Data rights · Draft 1.0
Use the self-service export and deletion controls when available, or contact privacy@summalabs.ai. Business users should normally contact their workspace administrator, because their organisation controls employee content.
From your account settings you can inspect and correct profile information, export available workspace data, delete conversations, initiate account deletion, and manage subscription cancellation. The self-service export is a convenience and is not a substitute for a complete GDPR access response.
Requests may be sent to privacy@summalabs.ai. Please identify the relevant account email, the right you are exercising, the relevant account or workspace, and any date range or processing activity that would help locate the data. Do not send identity documents unless specifically and proportionately requested.
You may request access, rectification, erasure, restriction, objection, portability, withdrawal of consent, information about safeguards, and review of a decision based solely on automated processing where applicable.
We first use information already associated with the account. Additional evidence is requested only where necessary to prevent disclosure or deletion involving the wrong person. For business requests we also verify the requester’s authority.
We respond without undue delay and ordinarily within one month. Where legally permitted, a complex or numerous request may require an extension of up to two further months; we notify you within the initial month and explain the reason.
For content processed on behalf of a business, the business customer is normally responsible for responding and we assist under the Data Processing Agreement. A business user may always contact Summa regarding processing for which Summa acts independently as controller.
Where a request cannot be fulfilled, we explain the reason and provide information about complaint and judicial-remedy rights, unless law prevents disclosure. You may complain to the Autoriteit Persoonsgegevens or the supervisory authority in your EU country. We encourage you to contact us first so we can attempt to resolve the matter.