Summary

We promise to protect you and your personal data at all times. Read on for the full vows.

Preamble

Strategy Pi, Inc. (“us”, “we”, or “our”) operates the https://usesummit.com website (hereinafter referred to as “Summit”).

This page informs you of our policies regarding the collection, use and disclosure of personal data when you use Summit and the choices you have associated with that data.

We use your data to provide and improve Summit. By using the Summit, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from https://usesummit.com.

Summit will collect certain non-personally identifiable information about you as you use our sites. We may use this data to better understand our users. We can also publish this data in an aggregated, de-identified, and anonymized data set, and the data set will not contain your personally identifiable information. We may also collect certain personal information about you and your use of the Summit (as defined herein) which may be published and used in the aggregate as set forth in this Privacy Policy.

We will also ask you to provide personal information, and if you choose to provide us information, it will be completely voluntary and you have the right to opt-out at any time. If you give us personal information, we won’t do anything evil with it.

We can also use cookies, but you can choose not to store these.

Summit may link to or provide generative artificial intelligence or large language models. As discussed more below, Summit will never share personal information to train a generative AI or large language model.

That’s the basic idea, but you must read through the entire Privacy Policy below and agree with all the details before you use any of our sites.

Reuse

This document is based upon the Automattic Privacy Policy and is licensed under Creative Commons Attribution Share-Alike License 2.5 and updated to fit Summit’s privacy and data security practices. Basically, this means you can use it verbatim or edited, but you must release new versions under the same license and you have to credit Automattic somewhere (like this!). Automattic is not connected with and does not sponsor or endorse Summit or its use of the work.

Summit makes available services include our web sites (https://usesummit.com (the “Site”)), our blog, our API, and any other software, sites, and services offered by Summit in connection to any of those (taken together, the “Service”). It is Summit’s policy to respect your privacy regarding any information we may collect while operating our Site.

Questions

If you have question about this Privacy Policy, please contact us at [email protected].

Visitors

Like most website operators, Summit collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Summit’s purpose in collecting non-personally identifying information is to better understand how Summit’s visitors use its website. From time to time, Summit may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.

Summit also collects potentially personally-identifying information like Internet Protocol (IP) addresses. Summit does not use such information to identify its visitors, however, and does not disclose such information, other than under the same circumstances that it uses and discloses personally-identifying information, as described below. We may also collect and use IP addresses to block users who violated our Terms of Service.

Gathering of Personally-Identifying Information

Certain visitors to Summit’s websites choose to interact with Summit in ways that require Summit to gather personally-identifying information. The amount and type of information that Summit gathers depends on the nature of the interaction. Summit collects such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with Summit. Summit does not disclose personally-identifying information other than as described below. And visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain Service-related activities.

Additionally, some interactions, such as posting a comment, may ask for optional personal information. For instance, when posting a comment, may provide a website that will be displayed along with a user’s name when the comment is displayed. Supplying such personal information is completely optional and is only displayed for the benefit and the convenience of the user.

Aggregated Statistics and Third Party Analytics Providers

Summit may collect statistics about the behavior of visitors to and users of the Service. For instance, Summit may monitor the most popular parts of the Summit Site. Summit may display this information in the aggregate publicly or provide it to others.

In addition, Summit may, from time to time, collect certain personal information from you, your use of the Services, and/or the users of your website, such as your user churn rate, your financial data and revenue, your conversation rates and other metrics (your “Data”). Summit may publish and display your Data in the aggregate to the public through our Site or on our blog, e.g. by publishing a report on average churn rates on the Site. However, all Data is only used and published in the aggregate which means that any published Data will not identify you, your website, your company or your users, or link you to the published information in any way. If you wish to opt out of the publication of your Data, please contact us as [email protected].

