Privacy Policy

This Privacy Policy describes how SumHubs collects, uses, discloses, and protects personal information in connection with the Service. It applies to Enterprise Users, such as schools, districts, organizations, service providers, and businesses using SumHubs under enterprise accounts, and End Users, such as students, parents, educators, and consumer mobile app users.

By using the Service, you consent to this Policy and acknowledge that it forms part of the Terms of Service.

We process information to:

• Provide, secure, and improve the Service.
• Manage accounts for students, educators, and enterprise clients.
• Authenticate logins and detect fraud.
• Support compliance with Applicable Laws, including FERPA, COPPA, ADA, GDPR, and CCPA.
• Process payments and enforce account rules.
• Communicate updates, notices, and support responses.

Where required under GDPR and equivalent laws, processing is based on:

• Performance of a contract, including providing the Service.
• Compliance with legal obligations.
• Legitimate interests, including security, fraud prevention, and product improvement.
• Consent, where expressly required.

Requests can be made to support@sumhubs.com.

We implement industry-standard safeguards, including:

• Encryption in transit and at rest.
• Role-based access controls.
• Administrative audit logging.
• Incident response procedures, including GDPR notification timelines where applicable.
• SOC 2 readiness for secure hosting.

We do not sell personal data. We may disclose information only to:

• Trusted service providers, including hosting, payments, and analytics providers, bound by contractual safeguards.
• Affiliates under common corporate control.
• Regulators, law enforcement, or competent authorities where legally required.
• Successors in business transfers, including mergers or acquisitions.

Enterprise Users offering services through SumHubs must comply with marketplace rules. SumHubs may suspend or remove Enterprise accounts for fraud, scams, or unlawful conduct. Enterprise Users are responsible for refunds and chargebacks.

For transfers outside the European Economic Area, United Kingdom, or Switzerland, SumHubs relies on legally recognized safeguards, including:

• Standard Contractual Clauses.
• UK Addendum or International Data Transfer Agreement.
• EU-U.S. Data Privacy Framework where applicable.
• Other legally recognized safeguards.

When acting as a data processor on behalf of an Enterprise User, SumHubs processes personal data in accordance with a Data Processing Addendum, available upon request. The DPA specifies roles, responsibilities, sub-processor disclosures, and transfer mechanisms.

The Service may integrate with third-party services, including hosting, analytics, payments, and platform APIs. SumHubs is not responsible for failures, security vulnerabilities, or damages caused by third-party services.

SumHubs is committed to accessibility and works to support WCAG 2.1 AA, ADA, and Section 508 standards where applicable.

We use cookies and tracking technologies for authentication, analytics, and fraud prevention. Users may be presented with a Cookie Policy and consent manager for non-essential cookies, including analytics or advertising cookies.

SumHubs may update this Policy from time to time. Notice may be provided via email, in-app alerts, or posting on our website. Continued use of the Service after updates constitutes acceptance.

This Policy is drafted in English. Any translations are provided solely for convenience. In the event of conflict, the English version controls.