SUMELO Privacy Policy

This Privacy Policy applies to information processed through SUMELO's websites, applications, accounts, customer support, subscription services, public sharing features, seller-commerce features, buyer purchase and delivery flows, referral or ambassador features when available, and related services.

SUMELO is designed for users age 18 and older. The Service is not intended for children or minors under 18.

This Policy describes SUMELO's current practices. Additional notices may be presented when a specific feature, promotion, partnership, or legally regulated activity requires additional disclosure.

When you create and use a SUMELO account, you may provide information such as your name, email address, phone number, country or region, preferred language, timezone, account preferences, and other profile information.

You may also provide business information including business name, contact information, addresses, categories, products, recipes, ingredients, materials, suppliers, purchase prices, selling prices, labor information, expenses, tax settings, procedures, production information, margins, profitability information, photographs, files, notes, and other operational or financial data.

Information you enter about suppliers, employees, contractors, customers, or other people may contain personal information about those individuals. You are responsible for having an appropriate right or lawful basis to provide that information to SUMELO.

If you use Sell with SUMELO, you may provide seller identity and business information, listing descriptions, prices, digital content, license selections, support information, and other commerce configuration. Buyers may provide information such as an email address and transaction-related information when purchasing seller content, even if the buyer does not create a SUMELO account.

When you interact with SUMELO, we and our service providers may automatically receive technical and usage information such as IP address, browser type, device information, operating system, session identifiers, authentication events, timestamps, requested pages, security events, error information, and general interaction data.

We use this information to authenticate users, maintain sessions, prevent fraud and abuse, diagnose errors, protect the Service, understand feature performance, and improve SUMELO.

We may also receive approximate location information inferred from an IP address or information such as country, region, language, or timezone that you provide or your device makes available.

SUMELO processes information necessary to create accounts, authenticate users, maintain secure sessions, reset passwords, confirm email addresses, prevent automated abuse, and protect accounts.

Security providers may process browser, network, device, interaction, and challenge information to distinguish legitimate users from bots, abusive traffic, or suspicious activity.

SUMELO may retain security logs and related information when reasonably necessary to investigate fraud, abuse, unauthorized access, attacks, or violations of our Terms.

We use information to create and operate accounts, provide requested features, calculate costs and margins, preserve business history, generate insights, process publications and exports, maintain preferences, provide support, process subscriptions, facilitate seller-commerce Checkout and secure delivery, maintain transaction and legal-acceptance records, reconcile refunds and disputes, operate fraud and abuse controls, and communicate about the Service.

We also use information to secure SUMELO, prevent fraud and abuse, troubleshoot problems, monitor reliability, improve features and usability, develop new functionality, perform internal analytics, comply with legal obligations, and enforce our agreements.

We seek to collect, use, and retain information in ways that are reasonably related and proportionate to the purposes for which the information is processed.

Your identifiable private recipes, procedures, photographs, supplier information, costs, prices, financial records, product information, and other Customer Content remain yours as described in the Terms of Service.

SUMELO processes Customer Content to provide, maintain, secure, support, and improve the functions you request. Using SUMELO does not transfer ownership of your identifiable private Customer Content to SUMELO.

The limited operational license governing how SUMELO may technically host, process, reproduce, format, transmit, back up, and display Customer Content is described in the Terms of Service.

SUMELO may create aggregated, statistical, de-identified, or otherwise non-identifying information derived from use of the Service.

This may include market trends, cost trends, pricing benchmarks, margin benchmarks, product-category trends, purchasing trends, operational patterns, feature-performance information, and other statistical or industry intelligence.

SUMELO may use, combine, analyze, commercialize, license, disclose, or otherwise use aggregated or de-identified information for analytics, benchmarking, research, product development, market intelligence, reports, partnerships, and other lawful business purposes.

When SUMELO treats information as de-identified for these purposes, we take reasonable measures designed to prevent the information from reasonably identifying an individual user or exposing identifiable confidential Customer Content.

SUMELO may own aggregated datasets, benchmarks, statistical analyses, models, and derived insights created by the Service, while ownership of the underlying identifiable Customer Content remains with the customer.

SUMELO does not currently sell identifiable personal information, exact private recipes, identifiable private financial records, or other identifiable private Customer Content to advertisers, data brokers, or commercial partners.

SUMELO does not currently share personal information for cross-context behavioral advertising.

Commercialization of aggregated or de-identified information described in this Policy is different from selling a user's identifiable private Customer Content.

If SUMELO later introduces a program involving commercial disclosure of identifiable customer information beyond what is necessary to provide the Service, we will provide appropriate notice and obtain consent or provide legally required choices before engaging in that activity where required by applicable law.

SUMELO relies on carefully selected service providers to operate the Service. These providers may process information on SUMELO's behalf only as reasonably necessary to provide their services or for other permitted purposes.

Current or anticipated providers include Supabase for authentication, database, and storage infrastructure; Netlify for application hosting and delivery; Cloudflare Turnstile for bot and abuse prevention; Resend for transactional email delivery; and Stripe for SUMELO subscription billing, seller connected-account onboarding, seller-direct payment processing, refunds, disputes, payouts, and optional seller-configured Stripe Tax functionality.