Summit may also use third party analytics providers and products, such as Amazon (collectively, “Third Party Providers”), to obtain, compile and analyze information (that may include personally-identifying information) about how users are using and interacting with Summit and/or the Services. Such information is compiled in the aggregate and anonymized (i.e. the aggregated data will not personally identify users in any way) and provided to Third Party Providers for analytics purposes only (e.g. obtaining statistics and other information about how users are using and interacting with Summit). These Third Party Providers may use a variety of established or new technologies or tools (including, without limitation, cookies, web beacons, HTTP cache, local shared objects and persistent identifiers) to recognize your computer or device and/or to collect or compile this information. You understand and acknowledge that Summit has no control over the technologies, tools or practices of the Third Party Providers providing analytics products and services to Summit.

Summit does not disclose personally-identifying information other than as described below.

Protection of Certain Personally-Identifying Information

Summit discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organizations that (i) need to know that information in order to process it on Summit’ behalf or to provide services available at Summit’ Site websites, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using the Service, you consent to the transfer of such information to them. Summit will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, Summit discloses potentially personally-identifying and personally-identifying information only when required to do so by law, or when Summit believes in good faith that disclosure is reasonably necessary to protect the property or rights of Summit, third parties or the public at large. If you are a registered user of the Service and have supplied your email address, Summit may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with Summit and our products. We primarily use our website and blog to communicate this type of information, so we expect to keep this type of email to a minimum. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. Summit takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally- identifying and personally-identifying information.

Generative AI

As further discussed in our Terms of Service, available at https://usesummit.com/terms-of- service, the Services may include or provide access to third party products that provide certain generative artificial intelligence or large language models (“Generative AI Products”). You acknowledge that different terms of use and privacy policies may apply to your use of such Generative AI Products and that such terms and policies are solely between you and other party. Summit will not share your personal information collected by Summit with a Generative AI Product and the personal information you provide to Summit will never be used to train a Generative AI model. Please does note that you may transfer, disclose, or otherwise make available personally identifiable information or other data directly to a Generative AI Product, but you do so at your own risk and pursuant to the agreement between you and the applicable third party.

Cookies

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the Service each time the visitor returns. Summit uses cookies to help Summit identify and track visitors, their usage of Summit Service, and their Service access preferences. Summit visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using Summit’s websites, with the drawback that certain features of Summit’s websites may not function properly without the aid of cookies.

Behavioural Analytics

From time to time and solely for the purpose of improving the user interface and user experience of the product hosted on usesummit.com, Summit may capture non-personal, non-identifiable session information through behavioral (event) tracking. In accordance the whole of this privacy policy, such tracking will never contain information entered into forms, including but not limited to names, email addresses, and passwords.

Business Transfers

If Summit, or substantially all of its assets, were acquired, or in the unlikely event that Summit goes out of business or enters bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Summit may continue to use your personal information as set forth in this policy.

Data Storage

Summit uses third party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run the Service. You understand that although you retain full rights to your data, it may be stored on third party storage and transmitted through third party networks.

Privacy Policy Changes

Although most changes are likely to be minor, Summit may change its Privacy Policy from time to time, and in Summit’s sole discretion. Summit encourages visitors to frequently check this page for any changes to its Privacy Policy.

Capitalized terms are defined in Section 12 (XII) of this Policy.

By using this Website, placing an order with Summit on this Website or through other means, clicking the “buy” button, or checking the terms and conditions box, you agree to the Summit Terms and Conditions set forth below, including, without limitation, the Privacy Policy https://usesummit.com/privacy.

I. SCOPE

This Policy applies to the processing of Individual Customer Personal Data that Summit receives in the United States concerning Individual Customers who reside in the European Union and Switzerland. Summit provides products and services to businesses and consumers.

This Policy does not cover data from which individual persons cannot be identified or situations in which pseudonyms are used. (The use of pseudonyms involves the replacement of names or other identifiers with substitutes so that identification of individual persons is not possible.)

II. RESPONSIBLITIES AND MANAGEMENT

ummit will maintain, monitor, test, and upgrade information security policies, practices, and systems to assist in protecting the Personal Data that it collects. Summit personnel will receive training, as applicable, to effectively implement this Policy. Please refer to Section 7 for a discussion of the steps that Summit has undertaken to protect Personal Data.

Summit will prepare an internal verification statement on an annual basis.

