Privacy Policy

SelfSummary is operated by BQX, a limited liability company registered in Dubai, United Arab Emirates (“SelfSummary”, “we”, “us”). Where we decide why and how personal information is handled, we are the controller of the personal information described here. This policy covers selfsummary.com, the SelfSummary pages and records published on our sites, SelfSummary Studio, and any SelfSummary email or support conversation.

When you publish a record, you decide what it says. When a visitor sends you an enquiry through your record, you decide what to do with it, and you are responsible for your own use of it.

• Your record shows what is published on it.
• You can edit or delete your record at any time in Studio.
• Anyone can ask us to correct or remove information about them.

Information you give us.

• Account: your name, email address and the handle you choose.
• Your record: what you publish, such as your role, organisation, biography, photograph, links, services, press and sources.
• Verification: what you submit to verify your record, such as a website domain, a work email, a social profile, or an identity document or business licence.
• Messages: what you send us through support, data requests or impersonation reports.

Information from others.

• Sign-in providers: if you sign in with Google or Apple, we receive your name, email address, profile photo and an account identifier from that provider. Section 4 covers LinkedIn.
• Visitors to your record: enquiries a visitor sends you, and questions they ask about your record.
• Organisations: an organisation's administrators may list the people who work there on its record.
• Public sources and other people: a record can be started or corrected using publicly available information or information submitted by someone else. Section 8 explains how this works and what you can do.

Information collected automatically.

• Usage and device data: pages viewed, the referring site, approximate location derived from the network, browser and device type, and timestamps.
• Security signals: information used to keep out spam and abuse, such as a bot-protection check on forms.
• Cookies and similar technologies: see section 11.

Please do not publish sensitive information, such as health, religion or political opinions, on a record unless you are comfortable with it being public.

You can sign in with Google, Apple or a one-time email code. Separately, you can connect your LinkedIn account in Studio to build your record from your LinkedIn profile and to show that you control it. Connecting LinkedIn is optional.

What we receive from LinkedIn. We receive what you approve on LinkedIn's own consent screen when you connect. Depending on the permissions you approve and that LinkedIn makes available to us, this may include:

• your LinkedIn member identifier, name, profile photo and primary email address;
• your headline, current and past positions, organisations, education, location and public profile address;
• your LinkedIn verification status, such as whether LinkedIn has verified your identity or your workplace; and
• other profile details that LinkedIn shows on its consent screen at the time you connect.

How we use it.

• to fill in your record for you to review and edit;
• to confirm that you control the LinkedIn account, and to show on your record the verification that LinkedIn or you have established;
• to keep your record up to date with your LinkedIn profile when you choose to refresh it; and
• to keep the connection working and to protect your account.

You can edit or remove anything from LinkedIn on your record in Studio.

How long we keep it. We keep the connection while it is active. When it ends, we stop accessing your LinkedIn account and delete or de-identify the information we hold from it within a reasonable period, except where we must keep a record for legal reasons. What you published on your record stays until you edit or remove it in Studio.

How to disconnect. Disconnect at any time in Studio under Profile sources, or revoke our access in LinkedIn under Settings & Privacy, Data privacy, Permitted services.

We use personal information to:

• Provide SelfSummary: create your account, publish and display your record, deliver enquiries to you, and run Studio. Legal basis: performance of our contract with you.
• Verify records: check the evidence you submit and show the marks it earns. Legal basis: contract, and your consent where the law requires it.
• Keep SelfSummary safe: prevent fraud, spam, impersonation and abuse, and enforce our Terms. Legal basis: our legitimate interests in a trustworthy service.
• Improve SelfSummary: understand how the product is used and fix problems. Legal basis: legitimate interests, or consent for analytics cookies.
• Communicate with you: send sign-in codes, service and billing messages, and replies to your requests. Legal basis: contract and legitimate interests.
• Meet legal obligations: tax, accounting, and responding to lawful requests. Legal basis: legal obligation.

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time (section 15). Where we rely on consent, you can withdraw it at any time without affecting what happened before.

