Terms of service

If you use Geistra for an organization, such as a law firm, you accept these terms for that organization and confirm you’re allowed to. “You” then means you and the organization (the “Customer”).

If the Customer has a separately signed agreement with us, that agreement takes priority wherever it differs from these terms.

You must give a real email address you control and keep your sign-in safe. You’re responsible for what happens in your account, including what the AI apps you connect do with the permissions you give them.

Everything you or your AI apps store in Geistra (“Customer Data”) belongs to you. We use it only to provide Geistra to you and the people you share it with, following your instructions. We act as your service provider (processor), as described in the Data Processing Addendum.

You can export your data, and delete a Space or your whole account, at any time.

We treat Customer Data as confidential. We don’t disclose it to anyone except the people you share it with and the service providers listed on our subprocessors page, who are bound to protect it and may use it only to run Geistra.

Our people access Customer Data only when you ask for support, to investigate security or abuse, or when the law requires it.

We don’t sell Customer Data, use it for advertising, or claim any rights over it, including any privilege or confidentiality you hold in it.

We never use Customer Data to train or improve AI models, and our AI model provider (Amazon Bedrock) doesn’t either.

Geistra’s own AI features (suggesting how to organize data, AI scheduled tasks, describing photos and summarizing documents) send the content they need to Claude through Amazon Bedrock, in United States regions only. The content isn’t shared with the model’s developer.

When you connect an AI app (such as ChatGPT, Claude or Gemini), it reads and changes your data as you, within the permissions you give it. The AI app’s provider is your choice, not our subprocessor. What that provider does with data it receives is governed by your agreement with it, including whether it may train on your conversations.

For confidential or client work, use an AI plan whose terms meet your obligations, such as a business or enterprise plan.

Customer Data is stored and processed in the United States, in Amazon Web Services’ US regions. Data may pass through AWS’s global network on its way to you, encrypted.

We protect Customer Data with the measures in the Data Processing Addendum: encryption in transit and at rest, permission checks on every request, malware scanning of uploads, an audit trail of changes, and daily backups.

If we confirm that Customer Data was accessed without authorization, we’ll tell you without undue delay, and within 72 hours. We’ll tell you what happened and what we’re doing about it.

If a government or other third party asks us for Customer Data, we’ll refer them to you. If we’re legally required to respond, we’ll tell you first unless the law forbids it, and disclose only what we must.

You must follow the Acceptable Use Policy and the law.

You’re responsible for the data you put in Geistra, for having the right to store it, and for your own professional obligations. For a law firm, that includes client confidentiality and any client consent your rules require.

We may suspend an account, freeze a Space, or take down a public link or page that breaks the policy, without notice when that’s needed to protect people or Geistra.

Each plan has limits (storage, Spaces, AI use, email and others), shown in Geistra. When you reach one, Geistra stops adding more until you free space or upgrade. It never deletes your data because you reached a limit.

Paid plans are billed in advance, plus any extra usage up to the limit you set. You can cancel anytime, and a canceled plan keeps working until the end of the period you paid for.

You can stop at any time by deleting your account.

We may end the agreement with 30 days’ notice, or at once for a serious breach of these terms.

When the agreement ends, you have 30 days to export your data, unless you deleted it yourself. After that we delete it. Deleted data leaves Geistra’s live systems within an hour, and our backups within 35 days.

We’ll defend you against a third party’s claim that Geistra itself infringes their intellectual property, and pay what a court awards or we agree to settle.

You’ll defend us against a third party’s claim arising from the data you store, or from your use of Geistra in breach of these terms or the law, and pay what a court awards or you agree to settle.

The side being defended must tell the other promptly and let them control the defense.

We work to keep Geistra running and your data safe, but it’s provided as is, without guarantees of uninterrupted service.

Neither side is liable for indirect or consequential losses, or lost profits. Each side’s total liability is limited to what you paid us in the 12 months before the claim. These limits don’t apply to the indemnities above, or to a breach of the confidentiality section.

We may update these terms. For material changes we’ll tell you in Geistra or by email before they take effect, and ask you to agree again. If you don’t agree, you can export your data and close your account.

Utah law governs these terms, apart from its conflict-of-laws rules. Any dispute goes to the state or federal courts in Salt Lake County, Utah, and both sides agree to their jurisdiction.