Privacy Policy
Last updated: October 28, 2026
This policy explains how Summerbase ApS, CVR [CVR], Denmark (“Summerbase”, “we”) processes personal data as a data controller. It covers visitors to our website, people who sign up for or use Summerbase, contacts at our customers, potential customers we are in contact with, and people who open a report a customer has published at a link (a “shared view”).
Data our customers send us about their customers
Businesses that use Summerbase may send us data about their own customers (“end customers”), for example from Stripe. For that data, the business is the controller and Summerbase is its processor under our Data Processing Addendum, so this Privacy Policy does not apply to it.
If you are an end customer of a business that uses Summerbase, please contact that business about your data. If you contact us instead, we will forward your request to the business.
1. What we collect and why
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Account and support data, such as your name and email | Provide, secure and support your account | Contract; legitimate interests in supporting customers and managing customer relationships | While the account exists, and afterwards for as long as we need it to manage the customer relationship and to establish, exercise or defend legal claims |
| Security data, such as IP addresses and request logs | Protect our website and the Service against abuse, fraud and attacks | Legitimate interests in keeping our website and the Service secure | As long as required to prevent abuse and to investigate security issues |
| Billing details | Charge for subscriptions, meet accounting duties | Contract; legal obligation | At least 5 years, as required by Danish bookkeeping law |
| Website analytics | Improve our website and measure marketing | Legitimate interests in improving our website and measuring marketing; consent where cookies are used | As long as it helps us operate and improve the website and our marketing |
| Product usage analytics | Operate, secure and improve the Service | Legitimate interests in operating, securing and improving the Service; consent where cookies are used | As long as it helps us operate and improve the Service |
| Shared view analytics, collected without storing anything on viewers’ devices | Measure and improve shared views | Legitimate interests in measuring and improving shared views | As long as it helps us operate and improve the Service |
| Prospect data, such as your name, work email and company, from you or public sources | Contact potential customers about Summerbase and manage sales relationships | Legitimate interests in promoting Summerbase to businesses; consent where required for email marketing | As long as there is a realistic prospect of doing business with you |
You can opt out of product updates when you sign up, and of any of these emails at any time with the link in every email.
At the end of the retention periods we delete or anonymize the data, unless we need to keep it longer to comply with law or to establish, exercise or defend legal claims.
We do not collect full payment card numbers. Card payments for your Summerbase subscription are handled by Stripe.
2. Who we share data with
We share personal data with service providers who process it on our behalf under data processing agreements:
- Hosting and infrastructure
- Email and document storage
- Transactional email
- Customer support and email to account holders
- Customer relationship management
- Product analytics
- Internal communication
- Internal knowledge base and project management
- AI-assisted management of our customer accounts and automation of processes
- Payment processing for our own subscriptions; our payment provider, Stripe, also acts as an independent controller for some data, under its own privacy policy
- Accounting and bookkeeping
The providers in each category, with their legal entity and data location, are listed on our Sub-processors and service providers page.
We may also disclose data to professional advisers, to authorities where law requires, or to a buyer in a merger or acquisition. We do not sell personal data.
3. International transfers
Some providers process data in the United States. Where data leaves the European Economic Area, we rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission’s Standard Contractual Clauses with supplementary measures. You can request a copy of the relevant safeguards at support@summerbase.com.
Account data, meaning users, their names and email addresses, and organizations, is stored in the EU and copied to every region where we host the Service, including the United States, so that one sign-in works everywhere.
4. Your rights
Under the GDPR you can request access to, correction of, or deletion of your personal data. You can also object to processing based on legitimate interests, restrict processing, request data portability, and withdraw consent at any time. To exercise these rights, email support@summerbase.com. We respond within one month.
You can complain to the Danish Data Protection Agency (Datatilsynet) or to the authority where you live or work.
5. California and other US residents
If US state privacy laws apply to you, you have similar rights to know, correct and delete personal data. We do not sell or share personal data for cross-context behavioral advertising as those terms are defined under California law. Contact support@summerbase.com to make a request; we will not discriminate against you for doing so.
6. Security
We use encryption in transit and at rest, access controls, and logging to protect personal data. No system is completely secure; if a breach affects you, we will notify you and the authorities as the law requires.
7. Cookies
The web app uses cookies and similar storage to keep you signed in, for product analytics (PostHog), for support chat (Intercom), and to remember how you first found us. Shared views store nothing on visitors’ devices.
8. Changes
We will post updates here and notify account holders by email of material changes.
9. Contact
Summerbase ApS, Denmark. Email: support@summerbase.com.