This Privacy Policy explains how DevMind Consulting LLC (“DevMind”, “we”, “us”) handles information when you visit gistrel.com (the “Site”) or use Gistrel, our personal reading assistant (the “Service”). Gistrel is in early access. We collect only what the Service needs to work for you.
1. This website
The public pages of the Site do not use advertising or analytics trackers. The Site is hosted by Cloudflare, which processes technical information such as your IP address, browser type and the pages requested in order to deliver the Site and protect it from abuse, under Cloudflare’s privacy policy. The Site loads fonts from Google Fonts and styling scripts from a public content delivery network, which may receive your IP address when your browser requests those files.
2. Your account and sign-in
You sign in to Gistrel with Google or X. We do not receive or store your Google or X password.
- Google sign-in. We receive your name, email address, profile picture and Google account identifier.
- X sign-in. We receive your X account identifier, name, username, profile image and, if you have one on file with X, your email address.
- Session cookies. When you sign in, the Service sets cookies that keep you signed in and protect against request forgery. They are strictly necessary and are not used for advertising or tracking across other sites.
3. Sources you connect
Gistrel reads content only from sources you choose to connect, and only with the permissions you grant. You can change these choices or disconnect a source at any time.
- X. With your permission, Gistrel uses read-only access to retrieve your bookmarks (and, if you turn it on, your likes), together with the content of those posts: text, author details, links, images and videos. Gistrel stores OAuth access and refresh tokens so it can keep your intake up to date. It never posts, likes, follows, sends messages or otherwise acts on your behalf.
- Hacker News, YouTube and web pages. When you save a link, or a saved post links to an article, discussion or video, Gistrel retrieves the publicly available page, comments or transcript in order to analyze it. Where Gistrel uses YouTube API Services, it is subject to the YouTube Terms of Service and the Google Privacy Policy.
4. What you save and tell us
The Service stores what you send it and what you create there, including saved items, collections, notes, search queries, interest settings and feedback such as “already knew”, “important to remember” or “not interesting”. From this, Gistrel builds a profile of the topics you follow and the ideas you already know, so it can tell you what is new to you. This profile is private to your account.
If you email us, we receive your email address and the contents of your message, and use them to reply and provide support.
5. How we use information
We use information to:
- provide the Service: collecting, analyzing, summarizing, organizing and searching the material you choose;
- personalize relevance, novelty and depth to your interests and feedback;
- keep the Service secure, debug problems and prevent abuse;
- communicate with you about your account, early access and important changes.
We do not use your information for advertising, and we do not sell it or share it for cross-context behavioral advertising.
6. AI processing
Gistrel uses third-party AI model providers to analyze content, for example to extract ideas from an article, read a video transcript or describe an image. We send these providers only the content and context needed for the task, through their business APIs, and they act as our service providers. We do not permit them to use your data to train their models where their terms give us that choice. AI output can be inaccurate; see our Terms of Service.
Public content, such as an article or a public post, may be analyzed once and the analysis reused across users. Your personal data, including which items you saved, your collections, notes and feedback, is never shared with other users.
7. Google user data
Gistrel’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in data only to create and secure your account and to contact you about the Service. We do not use it for advertising, do not sell it, do not allow humans to read it except with your consent, for security purposes or to comply with the law, and do not use it to train generalized AI models.
8. Sharing and disclosure
We do not sell or rent personal information. We share it only:
- with service providers that operate the Service for us, such as Cloudflare (hosting, database and storage), AI model providers (content analysis) and email providers, under confidentiality and data-protection obligations;
- with X, Google or YouTube to the extent needed to call their APIs on your behalf;
- when required by law, or to protect the rights, safety and property of DevMind, our users or others;
- in connection with a merger, acquisition or sale of assets, in which case we will require the recipient to honor this policy.
9. Retention and deletion
We keep your data while your account is active. When you disconnect a source, we delete its stored tokens and stop collecting from it; you can also ask us to delete the items it collected. When you delete your account, or ask us to by email, we delete your account data, connected-account tokens, saved items, notes and profile within 30 days, except where the law requires us to keep something longer. Backups are overwritten on a rolling basis.
Content from X is kept in line with the X Developer Agreement. If a post is deleted or made private on X, we remove it from your library when we learn of the change.
You can revoke Gistrel’s access at any time in your Google account permissions or in X under Settings → Security and account access → Apps and sessions.
10. Security
Data is encrypted in transit, and secrets such as OAuth tokens are stored with access limited to the Service. We use reasonable technical and organizational measures to protect information, but no method of transmission or storage is completely secure.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict certain processing. If you are in the European Economic Area or the United Kingdom, we process your information to perform our contract with you (providing the Service), for our legitimate interests (security and improving the Service), and with your consent where required. To make a request, email contact@devmind.llc. We will not discriminate against you for exercising these rights. You may also complain to your local data-protection authority.
12. Children
Gistrel is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
13. Changes
We may update this policy as Gistrel develops. When we do, we will change the “Last updated” date above, and we will notify signed-in users of material changes before they take effect.
14. Contact
DevMind Consulting LLC
Email: contact@devmind.llc