stored in our Vercel-hosted application and DigitalOcean PostgreSQL database, accessed over HTTPS. DigitalOcean provides provider-managed encryption at rest for that database and backups.
- Your browser (extension). Access and refresh tokens, language and UI preferences, and short-lived cache live in
chrome.storage(sync or local) on your device until you sign out, clear extension data, or uninstall. - Your browser (website). httpOnly cookies
summarizai_access(short-lived) andsummarizai_refresh(longer-lived) keep you signed in on summarizai.ink. Optional first-party affiliate cookies may remember a referral code and visitor id. - Payment processor. Stripe stores payment instruments and invoices under Stripe’s policy. We store Stripe customer and subscription identifiers, not card PANs.
- AI and infrastructure processors. Model providers and our cloud host may retain request data for the time needed to generate a response, prevent abuse, and meet their own legal duties, as described in their policies.
- Guest text summarizer. Source text from /tools/ai-text-summarizer/ is not stored in our database after the response is sent.
We keep account and usage data while your account is active and as needed for billing, security, backups, and legal obligations. Cached summaries and related artifacts may be stored so repeat requests can reuse a prior result. You may request deletion of your account and associated personal data by emailing support@summarizai.ink. We will delete or anonymize personal data we control except where we must retain a subset (for example invoices or fraud records) for a limited period required by law. You can remove locally stored credentials by signing out or uninstalling the extension.
We protect stored data with encryption in transit (HTTPS), access controls on production systems, hashed passwords, and httpOnly cookies for website sessions. No method of storage is perfectly secure; we work to prevent unauthorized access.
User data sharing
We share user data only as described here. We do not sell your personal information. We do not share your data with third parties for their independent advertising or data-broker products.
All parties that user data is shared with
These are the only parties that receive user data from SummarizAI. There are no unnamed “other vendors.”
- OpenAI, L.L.C. — Receives the transcript, webpage extract, uploaded document text, chat or study prompt, and (when captions are missing) audio needed to generate the feature you requested. Policy: openai.com/policies/privacy-policy.
- Stripe, Inc. — Receives billing identity (typically email), customer and subscription identifiers, and payment events to charge and manage paid plans. Policy: stripe.com/privacy.
- Google LLC — Receives (a) the account data you submit for Google Sign-In; (b) search or books queries and public YouTube metadata when you use fact check, syllabus, research, or related tools that call Google Custom Search, Google Books, or the YouTube Data API; (c) aggregated measurement events from marketing pages via Google Tag Manager. Policy: policies.google.com/privacy.
- Vercel Inc. — Hosts the website, API, and extension iframe at summarizai.ink. Receives technical request data such as IP address, user agent, URL, and timestamps in server and CDN logs. Policy: vercel.com/legal/privacy-policy.
- DigitalOcean, LLC — Hosts our PostgreSQL database and backups. Stores account records, transcripts, generated artifacts, quotas, and related application data we persist. Policy: digitalocean.com/legal/privacy-policy.
- Resend, Inc. — Receives your email address and message content when we send transactional mail (for example welcome or payment confirmation). Policy: resend.com/legal/privacy-policy.
These providers may be located outside your country. They may use the data only to provide their service to us, under their terms and our instructions, except where a provider is an independent controller (for example Google Sign-In or Stripe for payment compliance).
We may also share information if required by law, legal process, or government request; to protect the rights, safety, or property of SummarizAI, our users, or the public; or as part of a merger, acquisition, or asset sale, in which case this policy will still apply or we will notify you of changes.
We do not share your YouTube transcripts, webpage extracts, or chat contents with other SummarizAI users or with advertisers. We do not share user data with any party not listed above except as required by law.
Cookies and local storage
The website uses cookies and similar technologies for sign-in sessions and, when applicable, affiliate attribution. The extension uses Chrome storage for tokens and preferences. You can clear cookies in your browser, sign out, or remove the extension to delete local credentials.
What we do not do
- We do not sell your personal information
- We do not use your transcripts or page text to build third-party advertising profiles
- We do not read YouTube or other websites except when you use SummarizAI on that page as described above
Your choices
- Access and correction: view or update account details in the extension account view or by signing in on the website
- Deletion: email support@summarizai.ink to request account and associated data deletion
- Opt out: uninstall the extension and cancel any paid subscription through the Stripe billing portal
Children
SummarizAI is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children.
International users
We may process and store information in countries where we or our providers operate. By using SummarizAI, you understand your information may be transferred internationally with appropriate safeguards.
Changes
We may update this policy from time to time. We will post the revised version on this page and update the effective date above.
Contact
Email support@summarizai.ink for privacy questions or requests about collection, handling, storage, or sharing of your data.