Privacy Policy
Last Updated: May 30, 2026
1. Data Collection & Single Purpose
TurboSum has a single purpose: to provide instant AI-generated summaries of web content to help users conduct research and manage information efficiently. We collect information you provide, such as your email address, account authentication data, and usage data. When you initiate a summary, the browser extension collects the text content, title, and URL of the active tab only when you explicitly trigger the 'Summarize' action. This data is sent to our secure backend solely to generate the requested summary, provide account features such as quota and history, and support optional Read Aloud audio. For account security, fraud prevention, abuse prevention, and active-session limits, our backend may also process your IP address, User-Agent/browser details, browser language header, authentication/session identifiers, and a hashed coarse network/browser fingerprint derived from limited request metadata. This security/session information is not used for advertising. We do not store the original webpage content permanently.
2. Data Usage, Processors & Non-Disclosure
We use your data solely to generate requested summaries, provide History and Read Aloud features, manage account limits, improve reliability, and protect the service. Generated summaries, titles, source URLs, format metadata, and timestamps may be stored on our servers for authenticated history. The extension may also store your latest summary, preferences, authentication token, session identifier, and playback state locally using the chrome.storage API. To provide TurboSum, we may share the minimum necessary content and metadata with service providers acting on our behalf: Google Gemini/Google AI for AI summarization and media or video analysis; Amazon Web Services (AWS) for hosting, authentication, storage, logging, and backend services; Stripe for checkout, subscriptions, billing, and customer portal services; Microsoft text-to-speech services for optional Read Aloud audio; and YouTube or YouTube transcript providers when you ask TurboSum to process YouTube videos. Your uploaded content is not used to train global public AI models without your explicit consent. TurboSum's use of information received from Chrome extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. KYC Global Pte. Ltd. does not sell, rent, or trade your personal data or uploaded documents to third parties. Data is used exclusively to provide the core functionality of TurboSum. We do not use user data for creditworthiness, advertising targeting, or any purpose unrelated to content summarization.
3. Data Security & International Processing
We implement industry-standard security measures and encryption to protect your personal information during transmission. TurboSum uses cloud infrastructure and third-party service providers that may process or store data in countries where they operate, including outside your country of residence. If you use TurboSum from another country, your information may be transferred to and processed in countries with data protection laws different from those in your location. While no method of transmission is 100% secure, we prioritize the safety of your data above all else.
4. Retention, Deletion & User Rights
Authenticated history stores generated summaries, titles, source URLs, formats, and timestamps until you delete them or until TurboSum automatically prunes older entries beyond the latest 1,000 summaries for your account. You can delete individual summaries from the History page. Uploaded files are used only to process your request; TurboSum deletes uploaded file objects after processing and also applies a 24-hour automatic cloud storage expiration as a backstop. File-processing job metadata and temporary file results are configured for 24-hour automatic expiration, though deletion may not occur immediately. Operational service logs are retained for 30 days and are used for reliability, security, abuse prevention, and debugging; we do not intentionally log full uploaded files or full source text. Account records are kept while your account remains active and for a reasonable period afterward as needed for security, fraud prevention, dispute resolution, legal compliance, and backup integrity. Billing records and subscription metadata are handled by Stripe and may be retained as required for payment, tax, accounting, chargeback, and legal obligations. You may request access, export, correction, deletion of your summaries, deletion of your account, or other privacy assistance through the Contact page or by emailing support1@kycglobal.one. We may need to verify your identity and may retain limited records when required by law, payment obligations, or legitimate security needs.
5. Regional, Storage & Age Notices
UK Legal Basis
For users in the UK or other regions requiring a legal basis, TurboSum processes user data to perform the requested service, and uses legitimate interests for security, fraud prevention, abuse prevention, reliability, and quota/session enforcement.
Local Storage Disclosure
TurboSum uses chrome.storage only for login/session state, preferences, the latest summary, and playback state. These local storage elements are not used for cross-site behavioral tracking.
Taiwan Voluntary Data Notice
Providing your personal data and browser permissions is voluntary. If you do not provide account data or required browser permissions, TurboSum cannot generate summaries, provide History, or support Read Aloud.
Singapore Data Protection Officer (DPO)
Because KYC Global Pte. Ltd. is based in Singapore, privacy requests may be sent to our Data Protection Officer (DPO) at support1@kycglobal.one.
Singapore/UK International Transfer Safeguards
When personal data is transferred to overseas processors, TurboSum uses contractual, organizational, and technical safeguards where required to help protect personal data in accordance with applicable Singapore, UK, and local legal requirements.
Children's Privacy & Age Restrictions
TurboSum is not intended for children under 13. We do not knowingly collect, maintain, or process personal information from children under 13. If we learn that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete that information from our systems.