We may change or add service providers as SUMELO evolves. We evaluate providers based on the functions they perform, operational requirements, security considerations, and applicable legal obligations.

When you purchase a paid SUMELO subscription or purchase seller content through Sell with SUMELO, payment information is processed by a payment provider such as Stripe.

SUMELO does not store your full payment card number, card security code, or complete payment credentials.

SUMELO may receive and retain billing-related information such as customer identifiers, subscription status, plan, billing period, payment status, invoice identifiers, payment dates, renewal dates, cancellation status, and limited payment metadata necessary to operate subscriptions, prevent fraud, provide support, and maintain financial records.

When a seller uses Sell with SUMELO, SUMELO may process the seller business country, connected-account identifiers, seller onboarding and capability status, payment-rail configuration, listing and immutable publication records, Checkout attempts, Order and entitlement records, buyer email addresses, amounts and currency, tax amounts reported by Stripe when applicable, refund and dispute records, delivery status, support cases, and operational audit records.

Where separate seller billing applies, SUMELO may also process a SUMELO Stripe Billing Customer identifier, saved payment-method identifier and readiness status, seller-billing authorization version, locale, acceptance timestamp, authorization hash and audit metadata, Stripe Setup Session and SetupIntent identifiers, platform-fee obligations, billing-invoice and invoice-line identifiers, collection attempts, payment-failure events, past-due and grace-period status, settlements, credits, refund adjustments, and related reconciliation records.

SUMELO does not receive or store a seller's or buyer's full payment card number or card security code. Stripe processes the underlying payment credentials and may process identity, address, tax, fraud, bank, and payment information under Stripe's own terms and privacy practices. SUMELO may retain provider identifiers and limited payment-method metadata needed to operate, secure, audit, and reconcile seller commerce and seller-fee billing.

SUMELO uses seller-commerce and seller-billing information to determine seller eligibility, operate seller-direct Checkout, calculate and record platform-fee obligations, collect authorized seller fees, apply fee credits, reconcile refunds and disputes, enforce grace-period and future-Checkout controls, prevent fraud or abuse, provide support, maintain financial and audit records, and comply with legal, tax, accounting, payment-provider, or reporting obligations.

A buyer does not need a SUMELO account for SUMELO to process the limited information needed to facilitate a seller-direct purchase, verify payment, deliver purchased content, preserve the exact terms and license accepted, prevent fraud or abuse, provide support, and maintain records required for legitimate business or legal purposes.

A seller's failure to pay a separate SUMELO platform fee does not by itself cause SUMELO to revoke an otherwise valid buyer entitlement. SUMELO may retain the seller-billing failure, grace-period, collection, and fee-obligation records needed to enforce prospective SELL restrictions and reconcile later payment or credits.

Seller-commerce security controls may process network and device signals and may create keyed security fingerprints designed to rate-limit abusive Checkout activity without storing the raw value in the corresponding SUMELO commerce security ledger.

Sellers may receive buyer information reasonably necessary to fulfill, support, refund, document, or comply with the seller's transaction. Sellers are independently responsible for using that information lawfully and only for appropriate transaction, support, compliance, and customer-service purposes.

If a business uses team features, SUMELO may process invitation email addresses, invitation status and expiration, business membership, assigned role, account identity, membership status, and team-management audit information.

Team members may be able to view or modify business information according to their role and the permissions available in the applicable plan. The primary owner and authorized admins may be able to view member names, email addresses, roles, status, and invitation information as necessary to manage the workspace.

Removing a team member ends future access but does not automatically erase historical activity, audit records, or business records that reasonably need to remain associated with the workspace.

When SUMELO's referral or affiliate features are used, SUMELO may process referral codes, referral-link or publication-QR activity, landing paths, timestamps, a referral cookie or token, hashed visitor identifiers, attributed account or business identifiers, qualification status, reward records, reversals, payout status, and related audit information.

SUMELO's standard referral attribution currently uses a limited attribution window. We may use a referral cookie or token to recognize an eligible first-touch referral and prevent duplicate or self-referral credit.

For affiliate payouts, SUMELO may process recipient entity type, display name, contact email, country, payout onboarding status, Stripe recipient-account and payout-method identifiers, capability or requirement status, payout amounts, payout attempts, provider fees, and reconciliation events. Stripe or another payout provider processes the underlying payout method and may collect additional identity or bank information under its own terms and privacy practices.

Brand Ambassador administration may include invitation records, invitation status, program role, complimentary-access entitlement, referral performance, communications, and program-management notes or status.

SUMELO uses this information to operate attribution, determine program eligibility, prevent abuse, calculate and reconcile rewards, execute eligible payouts, provide participant support, maintain financial records, and comply with legal or reporting obligations.

SUMELO may allow you to intentionally create public or shareable links, documents, publications, or exports containing information you select.

Information that you choose to publish through a public or shareable feature may be accessible to anyone who obtains or discovers the applicable link.

Third parties may copy, save, screenshot, download, or redistribute information that you intentionally make public. SUMELO cannot control copies created by third parties after information has been shared.

You should not place confidential, sensitive, or private information into a publication you do not intend others to see.

