Privacy Policy

Last Updated: 1/31/26

At Sumry (ASAH Advisors, LLC), we treat your data the way we'd want our own treated. This policy explains what we collect, how we use it, and how we keep it safe.

1. The Data We Collect

We collect information to make the categorization magic happen.

Account Info: When you sign up, we collect your name, email address, and payment information (via Stripe).

Financial Data (Via Xero): We sync General Ledger information and transaction history from Xero. This allows our AI to understand your categorization habits.

Usage Data: We do not use third-party trackers like Google Analytics or Mixpanel to watch how you use the app.

2. How We Use Your Data

We use your data for one primary purpose: To automate your financial categorization.

Processing: We process your historical Xero data to train our session-based models to recognize your specific transaction types.

Writing to Xero: We use the data to create bank transaction entries in Xero when you approve them.

AI Processing: We utilize Large Language Models (LLMs), including Google Gemini, to process text and categorize transactions.

3. Where Your Data Lives (Sub-processors)

We rely on a select group of trusted third parties to run our infrastructure. We do not sell your data.

Infrastructure & Database: Google Cloud Platform (GCP) and Amazon Web Services (AWS).

AI Processing: Google Gemini.

Payment Processing: Stripe.

4. Data Retention and Deletion

We don't want to hold your data longer than necessary.

Synchronized Data: We store data synchronized from Xero for the period you specify in your settings (e.g., 3 months, 1 year).

Uploaded Financials: Any specific financial documents or temporary uploads are deleted every 30 days.

Termination: If you cancel your subscription, all your synchronized data is deleted from our servers immediately upon the termination of the service account.

5. Security

We take security seriously.

Connection: We use industry-standard OAuth 2.0 to connect with Xero. This means you sign in through Xero, and we receive a secure "token" to access the data. We never see your Xero password.

Encryption: Data is encrypted in transit and at rest within our SQL databases.

6. Your Rights

You have the right to access, correct, or delete your personal data. Since our data is a mirror of your Xero data, the best way to correct financial data is usually within Xero itself, which will then resync to us.

If you have questions or privacy concerns, please email us at [email protected].