III. COLLECTION AND USE OF PERSONAL DATA

Summit provides various solutions to its Individual Customers who purchase or use its products. Summit collects Personal Data from Individual Customers when they purchase its products, register with our website, log-in to their account, complete surveys, generate results via hosted or embedded app, request information or otherwise communicate with us. For example, Summit individual customers may choose to seek live support or post to a message board.

The Personal Data that we collect may vary based on the Individual Customer’s interaction with our website and request for our services. As a general matter, Summit collects the following types of Personal Data from its Individual Customers: contact information, including, a contact person’s name, work email address, work mailing address, work telephone number, title, and company name, as well as payment information (which might include credit card and/or bank account information). Individual customers have the option to log into their accounts online or to request service online, including through a live support option; we will collect information that they choose to provide to us through these portals.

When Individual Customers use our services online, we will collect their IP address and browser type. We may associate IP address and browser type with a specific customer. We also may collect Personal Data from persons who contact us through our website to request additional information; in such a situation, we would collect contact information (as discussed above) and any other information that the person chooses to submit through our website.

The information that we collect from Individual Customers is used for selling the products and services they buy from us, managing transactions, reporting, invoicing, renewals, other operations related to providing services and products to the Individual Customer.

For certain products, Summit serves as a service provider. In our capacity as a service provider, we will receive, store, and/or process Personal Data. In such cases, we are acting as a data processor and will process the personal information on behalf of and under the direction of our partners and/or agents. The information that we collect from our Individual Customers in this capacity is used for managing transactions, reporting, invoicing, renewals, other operations related to providing services to the Individual Customer, and as otherwise requested by our partner and/or agent.

Summit uses Personal Data that it collects directly from its Individual Customers and for its partners indirectly in its role as a service provider for the following business purposes, without limitation:

• Maintaining and supporting its products, delivering and providing the requested products/services, and complying with its contractual obligations related thereto (including managing transactions, reporting, invoices, renewals, lead capture, and other operations related to providing services to a Individual Customer);
• Satisfying governmental reporting, tax, and other requirements (e.g., import/export);
• Storing and processing data, including Personal Data, in computer databases and servers located in the United States;
• Verifying identity (e.g., for online access to accounts);
• As requested by the Individual Customer;
• For other business-related purposes permitted or required under applicable local law and regulation;
• And as otherwise required by law.

Summit does not disclose personal information to third parties for purposes that are materially different than what it was originally collected for. Should this change in the future, we will provide individuals with the option to opt-out.

IV. DISCLOSURES/ ONWARD TRANSFERS OF PERSONAL DATA

Except as otherwise provided herein, Summit discloses Personal Data only to Third Parties who reasonably need to know such data only for the scope of the initial transaction and not for other purposes. Such recipients must agree to abide by confidentiality obligations.

Summit may provide Personal Data to Third Parties that act as agents, consultants, and contractors to perform tasks on behalf of and under our instructions. For example, Summit may store such Personal Data in the facilities operated by Third Parties. Such Third Parties must agree to use such Personal Data only for the purposes for which they have been engaged by Summit and they must agree to provide adequate protections for the Personal Data that are no less protective than those set out in this Policy.

Summit also may disclose Personal Data for other purposes or to other Third Parties when a Data Subject has consented to or requested such disclosure. Please be aware that Summit may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements. Summit is liable for appropriate onward transfers of personal data to third parties.

V. SENSITIVE DATA

Summit does not collect Sensitive Data from its Individual Customers.

VI. DATA INTEGRITY AND SECURITY

Summit uses reasonable efforts to maintain the accuracy and integrity of Personal Data and to update it as appropriate. Summit has implemented physical and technical safeguards to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alternation, or destruction. For example, electronically stored Personal Data is stored on a secure network with firewall protection, and access to Summit’s electronic information systems requires user authentication via password or similar means. Summit also employs access restrictions, limiting the scope of employees who have access to Individual Customer Personal Data.

Further, Summit uses secure encryption technology to protect certain categories of personal data. Despite these precautions, no data security safeguards guarantee 100% security all of the time.

