Your financial data stays yours.

Summa processes the owner's account information, Gmail message identifiers and metadata, financial messages selected for ingestion, transaction details extracted from those messages, and corrections or categories supplied by the owner.

Gmail access is read-only. Summa cannot send, modify, or delete email. The initial discovery pass reads identifiers and selected headers without downloading message bodies or attachments.

Information is used only to identify financial activity, organize personal transactions and investments, reconcile source coverage, and present the owner's private financial record.

Summa does not sell personal information, serve advertising, or use Gmail data to train a general-purpose model.

Summa is a private, single-owner application hosted on an Oracle Cloud virtual machine. Google refresh tokens and stored Gmail headers are encrypted using a server-held key. Authentication cookies are secure and unavailable to browser scripts.

Encrypted PostgreSQL backups are stored in a private Cloudflare R2 bucket. Access credentials are restricted to the services that require them.

Google provides read-only Gmail access after the owner grants consent. Cloudflare provides network protection and encrypted backup storage. Oracle Cloud hosts the application. Resend delivers account security emails.

Information is disclosed only when required to operate these services, comply with law, or protect the security of the owner and the application.

The owner can revoke Gmail access from Summa or the Google Account permissions page. Revocation stops future mailbox access. Source and financial data remain until the owner deletes them or requests removal so that records do not disappear unexpectedly.

The owner may request access, correction, export, or deletion by contacting [email protected].