Summer's Security and Privacy Information

Last Updated: June 6, 2025

This is the privacy notice (“Privacy Notice”) for Summer AI Limited (“Summer,” “we,” “our,” or “us”). It explains how we collect, use, disclose, and protect personal information through use of

  1. Our AI phone receptionist to answer or make calls and manage interactions on behalf of businesses (the “AI Receptionist”);

  2. A Subscriber dashboard, software, and applications integrated with a Subscriber’s existing systems (collectively, the “Application”);

  3. heysummer.com and other websites or online channels we own or operate (collectively, the “Site”). Together, these elements are referred to as the “Services.”

Please read this Privacy Notice carefully to understand how we collect and use personal information. By using our Services, you agree to this Privacy Notice. If you do not agree with this Privacy Notice, do not access or use our Services.

This Privacy Notice does not apply to our Subscribers’ collection or use of Personal Information through our Services or otherwise. Callers should contact the business they called for privacy support.

We may update this Privacy Notice from time to time. We will notify you about material changes to this Privacy Notice through the Services or by email and will collect your consent to these changes if required by law. Subscribers and prospective Subscribers may contact us with questions at support@heysummer.com.

  1. Subscribers and Callers

This Privacy Notice does not apply to data collected by a third party, including the subscribing businesses and individuals that use an AI Receptionist to answer or make calls or perform other Services on their behalf (our “Subscribers”). Summer provides the Services to our Subscribers, and each Subscriber determines how it will use the data collected from their Callers and other customers through the Services. Any processing of data by Summer to train or develop AI technologies is governed by contracts with our Subscribers, not this Privacy Notice.

Subscribers that use the AI Receptionist may choose to collect and process Personal Information about their Callers or other customers. Each Subscriber is responsible for their own Personal Information collection and storing or processing that data on the Services. This includes AI Receptionist functionality, privacy settings, data management, giving notice and obtaining consent from Callers, and responding to Callers’ privacy inquiries. Callers should contact the Subscriber with any questions about their Personal Information on the Services.

  1. “Personal Information” Defined

As used in this Privacy Notice, “Personal Information” is information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual consumer or device, such as:

  1. Identifiers (e.g., name, email, telephone number, address, username);

  2. Sensitive Personal Information (e.g., biometrics like voice recordings, precise geolocation, health information, contents of messages when we are not the recipient; in some cases, information about a known child);

  3. Legally protected information (e.g., race, citizenship, marital status, sex);

  4. Employment-related information (e.g., current or past employment);

  5. Non-public educational information, including information protected under FERPA

  6. Commercial information (e.g., products or services purchased, obtained, or considered);

  7. Internet or similar activity (e.g., browsing history, content interactions);

  8. Inferences drawn from Personal Information to create a profile.

Information may not be protected by privacy laws if it is: (i) publicly available, (ii) aggregated, or (iii) deidentified.

  1. Summer’s Collection and Use of Personal Information

Summer collects, uses, retains, and discloses Personal Information as reasonably necessary to provide the Services.


  1. Collected from our Subscribers:
    • Business identifiers, contact details, and account setup information;
    • Communications with Summer regarding the Services;
    • CRM, calendar, and other integrated system data as authorized by the Subscriber;
    • Usage data for analytics and support;
    • Marketing preferences and communications.


  2. Collected from Callers on behalf of a Subscriber:
    • Caller ID, name, phone number, and message contents;
    • Appointment details and related communications;
    • SMS communications as instructed by the Subscriber;
    • Voice data to process requests and assess interaction context.


  3. Call Recordings and Transcripts:
    • Used for quality assurance, functionality (e.g., appointment setting), and AI training;
    • Controlled by the Subscriber;
    • Caller consent obtained via call notification;
    • Retained as per Subscriber configuration.

    Summer does not process payments directly. We use PCI-DSS compliant third-party payment processors.


  4. Children’s Privacy:
    • Services are not intended for children under 16;
    • Subscriber is responsible for any interaction with children;
    • We delete information from minors upon discovery.

  1. Your Communications with Summer

We collect Personal Information to respond to inquiries, provide product details, and communicate with Subscribers. This includes:

  1. Contact forms and email inquiries;

  2. Marketing communications, subject to opt-out preferences;

  3. Site visit and cookie-based data collection.

  1. Disclosing Personal Information

Summer discloses Personal Information to:

  1. Subscribers (as controllers of Caller data);

  2. Service providers (e.g., hosting, analytics, telephony);

  3. Legal entities where required;

  4. Successors in case of business transition;

  5. No sale or sharing of Caller data for marketing.

Aggregated or deidentified information may be used to improve our Services.

  1. Retention of Personal Information

Summer retains:

  1. Caller data per Subscriber configuration or 30 days after termination;

  2. Subscriber account data during service and 30 days after cancellation;

  3. Marketing data until opt-out or inactivity;

  4. Other data per internal policy or legal requirements.

  1. Third-Party Services

The Services may link to or integrate with third-party platforms. Summer is not responsible for third-party privacy practices.

  1. Privacy Controls on the Services

Callers must contact the Subscriber for privacy requests. Subscribers and Site visitors may:

  1. Access, correct, or delete information via their account or by contacting support@heysummer.com;

  2. Opt-out of marketing communications;

  3. Unsubscribe from SMS by replying STOP or UNSUBSCRIBE.

  1. Notice of Privacy Rights

Depending on your jurisdiction, you may have privacy rights including:

  1. Right to know, access, correct, delete, and port data;

  2. Right to restrict processing or object to certain uses;

  3. Right to withdraw consent and opt-out of marketing;

  4. Right to non-discrimination.

Callers should contact the Subscriber to exercise rights related to conversations with an AI Receptionist.

  1. Owned and Operated in Hong Kong

Summer AI Limited is a Hong Kong-based company. Our Services are intended for use in jurisdictions where they are legally permitted. If you access the Services from outside supported regions, you consent to cross-border data transfer.

  1. Data Security

We maintain industry-standard security including:`

  1. AES-256 encryption at rest;

  2. TLS 1.3 encryption in transit;

  3. Role-based access controls;

  4. Regular audits and backup procedures;

  5. Incident response protocols.

Subscribers are responsible for securing their own environments.

  1. Contact

Summer AI Limited
1113 Peninsula Centre
67 Mody Road, Tsim Sha Tsui Project
Kowloon, Hong Kong
support@heysummer.com


© 2025 Summer AI Limited. All rights reserved.