Terms
Last updated 3 November 2026.
The agreement
These terms are between you and Primož Cigoj, Slovenia, who runs Sumly. By signing in you accept them. If you use Sumly for a company, you accept them for that company and say you may do so. Questions go to [email protected].
What you get
Sumly reads the payment providers and app stores you connect, and the visits its script counts on your sites, and shows them for your projects. One project is free. Paid plans are on the home page; each starts with 14 free days and no card, and nothing is charged until you choose a plan and enter a card in Stripe, our payment processor. A plan renews each month or year until you cancel it under Plan, Card and invoices; it then runs to the end of the period paid, and the workspace moves to Free. When a plan ends nothing is deleted, but nothing past what Free allows can be added.
What you agree to
- Connect only accounts, apps and sites that are yours or that you are allowed to connect, and use read-only keys where the provider offers them.
- Put the tracking script only on your own sites, and tell your visitors about it in your own privacy policy. In the EU, the EEA, the UK and Switzerland, ask for consent before calling
sumly.consent(true). - Keep your sign-in to yourself, and invite to your team only people who may see your numbers.
- Do not try to reach other people's workspaces, overload the service, or resell it.
Your data, and us processing it for you
The numbers, customers and visitors in your workspace are yours. For the personal data in them (your customers' names, e-mail addresses and countries, your visitors' pages, places and devices) you are the controller and Primož Cigoj, Slovenia is your processor. This section is our data processing agreement under Article 28 of the GDPR:
- We process that data only to show it to you and your team, to answer your questions in Ask and over MCP, and to send the reports you turn on. We do not sell it, use it for advertising, or train models on it.
- Everyone who works on Sumly is bound to keep it confidential.
- Keys are encrypted on our server; the database is in Germany. The subprocessors are listed on the privacy page; we say there before adding one, and you may object by leaving.
- We help you answer your customers' and visitors' requests, and tell you without undue delay of a breach that touches your data.
- When you delete a project or your account, its data is deleted. Raw visits go after 25 months in any case.
- You may ask how we keep to this, and we answer in writing.
Assistants
Ask and the assistants you connect over MCP (ChatGPT, Claude and others) answer from your numbers. Through an assistant you can also make some of the changes the pages offer, only those your role allows, and each only after you confirm it; you answer for what you confirm. Sumly only reads from your payment providers: no tool moves money, refunds or changes anything there. Answers are written by an AI model and can be wrong; what you say to an assistant falls under its maker's terms.
Ending
You can delete your account at any time under your avatar › Your account. We may close an account that breaks these terms, and will say why unless the law stops us. If we ever stop Sumly, we give at least 30 days' notice so you can export what you need.
No promises beyond these
Sumly is provided as it is. We work to keep the numbers right, but they come from your providers and can be late or wrong; check anything important with the provider before you rely on it. As far as the law allows, we are not liable for indirect losses or lost profit, and our liability for anything else is limited to what you paid us in the twelve months before. Nothing here limits liability that the law does not allow to be limited.
Changes and law
We may change these terms; a change that matters is announced in Sumly or by e-mail before it applies. Slovenian law applies, and the courts in Ljubljana decide disputes, without taking away the protection your own country's law gives you as a consumer.