Privacy Policy

GossipAI ("we", "our", or "us") operates the GossipAImobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully. If you disagree with its terms, please stop using the Service.

We may collect the following categories of information:

• Account data: name, email address, and password (stored as a secure hash) when you register.
• User-generated content: message text or conversation excerpts you voluntarily paste into the app to receive AI suggestions.
• Usage data: agent mode selections, session timestamps, and feature interactions to improve the Service.
• Device data: device type, operating system version, and app version for debugging purposes.
• Log data: IP address, browser type, pages visited, and crash reports, collected automatically via standard server logs.

We do not collect the contact details (names, phone numbers, email addresses) of third parties mentioned in messages you analyse with GossipAI.

• To provide, operate, and maintain the Service.
• To process your AI requests and return results.
• To send transactional emails (e.g. password reset, summaries you explicitly request).
• To monitor and analyse usage for product improvement.
• To detect, investigate, and prevent fraudulent or illegal activity.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your message content for training AI models without your explicit consent.

User-submitted message text is sent to OpenAI's API to generate AI responses. OpenAI processes this data in accordance with their Privacy Policy. We use the API under a data processing agreement that prevents OpenAI from using your inputs to train their models (unless you separately opt in on OpenAI's platform).

Conversation history is retained on our servers to provide continuity across sessions. You may request deletion of your conversations or your entire account at any time by contacting us at privacy@gossip-ai.site. We will action deletion requests within 30 days.

We implement industry-standard security measures including TLS encryption in transit, bcrypt password hashing, and JWT-based authentication with short-lived access tokens. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

The Service uses the following third-party processors:

• OpenAI – AI inference (see Section 4).
• Railway – Cloud infrastructure and database hosting.
• Resend – Transactional email delivery.
• Expo / Apple / Google – Mobile app distribution.

Each processor is bound by a data processing agreement and applicable data protection law.

The Service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability.

To exercise these rights, email us at privacy@gossip-ai.site.

Our servers are located in the EU (Railway EU region). If you access the Service from outside the EU, your data may be transferred internationally. We take steps to ensure adequate protection is in place for such transfers, including standard contractual clauses where required.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after such changes constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us at: privacy@gossip-ai.site.