Privacy Policy

Last updated: March 2, 2026

Introduction

Gipity ("we", "our", "us") operates the gipity.ai platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.

Information We Collect

We collect information you provide directly: email address for authentication, display name (optional), and content you create through your AI agent (files, code, databases, conversations). If you sign in with Apple or Google, we receive your name, email address, and profile photo from those providers. We also collect technical data automatically: IP address (used for authentication logging, analytics, and geolocation), browser user agent, screen dimensions, browser language, referrer URL, and UTM campaign parameters. Usage data is tracked per operation, including token counts, credit consumption, model used, and cost. If you purchase credits or subscribe, payment is processed through Stripe. We do not store full payment card details on our servers.

Location Data

We collect location information in two ways. First, we may determine your approximate location from your IP address using a third-party geolocation service (ip-api.com). Second, if your AI agent uses the location tool, your browser may share precise GPS coordinates with your permission; these are reverse-geocoded via OpenStreetMap (Nominatim) to determine your city and region. Location data is stored in your account and used to provide location-aware agent responses. You can decline browser location prompts at any time.

Analytics

When you load the application, a lightweight analytics beacon is sent to our servers. This beacon includes your IP address, referrer URL, browser user agent, screen dimensions, browser language, and any UTM parameters from the page URL. If you are logged in, this data is associated with your user account. We do not use third-party analytics services, advertising trackers, or tracking pixels.

Agent Memory and Conversation Data

Your AI agent automatically extracts and stores relevant facts from your conversations as persistent memory to improve future interactions. This includes both agent-level memory (personal to your agent, available across all projects) and project-level memory (shared across agents in a project). Conversation histories, including messages and tool usage, are stored in our database and as session transcript files on our servers. We generate vector embeddings from your memory entries using OpenAI to enable semantic search. You can view, edit, and delete agent and project memories at any time through the platform.

How We Use Your Information

We use your information to: provide and maintain the Gipity platform; authenticate your identity and prevent fraud; deliver AI agent services including code execution, file management, database access, app hosting, image generation, text-to-speech, audio services, web and social media search, and workflow automation; process payments and manage credit balances; track usage and enforce resource limits; analyze platform usage patterns to improve our services; and communicate important updates. We process your data on the legal basis of contract performance (providing the services you signed up for), legitimate interest (analytics, security, fraud prevention), and consent (optional features like location sharing).

Data Storage and Security

Your data is stored on cloud infrastructure in the United States. Agent workspaces and databases are isolated per user. Code execution occurs in sandboxed containers with no network access, memory limits, and dropped privileges. We use JWT-based authentication with short-lived access tokens (15 minutes) and refresh tokens (7 days). All data in transit is encrypted via TLS.

Third-Party Services

We use third-party services to provide platform features: Anthropic and OpenAI for AI language models, image generation, and text embeddings; BFL/Flux for image generation; ElevenLabs for text-to-speech, sound effects, music generation, audio transcription, and audio isolation; Brave for web search; X/Twitter API for social media search; ip-api.com for IP geolocation; OpenStreetMap/Nominatim for reverse geocoding; Stripe for payment processing; SendGrid for email delivery; and Apple/Google for OAuth authentication. Your conversations and file content are sent to AI providers (Anthropic, OpenAI) for processing. Your data shared with these services is governed by their respective privacy policies.

Device Sync

If you use the Gipity Uploader desktop application to sync files from your device, we collect file metadata (names, paths, sizes, modification dates), content hashes for change detection, and file contents for files you choose to sync. File data is transmitted over encrypted connections and stored in your isolated workspace. You control which folders are synced and can disconnect your device at any time.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. You can delete your agent workspaces, projects, memories, and databases at any time through the platform. You may export your data before deleting your account. Account deletion removes all associated data including files, databases, conversations, memories, workflows, and deployed applications.

Data Retention

We retain your data for as long as your account is active. Conversation histories and agent memories persist until you delete them. Credit transaction records are retained for accounting and legal compliance purposes. Upon account deletion, we remove your data within 30 days, except where retention is required by law.

Cookies and Local Storage

We use browser local storage to maintain your session (authentication tokens, UI preferences). We do not use third-party tracking cookies or advertising trackers.

Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the platform. Continued use after changes constitutes acceptance.

Contact

For privacy-related questions, contact us at privacy@gipity.ai. See also our Terms of Service and Contact page.