Mike Privacy Notice
Effective October 20, 2026
This is the privacy notice for Mike, which Summation Technologies, Inc. provides. It explains how we handle personal data in Mike, including data from a Google or Microsoft 365 account you connect. Summation's Privacy Policy covers summation.com and Summation's other products, not Mike.
1. Who we are and what this covers
Mike is provided by Summation Technologies, Inc. ("we", "us"). This notice applies to mikecheck.legal: the landing page, the early access request form and the Mike app, including sign-in through agent.cloud. Mike is offered only to businesses in the United States.
We act in two roles:
- For your company. When your company uses Mike, we handle the mail and documents Mike reads on your company's behalf, under our terms with it.
- For ourselves. We decide how we use account details, billing records, logs and early access requests, as this notice describes.
2. What we collect
| When | What we collect |
|---|---|
| You visit the site | A count of visits per day and campaign, and which steps of the page's demo were opened. These counts hold no personal data. The site runs no advertising or analytics trackers. Some pages load fonts from Google Fonts, which receives your IP address. We use cookies only to keep you signed in and the app working. Our servers also log IP addresses and browser details to keep the site secure. |
| You request early access | Your name, title, company and work email, plus the campaign tags, referring page and page path of your visit. |
| You sign in | Your email address, your organization, your role in it and your sign-in times. When you accept our terms: which version and when. |
| You invite someone | Their email address and the role you give them. |
| You connect Google or Microsoft 365 | Your account email and the access tokens Google or Microsoft issues, which we store encrypted. We never see your password. |
| Mike builds Recall | Mail and files in Google Drive or OneDrive that look like commercial agreements: message details and text, attachments, and PDF and Word files. From these Mike keeps copies of the agreements, page images of signed copies, and the terms and quotes it extracts. |
| You send Mike a contract | The forwarded message's sender, recipients, subject and date, and its attachments, or the file you upload. Mike does not read the body of your forward. The forward also arrives in Mike's own mailbox, hosted by Google Workspace, where Mike does not read it. Also Mike's review, the draft reply Mike writes into your mailbox, and later versions of the contract the other side sends in that thread. |
| You name people to send questions to | Their names and email addresses, the questions Mike drafts to them, and their answers in those threads, except answers from your outside counsel, which Mike does not open. |
| You upload insurance documents | The certificates or policy pages, and the coverages and limits Mike reads from them. |
| You use the app | Your decisions on Mike's proposals, your questions to Mike and its answers, your settings, and logs of errors and timings. |
| You add a card | Your organization's billing contact and invoice history. Our payment processor collects the card details; we never see the full card number. |
Mail we do not open. Mike does not open mail to or from your outside counsel, meaning the domains you list in settings and the person you name as outside counsel. That includes counsel's replies to questions you send through Mike: Mike notes that counsel replied and links to the thread, without opening it. Mike can recognize only counsel you list, and only from the time you list them, so list them when you set up your company, before anyone connects a mailbox.
Documents we do not keep. When Mike identifies a file as something other than a commercial agreement, such as HR, financing or lease documents, it deletes its copy and keeps only a note of the file and that it was skipped. Mike may read part of a file to make that call.
Other people in your documents. Agreements and mail name other people, such as signers and contacts at the other company. Mike processes those details as part of the documents and does not use them for anything else. The Google or Microsoft tokens we store are account credentials, which some state laws treat as sensitive personal data; we use them only to run the features you ask for. We do not ask for other sensitive personal data, and if a document contains it, Mike processes it only as part of that document. We use sensitive personal data only for purposes those laws allow, so there is no right to limit it.
3. How we use it
- Early access requests: to decide on your request, tell you the result, and contact you about Mike. You can ask us to stop at any time.
- Account details: to sign you in, run your organization, keep a record that you accepted our terms, and send service emails, such as the one that says Recall is ready.
- Mailbox data and your documents: only to provide the features you see. Those are finding your agreements, building Recall, reviewing contracts you send, answering your questions, and writing draft replies and questions.
- Payments: our payment processor handles your card. We keep the invoice record, never the full card number.
- Logs: to keep Mike secure, fix problems and improve it. Logs do not hold the text of your documents.
Google user data. Mike's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. It will also adhere to the Google Workspace user data and developer policy. In practice:
- We use Google data only to provide the Mike features you see.
- We transfer it only to the providers in Section 4 that need it to run those features, where the law requires, or, with your explicit consent first, as part of a change of ownership described in Section 4.
- We do not use it for advertising and do not sell it.
- We do not use it to train generalized AI or machine learning models.
- No person at our company reads it unless you give permission for specific items, it is needed to investigate a security incident or abuse, or the law requires it.
