Privacy Policy

1. Information We Collect

We collect information in the following ways:

• Account Information: When you sign in via Google OAuth, we receive your name, email address, and profile picture. Magic Link sign-in provides your email address only.
• Usage Data: We collect usage analytics via Google Analytics (GA4) and Microsoft Clarity, including pages visited, features used, and session duration. Clarity may record anonymized session replays and heatmaps to help us improve the user experience.
• Error Data: We use Sentry and Google Analytics to capture application errors and performance data to improve reliability.
• User-Generated Content: Feedback, saved reports, and watchlist preferences you create within the platform.

2. How We Use Your Information

• Authenticate your identity and maintain your session
• Provide personalized market intelligence and company analysis
• Improve platform features and fix bugs via anonymized analytics
• Send transactional emails (sign-in links, account notifications)
• Enforce rate limits and prevent abuse

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Data Sources

Gist Intelligence aggregates data from multiple public, legal data sources including government databases, financial data providers, and news services. All data is obtained through documented public APIs in compliance with their terms of service. We do not scrape or access any protected or paywalled content.

4. AI-Generated Content

Our platform uses AI models to generate analysis, summaries, and insights. AI-generated content may be processed by third-party AI providers subject to their respective privacy policies. We do not send your personal information to AI models — only public financial data is used as input.

5. Cookies & Tracking

We use the following cookies:

• Authentication cookies: Essential for maintaining your login session (NextAuth.js).
• Google Analytics cookies: _ga, _ga_* — used for usage analytics. These are first-party cookies set by Google Analytics 4.
• Microsoft Clarity cookies: _clck, _clsk — used for behavior analytics including session replays and heatmaps.

You can disable analytics cookies in your browser settings. Essential authentication cookies are required for the platform to function.

6. Data Storage & Security

Your data is stored securely on Supabase (PostgreSQL) and Google Cloud Platform infrastructure, both located in the United States. We use encryption in transit (TLS/HTTPS) and follow industry-standard security practices. Access to production databases is restricted to authorized personnel only.

7. Data Retention

• Account data: Retained as long as your account is active. You may request deletion at any time.
• Analytics data: Google Analytics data is retained for 14 months, then automatically deleted.
• Cached reports: AI-generated analyses are cached for 6–168 hours depending on the data type, then refreshed.
• Error logs: Sentry error data is retained for 90 days.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of analytics tracking
• Export your data in a portable format

To exercise any of these rights, contact us at info@thegistnews.tech. We will respond within 30 days.

9. Children's Privacy

Gist Intelligence is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: info@thegistnews.tech