Privacy Policy

1. Who operates Sumline

Sumline is operated by Stephen Nyberg, an Australian sole trader (ABN 42 684 795 344), based in Queensland, Australia.

For any privacy, data-access or account request, email support@usesumline.com or use the contact form at https://usesumline.com/contact.

2. Information we collect

The categories below reflect what the current product actually collects and stores.

• Account and authentication information — your email address, the account identifier issued by our authentication provider, sign-in metadata, and, if you connect an AI assistant, the OAuth authorisation that links that assistant to your Sumline account.
• Profile and branding information — anything you choose to save for branded reports, such as your name, brokerage, phone, website, licence number, a headshot or logo you upload, and optional title/escrow co-branding details.
• Saved scenarios and reports — the calculator inputs and results you deliberately save to your account, share via a share link, or include in a generated PDF. Recent calculation snapshots and history are also kept locally in your browser's storage on the device you used.
• Calculation inputs — the figures you type into a calculator, or that an AI assistant sends to a Sumline tool on your instruction: sale or purchase price, mortgage payoff, interest rates, loan terms, rents, occupancy, property taxes, insurance, HOA and other fees, commission percentages and state/county assumptions.
• AI-assisted explanation content — where you use the optional seller-ready or buyer-ready explanation feature, the scenario figures used to generate the draft and the resulting explanation text are stored with that scenario so you can review, edit and approve it.
• Billing and subscription metadata — plan, status, renewal and invoice references received from our payment processor. Sumline never receives or stores full payment-card numbers; card details are entered with and handled by Stripe.
• Support and contact submissions — your name, email, message content and anti-spam verification data when you contact us; plus email delivery and unsubscribe state for messages we send you.
• Affiliate and referral attribution — if you arrive through an affiliate or referral link, the code is stored in your browser and, if you create an account, attached to that account; approved affiliates also have their application details and commission records stored.
• Cookies, local storage and analytics — your cookie-consent choice, product-usage and page-view analytics collected through Google Analytics 4 subject to that consent, and conversion measurement for advertising.
• API and AI-assistant usage metadata — for API keys and MCP tool calls we record which tool was called, the key or account identifier making the call, and timestamps, so we can enforce quotas and detect abuse.

Sumline does not need, request or want restricted personal data for calculations. Please do not enter client names, Social Security or tax file numbers, card or bank credentials, passwords, government identity documents or health information into calculator fields, scenario notes or support messages.

3. AI assistants and the Sumline MCP tools

You can connect Sumline to an external AI assistant (for example ChatGPT or Claude) so it can run Sumline calculations for you. This section explains exactly what that means for your data.

• When you connect an assistant, you sign in and authorise it. That authorisation identifies your Sumline account so we can apply your plan and quota. Sumline does not receive your assistant password.
• Sumline receives only the calculation inputs the assistant sends to a Sumline tool. Sumline does not receive your wider conversation, your other chats, files or assistant history.
• Those calculation inputs are processed to produce the requested result and returned to the assistant that asked for them. We do not store the input figures in our usage logs; those logs record which tool was called, the identifier of the key or account that called it, and when.
• The AI assistant provider receives the result, because it is the service making the call on your behalf. What that provider does with the conversation, the inputs you typed and the results is governed by that provider's own privacy policy and terms, not this one.
• Some Sumline tool results include a link that opens the same scenario in the Sumline web calculator. That link contains the scenario figures encoded in the URL. Treat prefilled and shared links as containing the scenario's financial details and share them only with people you intend to see them.

You can disconnect Sumline at any time from your AI assistant's connector or integration settings, and you can delete API keys from your Sumline dashboard.

4. Why we use your information

• To run the calculators and produce results, reports, PDFs and share pages you request.
• To authenticate you and keep your saved work available across your devices.
• To process subscriptions and one-off purchases and apply the correct plan entitlements.
• To provide support and respond to messages you send us.
• To enforce API and AI-assistant quotas and to prevent abuse, fraud and security incidents.
• To monitor reliability, diagnose errors and understand which features are used, subject to your cookie-consent choice.
• To operate the affiliate and referral programs where you take part in them.
• To meet legal, tax and accounting obligations.

5. Who else processes your information

We do not sell personal information and we do not share it for third-party advertising profiling. We use the following categories of service provider to run Sumline:

• Hosting, database, file storage and authentication infrastructure (Supabase and our application hosting provider).
• Payment processing and subscription billing (Stripe).
• Transactional and support email delivery.
• Analytics and advertising conversion measurement (Google Analytics 4 and Google Ads), applied according to your cookie-consent choice.
• Bot and spam protection on the contact form (Cloudflare Turnstile).
• An AI model gateway used only to draft the optional report explanations you request.
• Mapping and address-lookup services used when you use the optional property address search.
• The external AI assistant you deliberately connect and instruct to call Sumline tools.

We may also disclose information where we are legally required to, or to establish or defend legal claims.

6. How long we keep information

Sumline does not currently run an automated purge schedule for most categories. Rather than quote a deletion period we do not enforce, here is what actually happens today:

• Account, profile and branding information — kept while your account exists, and deleted when you ask us to delete your account.
• Saved scenarios, shared reports and stored explanations — kept until you delete them or ask us to delete your account. There is no automatic expiry. Locally stored calculation history stays in your browser until you clear it or clear your browser storage.
• Calculation inputs sent by an AI assistant — processed to return the result and not retained as a stored record of the figures.
• API and MCP usage and quota records — retained on an ongoing basis to enforce quotas, investigate abuse and support billing questions. There is currently no fixed automatic deletion period.
• Billing and accounting records — retained by us and by our payment processor for as long as required for tax, accounting and legal purposes.
• Support and contact messages, and email delivery/unsubscribe records — kept while needed to handle your request, keep a record of the exchange and honour your unsubscribe choice.
• Backups — infrastructure backups held by our hosting provider may retain copies for a limited period after deletion, and are overwritten on that provider's own cycle.

If you need a specific retention period for a compliance requirement, contact us and we will tell you what is technically in place at that time.

7. Your controls and rights

• Delete saved scenarios yourself from your Sumline dashboard.
• Clear locally stored calculation history by clearing your browser storage for this site.
• Create and delete API keys from your dashboard.
• Disconnect a connected AI assistant from that assistant's connector settings, and delete the related Sumline key where you created one.
• Update your cookie choice at any time using the cookie preferences control.
• Unsubscribe from non-essential email using the link in those emails.
• Cancel a paid subscription from your dashboard, which stops future renewals.
• Request access to, correction of, or deletion of your personal information, including full account deletion, by emailing support@usesumline.com. Depending on where you live you may have additional rights under applicable privacy law, and you may complain to your local privacy regulator.

8. Security, international processing and children

We use access controls, row-level database security, encrypted connections and hashed API keys, and we limit who can access production data. No online service can promise perfect security, and we cannot guarantee that a transmission or storage system will never be compromised.

Sumline is operated from Australia and serves users in the United States. Our service providers may store and process information in countries other than your own, including the United States and Australia.

Sumline is intended for business and professional users and is not directed to children. If you believe a child has provided personal information to Sumline, contact us and we will review and delete it where appropriate.

9. Changes to this policy

We may update this policy as the product changes. The date at the top of this page shows when it was last updated, and material changes will be surfaced in the application. Questions go to support@usesumline.com.