Privacy Policy

Introduction

PODSUMI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our trend intelligence and creator analytics platform.

By using the Service, you consent to the collection, processing, transfer, and storage of your data as described in this Privacy Policy.

Legal Basis for Processing

We process data under the following legal bases:

• Legitimate Interest: We process publicly available data for analytics and trend reporting under legitimate interest, as this data is already public and our processing does not adversely affect data subjects.
• Contract Performance: We process your account information to provide our services as agreed when you create an account.
• Consent: Where required, we obtain explicit consent before processing (e.g., when you add creators to track).

Platform Scope

Podsumi analyzes publicly available information only from platforms where such aggregation is permitted.

We do not collect or analyze data from:

• Meta platforms (including Instagram and Facebook)
• Other platforms that restrict third-party analytics without explicit user authorization

We respect platform restrictions and only operate where public aggregation is permitted. This policy reflects our commitment to ethical data practices, not temporary limitations.

Information We Collect

Account Information

When you create an account, we collect:

• Username and password (passwords are securely hashed)
• Optional profile information (display name, bio, location)
• Your linked social media handle (if you choose to link your profile)
• Your creator tracking preferences

Public Creator Data

For creators you track (including your own profile if linked), we collect publicly available information only:

• Public profile information (name, bio, follower/following counts)
• Public engagement metrics (likes, comments, shares, views)
• Public post/video metadata

Important: We do not access private accounts, direct messages, or any content that requires special permissions beyond public access. We do not track private accounts and you must ensure profiles added are public.

Comment Data

For your own linked profile only, we may analyze public comments for sentiment. This analysis is aggregated and we do not permanently store comment author identifiers. For profiles you "watch" (market research), we do not collect individual comments.

Trend Data

We collect aggregated, publicly available trend data including hashtags, sounds, and content formats from social media platforms.

How We Use Information

• Provide analytics and insights for profiles you own or choose to link
• Identify trending topics, sounds, and content formats
• Generate AI-powered content recommendations and guidance
• Calculate engagement metrics and aggregated sentiment scores
• Maintain and improve our services

AI and Automated Analysis

We use artificial intelligence to analyze public data and generate insights. This includes:

• Sentiment Analysis: Analyzing public comments at an aggregated level to determine overall sentiment trends
• Content Recommendations: Generating suggestions for content creation based on trends
• Format Detection: Identifying content formats and styles
• Performance Predictions: Estimating potential engagement based on publicly available data

Important: All AI-generated insights, predictions, and recommendations are informational only and based on publicly available data. They are not definitive, authoritative, or guaranteed. These outputs do not constitute professional advice. Always verify important decisions with official platform analytics.

Creator Tracking Disclosure

When you add a creator to your watchlist (market research):

• Only publicly available, aggregated data is collected
• Individual comments are not collected for watched creators
• The creator is not proactively notified; however, creators may request information or removal at any time
• Data is visible only to your account
• You are responsible for using this data ethically and legally

By adding creators, you confirm they are public accounts or accounts intended for public viewing. You must not add private accounts. Users are solely responsible for profiles they add and must ensure legal compliance. Profile owners can request removal without needing an account by contacting us directly.

Data Retention

• Account Data: Retained until you request deletion
• Creator Metrics: Current data refreshed regularly; historical data retained for up to 90 days, then anonymized or deleted
• Trend Data: Retained for up to 30 days for trend analysis
• Cached Data: Temporary caches cleared within 24 hours

Historical data beyond 90 days is anonymized or deleted unless you choose to export it.

Your Rights

You have the right to:

• Access: Request a copy of your account data
• Correction: Update or correct your account information
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable format
• Opt-out: Remove creators from your watchlist or delete your account
• Object: Object to processing based on legitimate interest

To exercise these rights, contact us using the information below or visit our account deletion page.

For Creators Being Monitored

If you are a creator and believe your public data is being displayed on our platform, you have the right to:

• Request information about what data we have collected
• Request removal of your data from our platform without needing an account

Note: We only collect publicly available information. Making your social media profile private will prevent future data collection. To request removal, contact us at [email protected] with your public profile handle.

Cookies and Tracking Technologies

We use cookies and similar technologies to provide and improve our services. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use

• Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled without affecting service operation.
  • session_token - Authentication session (expires on logout or after 30 days)
  • csrf_token - Security token (session-based)
• Functional Cookies: Remember your preferences and settings.
  • theme - Your display preference (persistent)
  • lastVisit - Last visit timestamp for notifications (persistent)
• Analytics Cookies: Help us understand how our service is used to improve user experience. These are anonymized and aggregated.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies will prevent you from logging in and using core features.

We do not use cookies for advertising or cross-site tracking purposes.

Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure password hashing, and access controls. However, no method of transmission over the Internet is 100% secure.

Third-Party Services

We use the following third-party services:

• Vercel: Hosting and infrastructure
• AI Services: For generating content insights and recommendations

We do not sell your personal data to third parties. Data collected and processed is governed by this Privacy Policy; use of public data does not imply consent or endorsement by any third-party platform.

International Data Transfers

PODSUMI is operated from Poland within the European Union. Our services may use infrastructure located in various countries, including the United States. By using our services, you consent to the transfer, processing, and storage of your information in these locations, which may have different data protection laws than your country of residence.

Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

European Users (GDPR)

If you are located in the European Economic Area, you have additional rights under GDPR including the right to lodge a complaint with your local supervisory authority. For users in Poland, this is the President of the Personal Data Protection Office (UODO). We process your data under legitimate interest or consent as described above.

California Users (CCPA)

California residents have specific rights under CCPA, including the right to know what personal information is collected, request deletion, and opt-out of sale (we do not sell personal information). Contact us to exercise these rights.

Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

For privacy inquiries, data requests, or to exercise your rights, contact us at [email protected] or visit Konrad.app.