What Mike does in your mailbox. Mike reads mail and files and creates drafts. It does not send email, and it does not delete or change your existing mail or files. The permissions Google and Microsoft grant are broader than that: Google's drafts permission includes sending, and Microsoft's mail permission includes changing and deleting mail. Mike never asks Microsoft for permission to send. We hold data from Microsoft 365 to the same commitments as Google data.
AI. Mike sends the text of agreements and related mail to Anthropic, our AI model provider, to sort documents, extract terms and write reviews. We do not use your content to train AI models, and Anthropic's terms prohibit it from doing so. Anthropic keeps inputs and outputs only briefly under its commercial terms, and longer only if they are flagged for a Usage Policy violation or the law requires. Mike's output can be wrong. You decide what to act on, and Mike makes no decision about you automatically.
4. Who we share it with
- Providers that run Mike. Mike runs on agent.cloud, our own platform, which also handles sign-in. Our providers are an AI model provider (currently Anthropic), the cloud provider agent.cloud runs on (currently Google Cloud), Google Workspace, which hosts Mike's forwarding mailbox, an email delivery provider, and a payment processor (currently Stripe). Each is under contract to use the data only to provide its service to us, except that Stripe also uses payment data under its own privacy policy, for example to prevent fraud. We will email organization owners at least 14 days before adding a provider that handles the content Mike reads.
- Google and Microsoft. Draft replies and questions are written back into your own mailbox through Google or Microsoft.
- People in your organization. Members of your organization in Mike can see its Recall, contracts and reviews. That includes agreements Mike found in the mailbox and files of any member who connected one.
- The law and safety. We disclose data where the law requires it. We may also disclose account details, but never mail or files from a connected account, where needed to protect people or the service. Where the law allows, we tell you first.
- A change of ownership. If Mike moves to another company in a merger, reorganization or sale, your data moves under the same commitments, and we will tell you. We will not transfer data received from Google APIs in such a deal without your explicit consent first.
We do not sell personal data and do not share it for advertising. No advertising or analytics partner receives data from the Mike app. Other customers never see your data.
5. How long we keep it and how we protect it
| Data | How long we keep it |
|---|---|
| Files that are not commercial agreements | Deleted as soon as Mike identifies them |
| Agreements, Recall, reviews and insurance documents | Until you delete them or our terms with your company end, then deleted within 30 days |
| Account details and settings | For the life of your account, then deleted within 30 days |
| Google and Microsoft access tokens | Deleted when you disconnect that mailbox, are removed from your organization, or your organization's data is deleted |
| Logs of errors and timings | As long as needed to keep Mike secure and fix problems, then deleted |
| Records that you accepted our terms | For as long as the terms are in force, and 6 years after |
| Invoice records | As long as tax and accounting law requires |
| Backups | Overwritten within 90 days |
| Early access requests | 12 months if you are not invited; for the life of your account if you are |
| Requests that look automated | 30 days |
We may keep data longer where the law requires it.
Security. Data is encrypted in transit. Google and Microsoft tokens are encrypted where they are stored. Access to the systems that hold your data is limited to the people who need it to run Mike. Mike is a pre-release product, and no system is perfectly secure. If we learn of unauthorized access to your data, we will tell you without undue delay. For your company's content, we will tell your company within 72 hours of confirming it.
6. Your choices, contact and changes
In the app. In settings you can disconnect a mailbox, list outside counsel domains Mike must not open, and, as your organization's owner, delete everything Mike holds for it.
At Google or Microsoft. You can remove Mike's access at any time from your Google account's third-party access page or your Microsoft account's app permissions. This stops Mike reading new mail but does not delete what Mike already holds; to delete that, use settings or email privacy@summation.com.
Early access requests. Email privacy@summation.com to see, correct or delete what you submitted, or to stop hearing from us about Mike.
Privacy rights. Depending on where you live, you may have the right to know what personal data we hold about you, get a copy, correct or delete it, and appeal if we turn down your request. Email privacy@summation.com to use these rights. We will confirm who you are, answer within 45 days, and not treat you differently for asking. You may act through an authorized agent. We do not sell or share personal data, use it for targeted advertising, or profile people to make decisions about them, so there is nothing to opt out of. Mike does not track you across other sites, so it does not respond to Do Not Track signals.
If you appear in someone else's documents. If your details are in an agreement or email that a Mike customer holds, contact that company. We will help it respond.
Children. Mike is for businesses and is not for anyone under 18.
Changes. We will email organization owners at least 30 days before a material change to this notice takes effect, and update the date at the top. Smaller changes take effect when we post them.
Contact. privacy@summation.com, or Summation Technologies, Inc., Attn: Privacy, 2620 Bellevue Way NE, Unit 280, Bellevue, WA 98004.