Privacy Policy

Last updated 2026-10-03

This Policy describes what data the Gista service collects, why, on what basis, and with whom it is shared. We aim to collect only what is necessary.

1. Who processes the data

The controller of your data is the entity providing the Gista service (the “Operator”). For questions about data processing and the exercise of your rights, contact support@gista.ai.

2. What data we collect

Email address — for sign-in and notifications.

Telegram data (chat identifier and username) — to deliver monitorings and digests to your direct messages.

Radar, monitoring, and digest settings — the lists of public channels, the entities you mark for tracking, the interests you describe, thresholds, and schedule.

Support requests — the text of your conversation with the support bot in Telegram and the chat identifier, so we can reply and investigate the issue.

Usage statistics — which posts were scored and with what score, to show in your dashboard and improve selection quality.

Technical data — request logs, IP address and the approximate country derived from it, the date you last opened the dashboard, and basic information needed to operate, analyze sign-ins, and secure the Service.

3. Information from public posts

The Service processes posts from public Telegram channels, which may mention people — for example, company executives and public figures. Names, event type, and the sentiment of the mention are extracted from the posts; the source remains the public post, and a link to it is kept.

If you believe information about you is being processed unlawfully, contact support@gista.ai and we will review your request within a reasonable time.

4. Cookies

We use strictly necessary cookies for authentication and to maintain your session — without them signing in is impossible.

We set analytics cookies only with your consent (the banner shown on your first visit): they help us understand how the site is used, via the PostHog service. Without consent, analytics stores no cookies. We do not set third-party advertising cookies.

5. Why we use it

To provide the Service: collect posts, score and label them, build Radar dashboards, and build and deliver monitorings and digests on your schedule.

To maintain your account, show statistics, and ensure security.

We do not sell your data and do not use it for third-party advertising.

6. Legal bases

Processing is carried out to perform our agreement with you (providing the Service) and on the basis of your consent, given at registration. You may withdraw consent by deleting your account.

7. Who we share data with (processors)

We engage third-party providers that process data on our behalf: Supabase (authentication and database), Vercel (application hosting), Google (Google sign-in), language-model providers — DeepSeek and Google as of the revision date (scoring and labelling posts, support bot replies), GitHub (running background collection and processing jobs), Resend (sending email), Telegram (fetching public posts, delivering monitorings and digests, the support bot), Sentry (error logs), Linear (tracking support requests), PostHog (site usage analytics — only with your consent). This list may be updated as the Service evolves.

Some providers' servers are located outside your country, so data may be transferred and processed abroad.

Post texts, the interests you describe, and your support requests are sent to the language model solely for scoring, labelling, and preparing a reply. We do not instruct providers to use this data to train models.

8. How long we keep it

Account data and settings are kept while your account exists. Run statistics are retained for a limited time for display in your dashboard. After account deletion, related data is deleted or anonymized within a reasonable period, except information we are required to retain by law.

9. Your rights

You have the right to access your data, correct it, delete your account, withdraw consent, and object to certain types of processing. Some actions are available directly in the dashboard; for others, contact support@gista.ai.

10. Children's data

The Service is not intended for persons under 18, and we do not knowingly collect their data. If such data reaches us by mistake, contact support@gista.ai and we will delete it.

11. Security

We apply reasonable technical and organizational safeguards. Complete security of data transmission over the internet cannot be guaranteed; please keep access to your email and Telegram secure.

12. Changes and contact

When the Policy is updated, the revision date changes; we notify you of material changes when you sign in. Questions about data processing and the exercise of your rights — via support@gista.ai.