Privacy Policy

How We Use Information

We use submitted information to review partnership applications, respond to inquiries, determine fit, send booking confirmations and reminders, deliver newsletters you requested, protect the site from abuse, and communicate about potential work with Summit Intelligent Systems.

AI Chatbot & Conversation Data

Our website includes an on-site AI assistant. When you use it, the assistant collects the messages you type, along with any business details or email address you choose to share during the conversation. Here is how that data is handled:

• Processing:your messages are sent to a third-party large language model provider (Groq) to generate the assistant's responses.
• Storage: routine chat messages are not stored in the browser. If you share an email address or request human follow-up, relevant conversation details are sent to Summit through Formspree so we can respond.
• Human follow-up: if you ask to be contacted or share contact details, your conversation may be routed to us through our server-side chat API and Formspree so a person can follow up.

Please do not share sensitive personal information, such as passwords, financial account numbers, government identifiers, or health information, in the chat. The assistant is intended for general questions about Summit and your project.

Third-Party Processors

We rely on a small number of trusted third-party services to operate the site and the AI assistant. Each processes only the data needed for its purpose, under its own privacy policy:

• Groq - Generates the on-site AI assistant's responses.
• Formspree - Delivers contact, application, booking, and chatbot follow-up notifications to our inbox.
• Supabase - Stores booking availability, booking records, and shared rate-limit counters.
• Resend - Sends newsletter, confirmation, reminder, and lead follow-up emails.
• Sanity - Stores newsletter content before it is sent.
• Cloudflare Turnstile - Protects forms from spam and automated abuse.
• Google Analytics - Measures site usage so we can improve the experience.
• Vercel Analytics and Speed Insights - Measures site performance, reliability, and page-level usage.
• Microlink and Openverse - Power the website preview tool by fetching public website metadata, screenshots, and commercially licensed images.

Cookies, Analytics & Technical Data

We may collect basic technical information such as browser type, device information, pages visited, and referral sources to understand site performance and improve the experience.

We use Google Analytics and Vercel Analytics/Speed Insights to understand how the site is used and how quickly it loads. These tools may collect device, browser, referral, and page-level usage data. You can opt out by blocking or clearing cookies in your browser, using a browser-level opt-out, or asking us not to track you (see your data rights below). We do not sell your personal information.

Data Retention

We keep lead, application, free-audit, booking, and chatbot follow-up submissions for up to 24 months unless we need them longer for an active client relationship, legal obligation, dispute, or accounting record. Newsletter subscription records are kept until you unsubscribe or ask us to delete them. Operational logs are typically retained for 30-90 days by our hosting and service providers, and business records may be kept for up to 7 years where required.

Security & Compliance

We use HTTPS, same-origin API checks, server-side input validation, spam controls, rate limiting, secret server environment variables, dependency scanning, and tamper-evident audit logs for important lead and booking actions.

Summit is not a HIPAA covered entity or business associate, and this website is not designed to collect protected health information. Please do not submit protected health information, passwords, payment card numbers, or government identifiers through forms or chat. Where GDPR-style rights apply, we honor verified access, correction, deletion, and opt-out requests.

Your Choices & Data Rights

You can ask us to act on the information you have shared with us, including any data from the AI assistant. Specifically, you may request to:

• Access a copy of the information we hold about you.
• Correct information that is inaccurate or out of date.
• Delete your application data and chatbot conversation content.
• Opt out of further communication and non-essential analytics.

To make a request, email us using the address below. We will confirm and act on verified requests within a reasonable window, typically within 48 hours for an initial response.