Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account or use our platform, you may provide:

• Account Information: Name, email address, password, profile photo
• Payment Information: Credit card details, billing address (processed by our payment partner Stripe)
• Profile Information: Company name, job title, preferences
• User Content: Reviews, comments, feedback, support requests
• Communications: Messages, emails, or other correspondence with us

1.2 Information Automatically Collected

When you use our platform, we automatically collect:

• Usage Data: Pages viewed, features used, time spent, search queries
• Device Information: Browser type, operating system, device identifiers
• Location Data: IP address, general geographic location
• Cookies and Tracking: See Section 6 for details

1.3 Information from Third Parties

We may receive information from:

• Partners: Product information, order fulfillment data
• Payment Processors: Transaction status, payment confirmation
• Authentication Services: OAuth providers like Google (name, email, profile photo)
• Analytics Services: Aggregated usage data, traffic sources

2. How We Use Your Information

We use your information to:

• Provide Services: Create and manage your account, process transactions, deliver products
• Improve Platform: Analyze usage, fix bugs, develop new features
• Personalize Experience: Recommend products, customize content
• Communicate: Send order confirmations, product updates, marketing emails (with consent)
• Security: Detect fraud, prevent abuse, enforce our Terms of Service
• Legal Compliance: Comply with laws, respond to legal requests
• Marketing: Send promotional offers, newsletters (you can opt out)

3. How We Share Your Information

We share your information with:

3.1 Partners (Product Vendors)

When you purchase a product, we share necessary information (name, email, order details) with the Partner to fulfill your order and provide support. Partners are independent businesses and have their own privacy policies.

3.2 Service Providers

We use third-party services to operate our platform:

• Payment Processing: Stripe (handles payment information)
• Email Services: Email delivery providers
• Cloud Hosting: Server and database hosting
• Analytics: Usage tracking and analysis tools
• Customer Support: Help desk and ticketing systems

These providers only access information necessary to perform their functions and are contractually obligated to protect it.

3.3 Legal Requirements

We may disclose information when required by law, court order, or government request, or to protect our rights, property, or safety.

3.4 Business Transfers

If Sumo is acquired, merged, or undergoes a business transition, your information may be transferred to the new entity.

3.5 With Your Consent

We may share information for other purposes with your explicit consent.

4. Your Rights and Choices

4.1 Access and Correction

You can access and update your account information at any time through your account settings or by contacting us at support@sumo.com.

4.2 Data Deletion

You can request deletion of your personal information by contacting us. We'll delete your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., processing refunds).

4.3 Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any email or adjusting your account preferences. You'll still receive transactional emails (order confirmations, password resets, etc.).

4.4 Cookies

You can control cookies through your browser settings. Disabling cookies may limit certain features. See Section 6 for more details.

4.5 Do Not Track

Some browsers support "Do Not Track" signals. We don't currently respond to these signals.

5. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Access controls and authentication
• Regular security audits and monitoring
• Employee training on data protection

However, no system is completely secure. You're responsible for maintaining the confidentiality of your password and account credentials.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Enable core functionality (authentication, session management)
• Analytics Cookies: Understand how users interact with the platform
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Deliver relevant ads and track campaign effectiveness

You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies, but this may impact platform functionality.

7. Third-Party Links and Services

Our platform may contain links to Partner websites and third-party services. We're not responsible for their privacy practices. Please review their privacy policies before providing information.

8. Children's Privacy

Our platform is not intended for children under 18. We don't knowingly collect information from children. If you believe we've collected information from a child, please contact us immediately at legal@sumo.com.

9. International Users

Sumo is based in the United States. If you access our platform from outside the U.S., your information may be transferred to, stored, and processed in the U.S. By using our platform, you consent to this transfer.

9.1 European Union Users (GDPR)

If you're in the EU, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

To exercise these rights, contact us at legal@sumo.com.

9.2 California Users (CCPA)

If you're a California resident, you have rights under CCPA:

• Right to know what personal information we collect
• Right to know if we sell or disclose personal information
• Right to delete personal information
• Right to opt-out of sale of personal information (we don't sell your data)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at legal@sumo.com.

10. Data Retention

We retain your information for as long as necessary to:

• Provide services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

After account closure, we may retain certain information for legal, tax, or regulatory purposes. Anonymized data may be retained indefinitely for analytics.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We'll notify you of material changes by email or through the platform. The "Last Updated" date at the top indicates when changes were made.

Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: