Privacy Policy

Last updated: January 2026

Overview

T&C Summarizer ("we", "our", "us") is a Chrome extension that helps users understand legal documents by providing AI-generated summaries. We are committed to protecting your privacy and being transparent about our data practices.

What We Collect

✓ What we DO collect:

  • Your email address (for account creation and login)
  • Subscription status (free or paid)
  • Aggregated usage counts (number of summaries per month)

✕ What we do NOT collect:

  • Your browsing history
  • The content of pages you visit
  • Personal documents or files
  • Cookies from other sites

How Summaries Work

When you hover over a legal link, the extension:

  1. Fetches the content of the linked page directly from your browser
  2. Extracts the text content
  3. Sends the text to our secure server for AI processing
  4. Returns the summary to display in the popup

Important: The text is processed in real-time and is not storedon our servers. We do not build profiles of your browsing activity.

Data Storage

We use Supabase (hosted in the EU) to store:

  • User accounts (email, hashed password)
  • Subscription information (plan, status)
  • Monthly usage counters (reset each month)

Cached summaries are stored locally in your browser and never sent to our servers.

Third-Party Services

We use the following third-party services:

  • OpenAI: For AI text summarization. Text is processed according to OpenAI's API terms.
  • Supabase: For authentication and database (EU region).
  • Stripe: For payment processing. We do not store your card details.

Your Rights

Under GDPR and UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Withdraw consent at any time

To exercise these rights, contact us at privacy@tc-summarizer.com

Data Retention

Account data is retained while your account is active. Usage counters are reset monthly and previous months' data is deleted. When you delete your account, all associated data is permanently removed within 30 days.

Security

We use industry-standard security measures including:

  • HTTPS encryption for all data in transit
  • Encrypted database storage
  • JWT tokens for authentication
  • Row-level security policies

Children's Privacy

T&C Summarizer is not intended for children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or through the extension. Continued use after changes constitutes acceptance.

Contact Us

For privacy-related questions or concerns, contact us at: privacy@tc-summarizer.com