• Ask: a visitor can ask a question about a record. The answer is based on what that record publishes. Where the answer is generated, the question is processed by an AI service provider to produce it.
• AI visibility checks: if you run a check, we ask AI assistants questions about the name and details published on your record and show you what they say.
• Drafting help: AI can help you draft or tidy your record. You decide what is published.

AI output can be wrong. Review anything AI drafts before you publish it.

A published record is public. It can be read by anyone, indexed by search engines, and read by AI assistants, and it is published in formats that help them read it accurately. Others may copy or cache what is public, and we cannot control copies held elsewhere. Publish only what you are comfortable sharing, and remember you can change or unpublish your record at any time.

Some records are created before the person or organisation they describe has claimed them, using information that is already public or that someone has submitted. We do this to give people and organisations an accurate, sourced account of their public role. Legal basis: legitimate interests.

If a record is about you, you can:

• claim it and take control of what it says;
• ask us to correct it, remove a photograph, or delete it entirely; or
• object to it being published.

To do any of these, send a request. If someone is pretending to be you, use the report link on the record.

We share personal information as described here:

• With the public: whatever is published on a record.
• With a record's owner: the enquiries a visitor sends them.
• With organisation administrators: for people listed on an organisation's record.
• With service providers who process it on our behalf and under our instructions, bound by contract to protect it: cloud hosting and storage, content delivery and security, email delivery, payment processing, sign-in, AI models, customer support, analytics and advertising.
• For legal reasons: to comply with law or a valid legal request, or to protect the rights, safety and property of our users, the public or SelfSummary.
• In a business transfer: if we are involved in a merger, acquisition or sale of assets, subject to this policy.

Paid plans are billed through Stripe. Stripe collects and processes your card details. We receive a record of the payment, such as the amount, date, plan and the last four digits of the card. You can view invoices or cancel from Studio, Settings, Manage subscription.

If you sell through your record, payments are processed by your own connected payment account. That provider handles the buyer's payment details under its own privacy policy, and SelfSummary is not a party to the sale.

We use cookies and similar technologies that SelfSummary needs to work, such as keeping you signed in and protecting forms from abuse. With your consent where the law requires it, we also use analytics to understand how SelfSummary is used and to improve it.

Advertising. SelfSummary uses Google AdSense. Google and its partners may use cookies, web beacons and similar technologies to serve and measure ads, including ads based on your visits to this and other sites. Where the law requires it, you are asked first. See how Google uses data from sites that use its services, and manage ad personalisation in My Ad Center.

You can change your choice at any time from Privacy choices in the footer of every page, or here: Privacy choices.

We operate internationally, so personal information may be handled in a country other than yours, including countries whose data protection laws differ from your own. Where we transfer it out of a jurisdiction that restricts such transfers, we use a lawful transfer mechanism recognised there, such as standard contractual clauses.

We keep personal information as long as we need it for the purpose it was collected for, and then delete or de-identify it. Account information is kept while your account is open. Information from a connected account is kept while the connection is active. Messages you send us are kept while we deal with them and for a reasonable period afterwards. Where a law requires us to keep a record for a set period, or where information is relevant to a legal claim, we keep it for as long as that requires.

We use technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration and loss. No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authority where the law requires us to.

Depending on where you live, including under the GDPR, the UK GDPR and the data protection laws of the UAE and Saudi Arabia, you have the right to:

• access the personal information we hold about you and get a copy;
• correct it if it is inaccurate or incomplete;
• delete it;
• object to or restrict how we use it, including objecting to a record about you;
• port it to another service in a machine-readable format; and
• withdraw consent at any time where we rely on it.

You can edit or delete your record and account yourself in Studio, Settings. For anything else, send a request. We may need to verify your identity before we act. We answer within the period the applicable law requires, and we do not charge for a request unless the law allows us to.

You can also complain to the data protection authority where you live or work.

SelfSummary is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, tell us and we will delete it.

We may update this policy as SelfSummary changes or as the law requires, and we will change the date at the top. If a change materially affects how we handle your personal information, we will give you notice by a reasonable means before it takes effect.

For any privacy question or request, email privacy@bqx1.com or use our data request form.

BQX, Dubai, United Arab Emirates.