Privacy Policy

1. Introduction

This Privacy Policy describes how Summer Engine ("we," "us," or "our") collects, uses, and protects your personal data when you use Vibe Read. We are committed to transparency and protecting your privacy rights under the General Data Protection Regulation (GDPR) and Danish data protection law.

Data Controller: Summer Engine, located in Denmark, is the data controller responsible for your personal data.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Password (securely hashed)
• Authentication tokens for connected services (e.g., X/Twitter)

Content You Provide

We process the content you save to Vibe Read, including:

• Articles and URLs you save
• Bookmarks synced from connected platforms
• Notes and highlights you create
• Chat interactions with our AI features

Usage Data

We automatically collect limited technical information:

• Device type and operating system
• App version
• General usage patterns (e.g., features used, session duration)
• Error logs and crash reports

We do not track your precise location or sell your data to advertisers.

3. How We Use Your Data

We process your personal data for the following purposes:

4. Data Sharing

We do not sell your personal data. We only share your data in the following limited circumstances:

• Service Providers: We use trusted third-party services to help operate Vibe Read (e.g., cloud hosting, payment processing). These providers are contractually bound to protect your data and only process it on our behalf.
• AI Providers: To power audio generation and chat features, we may share your content with AI service providers. These providers do not use your data to train their models and delete it after processing.
• Legal Requirements: We may disclose data if required by law, court order, or to protect our legal rights.

5. International Data Transfers

Vibe Read is operated from Denmark within the European Union. When we transfer data outside the EU/EEA (for example, to AI service providers), we ensure appropriate safeguards are in place, such as:

• EU-approved Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

6. Data Retention

We retain your data only as long as necessary:

• Account data: Retained while your account is active and for a reasonable period afterward for legal and business purposes.
• Content: Retained until you delete it or your account is closed.
• Usage data: Typically retained for up to 12 months, then anonymized or deleted.
• Payment records: Retained as required by tax and accounting laws (typically 5-7 years).

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain it.

7. Your Rights (GDPR)

As a user in the EU, you have comprehensive rights over your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain circumstances.
• Right to Restriction: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, commonly used format and transfer it to another service.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at founders@summerengine.com. We will respond within 30 days as required by GDPR.

8. Data Security

We implement robust technical and organizational measures to protect your data:

• Encryption in transit (TLS/HTTPS) and at rest
• Secure password hashing
• Regular security assessments
• Access controls limiting who can view your data
• Secure European data centers

While no system is 100% secure, we are committed to maintaining the highest standards of data protection in accordance with European regulations.

9. Cookies

We use essential cookies to operate Vibe Read (e.g., for authentication and session management). We may also use analytics cookies with your consent to understand how you use our service. You can manage cookie preferences through your browser settings or our cookie banner.

10. Children's Privacy

Vibe Read is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the service at least 30 days before the changes take effect. We encourage you to review this policy periodically.

12. Contact & Complaints

For any questions, concerns, or to exercise your rights, contact us at:

Email: founders@summerengine.com

Company: Summer Engine

Location: Denmark, European Union

Supervisory Authority: If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
www.datatilsynet.dk