Privacy Policy

Last Updated: 2026-03-10

1. Introduction

Welcome to Giti ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how Giti collects, uses, and protects your information when you use our interactive 3D news visualization platform and outlines your privacy rights.

2. Data We Collect

We collect, use, store, and transfer different kinds of personal data:

• Identity & Profile Data: Username, subscription tier, save preferences, and account IDs (via Supabase).
• Contact Data: Email address.
• Technical Data: IP address, browser type and version, time zone, operating system, and platform.
• Usage Data (Analytics): Information about how you use our globe, article interactions, and feature usage (via PostHog).
• Transaction Data: Details about subscription payments (processed entirely by Lemon Squeezy; we do not store credit card details).
• AI Interaction Data: Prompts, chat history, and contextual news articles sent to our AI processors to generate summaries or responses.

3. How We Use Your Data

We use your personal data in the following circumstances:

• Service Delivery: To provide the interactive news experience, authenticate you, and manage your subscription.
• Payment Processing: To process orders, upgrades, and renewals (via our Merchant of Record, Lemon Squeezy).
• Improvement: To analyze usage (with your consent) to improve our products, features, and user experience.
• AI Processing: To fulfill your requests for AI-generated news summaries and audio briefings.

4. Cookies and Consent

We use cookies to ensure the basic functionality of the platform.

• Essential Cookies: Required to maintain your logged-in session, security tokens, and application state.
• Analytics Cookies (Consent Required): We use PostHog to understand user interactions. These are only activated if you provide explicit consent via our cookie banner.

5. AI Processors & Third-Party Sharing

To provide our core features, we share specific data with trusted processors:

• Google Gemini: Your chat prompts, selected news articles, and context are sent to Google Gemini to generate summaries and responses. Data sent to Gemini is not used by Google to train their foundational models (per their enterprise API terms).
• ElevenLabs: Text to be converted into audio briefings is sent to ElevenLabs.
• Supabase: Secure authentication and database hosting.
• Lemon Squeezy: Payment and subscription management.
• PostHog: Product analytics (if consent is given).

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which we collected it.

• Account Data: Kept for the duration of your active account. If your account is inactive for 24 months, it may be scheduled for deletion.
• AI Chat Logs: Kept for up to 30 days for abuse monitoring and service improvement, then permanently deleted or anonymized.
• Analytics Data: Retained for up to 14 months.

7. Data Deletion & Export Workflow

You have the right to control your data:

• Deletion: You can permanently delete your account and associated data directly from your Account Settings page. This action is irreversible and triggers a cascading delete in our database.
• Export: You can request an export of your personal data by contacting support. Exports are provided in a machine-readable format (JSON) within 30 days.

8. International Transfers (Cross-Border)

Giti operates globally. To provide our Service, your personal data may be transferred to, and processed in, the United States and other countries outside your jurisdiction (e.g., the European Economic Area). When we transfer data internationally, we ensure appropriate safeguards are in place, relying on adequacy decisions or Standard Contractual Clauses (SCCs) with our third-party processors.

9. Security

We enforce strict security measures, including HTTPS/TLS encryption, server-side entitlement checks, and distributed rate-limiting, to prevent unauthorized access, alteration, or disclosure of your data.

10. Your Rights (Applicable under GDPR, CCPA, etc.)

Depending on your location, you may have the right to:

• Access & Export: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data ("Right to be forgotten").
• Object/Restrict: Object to or restrict the processing of your data.
• Withdraw Consent: Withdraw analytics consent at any time via your settings.

11. Minors Policy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to remove that information and terminate the account.

12. Contact Us

For any privacy-related requests or questions: Email: privacy@giti.live