SUMELO uses cookies and similar browser technologies that are necessary for functions such as authentication, secure sessions, language preferences, account state, security, and proper operation of the Service.

At launch, SUMELO does not use third-party behavioral advertising pixels within the product for cross-context behavioral advertising.

If SUMELO later introduces non-essential analytics, advertising, or tracking technologies, we will update our disclosures and provide consent or preference controls where required by applicable law.

Blocking essential cookies may prevent authentication or other portions of SUMELO from functioning correctly.

SUMELO may send transactional or service-related communications such as account verification, password recovery, security alerts, subscription notices, billing information, policy updates, and important product communications. These messages may be necessary to operate your account.

Marketing emails, educational content, promotional messages, and other non-essential communications are optional unless otherwise permitted by law.

You may decline marketing when creating an account and may withdraw that choice later through available preference controls or unsubscribe mechanisms.

Withdrawing marketing consent does not prevent SUMELO from sending necessary transactional, security, billing, or legal communications.

We retain information for as long as reasonably necessary to provide the Service, maintain your account and business history, protect SUMELO, resolve disputes, prevent fraud, comply with legal and accounting obligations, and enforce agreements.

Retention periods vary depending on the type of information, why it was collected, whether the account remains active, legal requirements, security needs, and technical backup cycles.

When you delete your account, SUMELO will delete or de-identify information in accordance with the account-deletion process, subject to information that we reasonably need or are legally required to retain.

Residual copies may remain temporarily in backups, logs, fraud-prevention records, financial records, or other limited systems until overwritten, expired, or lawfully deleted according to applicable retention schedules.

SUMELO provides tools that may allow account holders to export account and business information and to request or initiate account deletion.

Account deletion is intended to remove the user's account and associated customer data from active SUMELO systems, subject to lawful retention requirements, security records, payment records, and limited backup retention.

Deletion of your SUMELO account does not delete copies of information that you previously made public or that third parties independently saved from a public or shared publication.

SUMELO uses technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

Safeguards may include authentication controls, restricted database and storage permissions, account-security measures, access controls, secure network transmission, abuse prevention, logging, backups, and service-provider security controls.

No internet service, storage system, or security measure can guarantee absolute security. You are also responsible for protecting your password, devices, email account, and other credentials used to access SUMELO.

If you believe your SUMELO account or information may have been compromised, contact support@sumeloapp.com promptly.

Depending on where you live and which privacy laws apply to SUMELO, you may have rights concerning your personal information, including rights to request access or information, obtain a copy, correct inaccurate information, request deletion, withdraw certain consents, object to or restrict certain processing, or appeal certain privacy decisions.

Where applicable, you may also have rights concerning the sale or sharing of personal information, use of sensitive personal information, or discrimination for exercising privacy rights.

SUMELO does not currently sell identifiable personal information or share it for cross-context behavioral advertising. If those practices change, we will implement legally required disclosures and controls before or when required.

You can exercise available account rights through SUMELO's account tools or contact legal@sumeloapp.com. We may need to verify your identity or authority before completing certain requests.

Even where a particular statutory right does not apply to SUMELO or to your circumstances, we may voluntarily honor reasonable access, correction, export, or deletion requests when feasible and appropriate.

SUMELO may disclose information when we reasonably believe disclosure is required by law, legal process, court order, valid governmental request, or other legal obligation.

We may also disclose information when reasonably necessary to investigate fraud, prevent abuse, protect users, enforce agreements, establish or defend legal claims, protect rights or safety, or respond to an emergency.

When legally permitted and appropriate, we may challenge or narrow requests that we believe are invalid, excessive, or inconsistent with applicable law.

If SUMELO or Madrigal Business LLC — SUMELO PS is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction, information may be disclosed or transferred as part of evaluating or completing that transaction.

Any successor that receives personal information will remain subject to applicable privacy obligations. If a transaction materially changes how identifiable personal information is used, we will provide notice or choices when required by law.

SUMELO is operated from the United States, and our service providers may process information in the United States or other countries where they maintain infrastructure or personnel.

Data-protection laws may differ between jurisdictions. Where applicable law requires additional safeguards for international transfers, SUMELO will use legally recognized mechanisms or other appropriate protections.

By using SUMELO, you understand that information may be processed in jurisdictions other than the location where you live, subject to applicable legal protections.

SUMELO is intended only for individuals age 18 and older.

We do not knowingly offer accounts to children or minors under 18. If we learn that an underage person created an account contrary to our Terms, we may take reasonable steps to close the account and delete associated information, subject to applicable law.

We may update this Privacy Policy as SUMELO, our technology, legal requirements, service providers, and business practices evolve.

When changes are material, we may provide additional notice and may require renewed acknowledgment or consent when appropriate or legally required.

The effective date and document version shown at the top identify the current Policy, and SUMELO may retain records showing which version you accepted.

Privacy requests, legal notices, and privacy questions: legal@sumeloapp.com

Customer support and account assistance: support@sumeloapp.com

Madrigal Business LLC — SUMELO PS, d/b/a SUMELO · 2949 Tardiff Dr., Naples, FL 34120, United States