Privacy Policy

Last updated: July 28, 2026

Overview

SUM AI ("we", "us", or "our") operates the website sumai.ca. This policy explains what information is collected when you visit the site, how it is used, how long it is kept, and what third-party services process data on our behalf. We handle personal information in accordance with British Columbia's Personal Information Protection Act (PIPA).

We do not set any cookies of our own, and we do not use browser local storage, advertising networks, or analytics platforms. Cloudflare Turnstile, described below, is a third-party bot-prevention widget that may set its own cookies depending on how it is configured.

Information collected automatically

When you interact with the demo chat or the SUM AI Voice assistant, our server records the following information for each request and stores it in a database:

  • IP address
  • Country, region, city, postal code, and timezone (derived from your IP via Cloudflare)
  • Internet service provider (ISP) name and network number (ASN)
  • Browser user-agent string
  • Accept-Language header (your preferred language)
  • Referrer URL (the page you came from, if any)
  • HTTP protocol and TLS version
  • Timestamp of the request

For SUM AI Voice sessions we additionally record how long the session lasted and why it ended. We do not store the audio itself or the transcript.

This data is used to monitor abuse and understand where our visitors come from. We retain it for 90 days, after which it is automatically deleted.

Information you provide

When you complete the demo chat flow or submit the contact form, you may provide:

  • Full name
  • Email address
  • Phone number (optional)
  • Company name (optional)
  • Description of your project or service interest

This information is used solely to follow up with you about our services. We do not sell or share it with third parties for marketing purposes. We keep inquiry records for up to 24 months so we can pick up a conversation you started, and delete them sooner on request.

SUM AI Voice (microphone)

SUM AI Voice is an optional voice assistant. It activates only when you press "Start" and grant your browser's microphone permission, and it stops when you press "End", close the popup, or leave the page.

While a session is active, your microphone audio is streamed through our server to Google's Vertex AI Live API for processing. Google's service transcribes both sides of the conversation so the exchange can be shown on screen as you speak. Neither the audio nor the transcript is stored by SUM AI — they exist only for the duration of the session and are never written to our database.

Because a third party processes the audio, please do not say anything confidential or sensitive, and avoid using the assistant where other people can be overheard. Processing is subject to Google's Privacy Policy and the Google Cloud terms that apply to Vertex AI.

Third-party services

The following external services process data as part of normal site operation:

Cloudflare — Our site is served through Cloudflare's network. Cloudflare acts as a reverse proxy and processes all traffic passing through it, including IP addresses and request headers, under their own Privacy Policy.

Cloudflare Turnstile — The demo chat and contact form use Cloudflare Turnstile for bot prevention. Turnstile loads a script from challenges.cloudflare.com and may collect browser signals to distinguish humans from bots, subject to Cloudflare's Privacy Policy.

Google Fonts — This site loads the DM Sans typeface from Google's font CDN (fonts.googleapis.com, fonts.gstatic.com). Your browser makes a direct request to Google's servers to fetch the font files, which transmits your IP address to Google, subject to Google's Privacy Policy.

Google Vertex AI (Gemini) — The demo chat assistant and SUM AI Voice are powered by Google's Gemini models running on Google Cloud's Vertex AI platform. Messages you type in the demo chat, and audio you speak to SUM AI Voice, are transmitted to Google for processing, subject to Google's Privacy Policy. Do not share sensitive or confidential information with either assistant.

YouTube (Google) — One article on our blog contains a demo video hosted on YouTube. The video is not loaded when the page opens: we show a placeholder instead, and nothing is requested from Google unless you press play. If you do press play, the player is loaded from youtube-nocookie.com, Google's privacy-enhanced domain, and from that point YouTube receives your IP address and may store data on your device, subject to Google's Privacy Policy. If you never press play, no connection to YouTube is ever made.

Resend — We use Resend to deliver email notifications when you submit the contact form or complete the demo chat. Your name, email address, and message are transmitted to Resend's servers, subject to their Privacy Policy.

Where your data is processed

SUM AI operates from Vancouver, British Columbia. The service providers listed above (Cloudflare, Google, Resend) process data on servers located outside Canada, primarily in the United States. Personal information stored outside Canada may be accessible to foreign courts and law enforcement under the laws of that country. We remain accountable for personal information transferred to these providers and require them by contract to protect it.

How we protect your information

All traffic to this site is encrypted in transit with HTTPS. Access to the database and to the inbox that receives form submissions is restricted to the individual responsible for running SUM AI. Automated abuse prevention (Cloudflare Turnstile, rate limiting) sits in front of every endpoint that accepts input.

Cookies

We do not set any cookies of our own, and no consent banner is shown because we run no tracking or advertising technologies. Cloudflare Turnstile is loaded on pages with a form, the demo chat, or the voice assistant, and may set its own cookies for bot prevention depending on its configuration. The YouTube player described above can also store data on your device, but only after you choose to play the video.

Children's privacy

This site and its services are directed at businesses, not at children. We do not knowingly collect personal information from anyone who is not old enough to give meaningful consent under British Columbia's Personal Information Protection Act. If you believe a child has provided us with personal information, email us and we will delete it.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects when the most recent changes were made.

Your rights

Under British Columbia's Personal Information Protection Act you may:

  • Request access to the personal information we hold about you
  • Ask how that information has been and is being used
  • Ask for the names of any organizations to which it has been disclosed
  • Request that we correct information that is inaccurate or incomplete
  • Withdraw your consent, or ask us to delete information we no longer need

Email info@sumai.ca with "Privacy request" in the subject line. We respond within 30 days, as the Act requires. There is no charge for an access request.

Complaints

If you have a concern about how we handled your personal information, email our Privacy Officer at info@sumai.ca. We acknowledge complaints within 5 business days and provide a written response within 30 days. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca.

Contact

Privacy Officer
SUM AI — Vancouver, British Columbia, Canada
info@sumai.ca