Privacy Policy

This policy is maintained by Readlis to explain what data we collect, why we collect it, and how we protect it — across the Readlis web app (readlis.app), the Readlis browser extension, and the Readlis MCP server.

The short version

• We only collect what's needed to summarize a URL you paste or share and to run your account.
• We don't sell your data. We don't run ad trackers.
• The browser extension does not read arbitrary pages. It opens the URL you chose in a new Readlis tab.
• You can delete your account and all your summaries any time from the account page.

What we collect

Account data. When you sign up we store your email address and, if you sign in with Google or Apple, the identifier that provider returns. We use this to authenticate you and send transactional emails (password reset, receipts).

Content you submit. The URL, text, or file you send to Readlis, and the summary we generate from it. Summaries are stored under your account so you can revisit them from your library.

Billing data. If you subscribe, Stripe collects and stores your payment details on our behalf. We never see or store your card number. We store your Stripe customer ID, subscription status, and plan.

Operational logs. Standard server logs (IP address, timestamp, request path, error codes) retained for up to 30 days for debugging and abuse prevention.

The browser extension

The Readlis browser extension asks for three permissions and uses each one narrowly:

• activeTab — to read the URL of the tab you're on when you click the Readlis toolbar button. We do not read page content.
• contextMenus — to add "Summarize with Readlis" to the right-click menu. When you click it, we open a new tab at readlis.app/?url=… with the URL you selected.
• storage — reserved for local user preferences (currently unused). Nothing about your browsing is stored.

On youtube.com only, the extension injects a small "Summarize" panel under the video. The panel does not read the video content — clicking it opens a new Readlis tab with the YouTube URL.

The extension does not use analytics, telemetry, cookies, tracking pixels, remote code, or any third-party scripts.

The MCP server

If you enable the Readlis Model Context Protocol server, an AI client (Claude Desktop, Cursor, etc.) uses your personal API key to call thesummarize_url and search_library tools. Only requests signed with your key can read your library.

How we use it

• Provide the summarization service you asked for.
• Maintain your account, library, and subscription.
• Prevent abuse and enforce plan quotas.
• Send you transactional email (receipts, security alerts). No marketing without opt-in.

Who we share it with

Only the vendors required to run the service:

• Supabase — database and authentication.
• Stripe — payment processing.
• Google (Gemini) — AI generation of your summaries.
• Cloudflare — hosting and CDN.

We do not sell or rent your data. We do not share it for advertising.

Retention & deletion

Your summaries and account persist until you delete them. You can delete individual summaries in your library, or delete your entire account from/account — this permanently removes your library, summaries, API keys, and subscription record within 30 days.

Your rights

Under GDPR, CCPA, and similar laws you can request access to, correction of, or deletion of your data. Email privacy@readlis.app and we'll respond within 30 days.

Children

Readlis is not directed at children under 13. We do not knowingly collect data from them.

Changes

When we change this policy in a way that affects you we'll email account holders and note the change at the top of this page.

Contact

Questions: privacy@readlis.app. Security disclosures: security@readlis.app.