Privacy Policy

1. Data Collection & Single Purpose

TurboSum has a single purpose: to provide instant AI-generated summaries of web content to help users conduct research and manage information efficiently. TurboSum is currently focused on users in Singapore, Taiwan, Malaysia, the Philippines, the United Arab Emirates, and India, though users in other locations may be able to access the service unless access is otherwise restricted. We collect information you provide, such as your email address, account authentication data, and usage data. When you initiate a summary, the browser extension collects the text content, title, and URL of the active tab only when you explicitly trigger the 'Summarize' action. This data is sent to our secure backend solely to generate the requested summary, provide account features such as quota and history, and support optional Read Aloud audio. For account security, fraud prevention, abuse prevention, and active-session limits, our backend may also process your IP address, User-Agent/browser details, browser language header, authentication/session identifiers, and a hashed coarse network/browser fingerprint derived from limited request metadata. This security/session information is not used for advertising. We do not store the original webpage content permanently.

2. Data Usage, Processors & Non-Disclosure

We use your data solely to generate requested summaries, provide History and Read Aloud features, manage account limits, improve reliability, and protect the service. Generated summaries, titles, source URLs, format metadata, and timestamps may be stored on our servers for authenticated history. The extension may also store your latest summary, preferences, authentication token, session identifier, and playback state locally using the chrome.storage API. To provide TurboSum, we may share the minimum necessary content and metadata with service providers acting on our behalf: Google and Amazon account sign-in services when you choose optional social login; Google Gemini/Google AI for AI summarization and media or video analysis; Amazon Web Services (AWS) for hosting, authentication, storage, logging, and backend services; Stripe for checkout, subscriptions, billing, and customer portal services; Microsoft text-to-speech services for optional Read Aloud audio; and YouTube or YouTube transcript providers when you ask TurboSum to process YouTube videos. Your uploaded content is not used to train global public AI models without your explicit consent. TurboSum's use of information received from Chrome extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. KYC Global Pte. Ltd. does not sell, rent, or trade your personal data or uploaded documents to third parties. Data is used exclusively to provide the core functionality of TurboSum. We do not use user data for creditworthiness, advertising targeting, or any purpose unrelated to content summarization.

3. Data Security & International Processing

We implement industry-standard security measures and encryption to protect your personal information during transmission. TurboSum uses cloud infrastructure and third-party service providers that may process or store data in countries where they operate, including outside your country of residence. If you use TurboSum from another country, your information may be transferred to and processed in countries with data protection laws different from those in your location. While no method of transmission is 100% secure, we prioritize the safety of your data above all else.

4. Retention, Deletion & User Rights

Authenticated history stores generated summaries, titles, source URLs, formats, and timestamps until you delete them or until TurboSum automatically prunes older entries beyond the latest 1,000 summaries for your account. You can delete individual summaries from the History page. Uploaded files are used only to process your request; TurboSum deletes uploaded file objects after processing and also applies a 24-hour automatic cloud storage expiration as a backstop. File-processing job metadata and temporary file results are configured for 24-hour automatic expiration, though deletion may not occur immediately. Operational service logs are retained for 30 days and are used for reliability, security, abuse prevention, and debugging; we do not intentionally log full uploaded files or full source text. Account records are kept while your account remains active and for a reasonable period afterward as needed for security, fraud prevention, dispute resolution, legal compliance, and backup integrity. Billing records and subscription metadata are handled by Stripe and may be retained as required for payment, tax, accounting, chargeback, and legal obligations. You may request access, export, correction, deletion of your summaries, deletion of your account, or other privacy assistance through the Contact page or by emailing support@kycglobal.one. We may need to verify your identity and may retain limited records when required by law, payment obligations, or legitimate security needs.

5. Target Market, Storage & Age Notices