This policy explains what personal data SumCode collects, why, who we share it with and the choices you have. It covers sumcode.io, the SumCode editor and the SumCode MCP connection.
- We collect what we need to run SumCode: your account details, your projects, your billing records and how you use the product.
- We never sell your personal data and we do not show you ads.
- Card details go straight to Stripe. We never see your full card number.
- Your projects are yours. When your AI agent reads them, they go to your own AI provider under your agreement with them.
- You can ask to see, correct, export or delete your data at any time.
1. Who We Are
SumCode is run by FOQUSS MODE LLC, 5830 E 2nd St, Ste 7000 #15868, Casper, Wyoming 82609-4308, USA. SumCode is managed from Nairobi, Kenya, and its systems are hosted in the United States. For your account, billing and website data we are the "controller", which means we decide how and why it is used. Contact us about privacy at support@sumcode.io.
2. What We Collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, password (stored only as a secure hash), sign-in times | You |
| Organization and team | Organization and workspace names, who is invited, their roles | You and your team |
| Your content | Projects, code, text, designs, uploaded files, imported apps, data bridge values, annotations, version history | You, your team and your AI agent |
| Connections | Access tokens for GitHub and Netlify, and for AI agents you connect over MCP | You, when you connect them |
| Billing | Purchases, credit balance, receipt email, Stripe customer number, and the brand and last four digits of a card saved for Auto Top-Up (shown to you by Stripe; we never hold the full number) | You and Stripe |
| Usage | Which features you use, the changes your agent saves, credits used, storage used | Our systems |
| Product analytics | Pages viewed, clicks and recordings of how the app is used, with your content hidden (see section 8) | Our analytics provider |
| Support | Messages and emails you send us | You |
| Technical data | IP address, browser and device type, error logs | Your browser and our servers |
We do not want sensitive data such as health information, government ID numbers or payment card numbers in your projects. Please do not upload it.
3. How We Use It, and Our Legal Basis
| Purpose | Legal basis (for people in the EU and UK) |
|---|---|
| Create your account, run the editor, store and publish your projects, connect your agent | Needed to perform our contract with you |
| Take payments, keep billing records, handle refunds and chargebacks | Contract, and legal obligations (tax and accounting) |
| Send service emails: invitations, receipts, account, billing and security notices | Contract, and legitimate interest in keeping you informed |
| Keep SumCode secure, prevent fraud and abuse, enforce our terms | Legitimate interest, and legal obligations |
| Understand how SumCode is used and improve it (analytics and screen recordings) | Your consent where the law requires it. Elsewhere, our legitimate interest in improving SumCode, and you can object at any time |
| Answer support requests | Contract and legitimate interest |
We do not use your content to train AI models, and we do not sell or rent personal data.
4. Data Inside Your Projects and Sites
Your projects may contain personal data about other people, for example a customer list in a page or form submissions your published site collects. For that data, the business customer decides why and how it is used, and SumCode processes it on that customer's instructions to provide the service. We remain the controller for what we do for our own account security, billing, legal compliance and service administration. You are responsible for having a lawful basis to use that data and for giving those people your own privacy notice. If you need a data processing agreement, email support@sumcode.io.
5. Your AI Agent
SumCode does not run AI. When you connect an agent such as Claude, Codex or Cursor, the agent reads and changes your projects through SumCode, and the content it reads goes to your AI provider under your own account and agreement with them. Their privacy policy covers what happens to it there. You can disconnect an agent at any time in your settings.
6. Who We Share Data With
We disclose data to providers that help run SumCode, to providers you ask us to connect, and when the law requires it. Some providers process data only on our instructions. Others, including Stripe for some payment activities and services you connect yourself, act under their own terms and privacy policies.
| Provider | What they do for us | Location |
|---|---|---|
| Supabase | Database, sign-in, file storage and back-end functions | USA (Oregon) |
| Netlify | Hosting sumcode.io | USA |
| Stripe | Payments and receipts | USA and worldwide |
| Resend | Sending emails | USA |
| Analytics provider | Product analytics | USA |
| Google Fonts and unpkg | Fonts and icons; your browser loads them directly, which shares your IP address with them | USA and worldwide |
| GitHub | Code hosting for our own systems | USA |
When you connect GitHub, Netlify, Cloudflare, Bubble or an AI agent, we send them what is needed to do what you asked, under their own terms. We may also share data if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, in which case this policy will continue to protect it.
7. International Transfers
Our main systems store data in the United States, and SumCode is also run from Kenya. If you are outside the US, your data is transferred there. Where the law requires it, we use an applicable legal transfer mechanism. Contact us for information about the safeguard used for your data.
8. Cookies, Local Storage and Analytics
- Essential. We store your sign-in session and settings in your browser so the app works. These cannot be turned off.
- Analytics. We use a product analytics provider to understand how SumCode is used and improve it. Recordings of the editor hide your content. Where the law requires it, we ask for your consent first, and you can refuse or withdraw it at any time.
9. How Long We Keep Data
- Account and content: while they are needed to provide SumCode. After that we delete or anonymize them. Copies in backups are removed on our providers' backup cycles.
- Billing records: for as long as tax and accounting law requires.
- Screenshots your agent takes of your preview: deleted within 5 minutes.
- Security records: longer when needed to investigate abuse or protect legal rights.
- Analytics: only as long as it is useful for improving SumCode.
10. Security
We use reasonable technical and organizational measures to protect your data, and card details stay with Stripe. No method of storing or sending data is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities when the law requires us to.
11. Your Rights
Depending on where you live, you can ask us to:
- give you a copy of your personal data, or send it to another service;
- correct it or delete it;
- restrict or object to how we use it, including for analytics;
- withdraw a consent you gave, at any time.
Email support@sumcode.io. We will answer within the time the law allows, normally 30 days, and may need to confirm your identity first. You will not be treated differently for using your rights. If you are in the EU, UK or Kenya, you can also complain to your data protection authority (in Kenya, the Office of the Data Protection Commissioner).
California residents: we do not sell or share personal information for targeted advertising. The categories we collect and why are listed in sections 2 and 3.
12. Children
SumCode is not for anyone under 18 and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
13. Changes to This Policy
If we make important changes, we will tell you by email or in the app before they take effect. The date at the top shows when this policy last changed.
14. Contact
FOQUSS MODE LLC, 5830 E 2nd St, Ste 7000 #15868, Casper, Wyoming 82609-4308, USA. Email: support@sumcode.io.