PRIVACY POLICY
  • TRUSTe

    Summitas Privacy Policy

    EFFECTIVE: August 4, 2025

    Who We Are

    Summitas, LLC ("we," "us") provides secure online tools, including a digital vault, collaboration features, and apps that support user-generated content. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website or mobile app.

    Who Uses Summitas

    Our platform is used by our Customers (businesses) and their authorized users, including employees, contractors, and Clients (their end users).

    What We Collect

    Information You Provide:
    We collect your name, email address, and sometimes your phone number when you sign up, contact us, or use features in the platform. We also collect device and operating system information.

    On Behalf of Customers:
    We may process Client data at the direction of our Customers. If you are a Client, do not hesitate to get in touch with the business you engage with directly for any privacy requests.

    Digital Vault Security:
    Customers and Clients can store documents in our encrypted Digital Vault. You control how your passphrase is managed:

    • Non-recoverable (you must remember it because your files using this method are unrecoverable if you lose your passphrase),
    • You choose (Summitas stores it in an encrypted form),
    • Auto-generated (let Summitas auto-generate it and store it in an encrypted form).

    You are responsible for protecting your passphrase and login credentials. We are not liable for lost access or unauthorized use resulting from your handling of this information.

    How We Use Your Data

    We use your information to:

    • Provide and improve the service,
    • Support your access and usage,
    • Respond to your questions or requests,
    • Analyze anonymized usage data for improvements,
    • Send marketing emails with product and feature enhancements.

    When We Share Your Data

    We do not sell your information. We may share it only:

    • With vendors helping us operate (e.g., cloud hosting, billing),
    • To comply with legal requirements,
    • If we are involved in a business transfer, such as a merger or acquisition.

    Cookies and Tracking

    We use cookies and similar technologies to analyze usage and ensure the platform works as expected. Cookies must be enabled to use the site.

    Your Choices

    You can use the Site without providing any Personal Data. If you choose not to provide any Personal Data, you may not be able to use certain Services.

    Marketing communications. You have the right to choose how we use your personal data for marketing purposes. You may opt out of receiving marketing communications from us at any time or update your communication preferences by following the unsubscribe instructions in our messages or by contacting us directly.

    Right to withdraw consent. If we plan to use your personal information for a new purpose that differs significantly from the one originally disclosed, or share it with a third party not outlined in this Privacy Policy, we will provide you the option to decide if you wish to proceed with this use or disclosure

    Interest-based advertising opt-out.  You may exercise choice for targeted ads using cookies by using the third-party industry opt-out mechanism below:

    Access and Individual Rights

    We are committed to upholding your rights under the Access Principle of the Data Privacy Framework (DPF). You have the right to request access to the personal information we hold about you. Where that information is inaccurate, incomplete, or processed in violation of applicable data protection principles, you also have the right to request that it be corrected, amended, or deleted.

    We will honor such requests unless doing so imposes a disproportionate burden or expense relative to the privacy risk to you, or where fulfilling the request would violate the rights of other individuals.

    To request access to your information or to ask for corrections or deletions, please contact us at https://www.summitas.com/contact. We will respond to your request within a reasonable timeframe in accordance with applicable laws and regulations.

    Children

    Summitas is not for users under 18. We do not knowingly collect data from minors.

    Security

    We use encryption and TLS to protect your information. However, no Internet system is completely secure. Please be careful with the information you share and always protect your passwords and passphrases.

    Data Retention

    We keep personal data as long as needed to provide services or meet legal and contractual obligations.

    Third-Party Apps

    If you use third-party apps on your mobile device, those apps may collect data independently. Their privacy policies apply—not ours.

    Changes to This Policy

    We may update this policy. If there are significant changes, we will notify you on our website or by email.

    For EU and Swiss Residents

    Summitas LLC complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Summitas LLC has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. Summitas LLC has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

    In the context of onward transfers, Summitas LLC is accountable for the processing of personal data it receives, under the EU-U.S. DPF, and Swiss-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf. Summitas LLC remains liable under the EU-U.S. DPF Principles and the Swiss-U.S. DPF Principles if Summitas’s agent processes personal information in a manner inconsistent with the EU-U.S. DPF Principles and the Swiss-U.S. DPF Principles, unless Summitas LLC proves that it is not responsible for the event giving rise to damage.

    The Federal Trade Commission has jurisdiction over Summitas LLC’s compliance with the EU-U.S. DPF and Swiss-U.S. DPF. In certain situations, Summitas LLC may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

    In compliance with the EU-U.S. DPF and the Swiss-U.S. DPF, Summitas LLC commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided at no cost to you.

    For complaints regarding DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.

    Contact Us

    In compliance with the EU-U.S. DPF, and the Swiss-U.S. DPF, Summitas LLC commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact: 

    Summitas, LLC
    5113 Piper Station Drive, Suite 206
    Charlotte, NC 28277
    (704) 272-4304

    https://www.summitas.com/contact