Effective date: June 6, 2026
Who we are
Sumora is an agentic business operating system operated by Contral. When this policy says "Sumora", "we", "us", or "our", it refers to Sumora by Contral. If you have any questions about this policy or your data, contact us at hi@trysumora.com.
What data we collect and why
We collect only the data we need to provide and operate the service.
- Account information. Your name, email address, and authentication details, used to create and secure your account and to communicate with you about the service.
- Business content you create. The text, media, campaigns, and other content you and our AI agents produce inside Sumora, used to deliver the features you ask for (for example, drafting and publishing content for your business).
- Connected-account data. When you connect a third-party account (such as Google, YouTube, or Instagram), we access the specific data and permissions you authorize, used only to perform the actions you request through Sumora (for example, publishing a post you created to your own channel or account).
- Usage and device data. Basic technical information such as log data and analytics about how the service is used, used to keep the service reliable and secure and to improve it.
Google user data
Sumora requests access to Google and YouTube APIs only to publish content that you explicitly create to your own YouTube channel. We do not use Google user data for any other purpose, and we do not access more than is needed to perform the publishing actions you request.
Sumora's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Sumora uses YouTube API Services. By connecting your YouTube account, you also agree to the YouTube Terms of Service. Your use of Google services is also governed by the Google Privacy Policy.
Meta / Instagram data
Sumora uses the Instagram Graph API only to publish content that you create to your own connected Instagram Business account. We do not use this access for any other purpose, and we do not share Instagram or Meta data with third parties for advertising.
Data deletion. To request deletion of the data associated with your connected Instagram or Meta account, email us at hi@trysumora.comwith the subject line "Data deletion request" from the email address on your Sumora account. We will disconnect the account and delete the associated data within 30 days. You can also remove Sumora's access at any time from your Instagram or Meta security settings.
How to revoke access and request deletion
You can revoke Sumora's access to any connected account at any time from that platform's security settings (for example, your Google Account permissions page or your Instagram or Meta connected-apps settings). To request deletion of your Sumora account and the data we hold about you, email hi@trysumora.com and we will process your request within 30 days.
No selling of data
We do not sell your personal data, and we do not share data received from Google or Meta APIs with third parties except as needed to operate the service you requested or as required by law.
Data retention
We retain your data only for as long as your account is active or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete it or anonymize it.
Security
We use industry-standard safeguards, including encryption in transit, access controls, and least-privilege access to connected accounts, to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to it.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the effective date above and, where appropriate, notify you. Continued use of Sumora after an update means you accept the revised policy.
Contact
Questions about this policy or your data can be sent to hi@trysumora.com.