Privacy Policy
Last updated 2026-06-14
This Policy describes what data the Gista service collects, why, on what basis, and with whom it is shared. We aim to collect only what is necessary.
1. Who processes the data
The controller of your data is the entity providing the Gista service (the “Operator”). For questions about data processing and the exercise of your rights, contact support@gista.ai.
2. What data we collect
Email address — for sign-in and notifications.
Telegram data (chat identifier and username) — to deliver your digest to your direct messages.
Digest settings — the public channels you track, the interests you describe, thresholds, and schedule.
Usage statistics — which posts were scored and with what score, to show in your dashboard and improve selection quality.
Technical data — request logs, IP address and the approximate country derived from it, and basic information needed to operate, analyze sign-ins, and secure the Service.
3. Cookies
We use strictly necessary cookies for authentication and to maintain your session — without them signing in is impossible. We do not set advertising or third-party tracking cookies.
4. Why we use it
To provide the Service: collect posts, score them, build and deliver your digest on schedule.
To maintain your account, show statistics, and ensure security.
We do not sell your data and do not use it for third-party advertising.
5. Legal bases
Processing is carried out to perform our agreement with you (providing the Service) and on the basis of your consent, given at registration. You may withdraw consent by deleting your account.
6. Who we share data with (processors)
We engage third-party providers that process data on our behalf: Supabase (authentication and database), Vercel (application hosting), Google (Google sign-in and post scoring by the Gemini language model), Resend (sending email), Telegram (fetching public posts and delivering the digest). This list may be updated as the Service evolves.
Some providers' servers are located outside your country, so data may be transferred and processed abroad.
The content of scored posts is sent to the language model solely to assess relevance and is not used to train it on our behalf.
7. How long we keep it
Account data and settings are kept while your account exists. Run statistics are retained for a limited time for display in your dashboard. After account deletion, related data is deleted or anonymized within a reasonable period, except information we are required to retain by law.
8. Your rights
You have the right to access your data, correct it, delete your account, withdraw consent, and object to certain types of processing. Some actions are available directly in the dashboard; for others, contact support@gista.ai.
9. Children's data
The Service is not intended for persons under 18, and we do not knowingly collect their data. If such data reaches us by mistake, contact support@gista.ai and we will delete it.
10. Security
We apply reasonable technical and organizational safeguards. Complete security of data transmission over the internet cannot be guaranteed; please keep access to your email and Telegram secure.
11. Changes and contact
When the Policy is updated, the revision date changes; we notify you of material changes when you sign in. Questions about data processing and the exercise of your rights — via support@gista.ai.