Privacy policy

• Your account: email address, sign-in method, plan, and when you signed up and last used Geistra.
• What you save: Spaces, records and their history, files and pages, apps, tasks, saved conversations, and settings.
• Records of activity, for security and billing: who changed what, which AI app acted, and usage counts. We don't keep the content of your AI chats unless you save it.

People you invite to a Space see that Space, within the role you give them. Public links show only what you chose to share. Our service providers (Amazon Web Services for hosting and AI models, Supabase for sign-in, Stripe for payments, Cloudflare for the sign-in bot check; the full list is on the subprocessors page) process data on our behalf and can't use it for anything else. We don't sell data or use it to train AI models. Everything is stored and processed in the United States.

Geistra emails you invitations, handoffs and account notices. Every email has a link to stop all Geistra email to that address.

You can delete a Space or your whole account in Geistra at any time. Deleted data is removed from Geistra within an hour and from backups within 35 days. Changes you made in other people's Spaces stay in their history.

If you use Geistra for an organization, such as a law firm, the Data Processing Addendum also applies: we process its data only on its instructions, keep it confidential, and tell it within 72 hours of a confirmed breach.

Data is encrypted in transit and at rest. Every request is checked by Geistra before it touches data, and uploaded files are scanned for malware. See Security & privacy.