VII. ACCESSING PERSONAL DATA

Summit personnel may access and use Personal Data only if they are authorized to do so and only for the purpose for which they are authorized.

VIII. RIGHT TO ACCESS, CHANGE OR DELETE PERSONAL DATA

• Right to Access. Individual Customers have the right to know what Personal Data about them is included in the databases and to ensure that such Personal Data is accurate and relevant for the purposes for which Summit collected it. Individual Customers may review their own Personal Data stored in the databases and correct, erase, or block any data that is incorrect, as permitted by applicable law and Summit policies. Upon reasonable request, Summit allows Individual Customers access to their Personal Data, in order to correct or amend such data where inaccurate. Individual Customers may edit their Personal Data by logging into their account profile or by contacting Summit by phone or email. In making modifications to their Personal Data, Data Subjects must provide only truthful, complete, and accurate information. To request erasure of Personal Data, Individual Customers should submit a written request to local Summit office.
• Requests for Personal Data. Summit will track each of the following and will provide notice to the appropriate parties under law and contract when either of the following circumstances arise: (a) legally binding request for disclosure of the Personal Data by a law enforcement authority unless prohibited by law or regulation; or (b) requests received from the Data Subject. If Summit receives a request for access to their Personal Data from an Individual Customer, then, unless otherwise required under law or by contract with such Individual Customer, Summit will refer such Data Subject to the Individual Customer.
• Satisfying Requests for Access, Modifications, and Corrections. Summit will endeavor to respond in a timely manner to all reasonable written requests to view, modify, or inactivate Personal Data.

IX. CHANGES TO THIS POLICY

This Policy may be amended from time to time, consistent with applicable data protection and privacy laws and principles. We will make employees available of changes to this policy either by posting to our intranet, through email, or other means. We will notify Customers if we make changes that materially affect the way we handle Personal Data previously collected, and we will allow them to choose whether their Personal Data may be used in any materially different manner.

X. QUESTIONS OR COMPLAINTS

EU and Swiss Individual customers may contact Summit with questions or complaints concerning this Policy at the following address:

[email protected]

XI. ENFORCEMENT AND DISPUTE RESOLUTION

Summit commits to resolve complaints about your privacy and our collection or use of your personal information. EU and Swiss individuals with questions or concerns about the use of their Personal Data should contact us at: [email protected].

XII. DEFINED TERMS

Capitalized terms in this Privacy Policy have the following meanings:

“Individual Customer” means an Individual customer or client of Summit from EU or Switzerland. The term also shall include any individual agent, representative, of an individual customer of Summit and all employee of Summit where Summit has obtained his or her Personal Data from such Individual Customer as part of its business relationship with Summit.

“Data Subject” means an identified or identifiable natural living person. An identifiable person is one who can be identified, directly or indirectly, by reference to a name, or to one or more factors unique to his or her personal physical, psychological, mental, economic, cultural or social characteristics. For Customers residing in Switzerland, a Data Subject also may include a legal entity.

“Employee” means an employee (whether temporary, permanent, part-time, or contract), former employee, independent contractor, or job applicant of Summit or any of its affiliates or subsidiaries, who is also a resident of a country within the European Economic Area.

“Europe” or “European” refers to a country in the European Union.

“Personal Data” as defined under the European Union Directive 95/46/EC means data that personally identifies or may be used to personally identify a person, including an individual’s name in combination with country of birth, marital status, emergency contact, salary information, terms of employment, job qualifications (such as educational degrees earned), address, phone number, e-mail address, user ID, password, and identification numbers. Personal Data does not include data that is de-identified, anonymous, or publicly available. For Switzerland, the term “person” includes both a natural person and a legal entity, regardless of the form of the legal entity.

“Sensitive Data” means Personal Data that discloses a Data Subject’s medical or health condition, race or ethnicity, political, religious or philosophical affiliations or opinions, sexual orientation, or trade union membership.

“Third Party” means any individual or entity that is neither Summit nor an Summit employee, agent, contractor, or representative.