Privacy at Gephyr
Gephyr sits between AI assistants and your app. Data passes through, but very little stays. This page sets out what we keep and what we don’t, in plain words. The legal version is our privacy policy, and the technical detail is in the security overview.
What we promise
- We don’t know who your users are. Each user shows up as a pseudonymous ID, made by hashing your app’s user ID with a secret key. We never collect their names or email addresses, and never store your app’s raw user IDs.
- Each dashboard shows only its own app. Calls, feature requests, sign-ins and setup page visits count from when the app was made. Each app’s calls and visits carry its own id, so if an app is deleted and someone makes a new one at the same address, the new one starts with an empty dashboard and never sees the old app’s activity, even on the same day. Deleting an app also ends every sign-in to it at once and deletes its call records and setup page visits, and a new app at the same address starts with nobody signed in and none of the old app’s message board.
- We never store passwords. Users sign in on your own login page, or on a Gephyr sign-in page that sends the password straight to Firebase or Supabase. The one exception is an app with its own login and no OAuth. There the password passes through Gephyr once, over HTTPS, and is never stored or logged.
- We don’t log what people ask, or what your app answers. Each call record holds the action, outcome, timing and which assistant made it. It never holds the inputs, the response, tokens or keys.
- Your app’s tokens stay sealed. They’re encrypted at rest, decrypted only for the moment of a call, never logged and never sent to the AI assistant.
- No selling, no ads, no training. We don’t sell personal data, use it for advertising, or use your data or your users’ data to train AI models.
- Our AI features never see your users. Import, Test with AI and Gephyr AI suggestions use your actions, descriptions, notes, API docs and call counts. They never see who your users are, what they asked in chat or what your app answered, and they never call your API. The one exception is matching feature requests to your API, which you ask for: it sends the requests’ text, never who sent them.
- No cookies or trackers on gephyr.ai. We count visits ourselves, without cookies or third-party scripts. The ID we use changes every day and is never stored in the visitor’s browser. If the visitor’s browser sends Do Not Track or Global Privacy Control, nothing is counted.
Who’s in charge of your users’ data
You are. Gephyr processes it only to carry out the calls your users ask for, on your behalf. If you need a Data Processing Agreement, email hello@gephyr.ai.
What we keep, and for how long
| What | Kept for |
|---|---|
| Call records (action, outcome, timing, answer size, assistant, country) | 90 days, or until you delete the app |
| Receipts of approved Ask first actions (action, time, how it was approved, result, fingerprints of the inputs and of your API’s id, and for a price check whether the amounts matched, with no amount of its own; no user ID of any kind) | 18 months |
| A user’s sign-in to your app (with their tokens for your API) | Until they disconnect, you disconnect or block them, you delete the app, or 90 days without use |
| A record that a user signed in (their anonymous ID, when, and which assistant; no tokens) | 90 days after the sign-in ends, for your dashboard |
| A user you block (their anonymous ID only) | Until you unblock them or delete the app |
| Feature requests users choose to send (up to 280 characters; on unless you turn them off) | 90 days |
| Website visit counts | 90 days |
| Monthly call totals per workspace, for billing | As long as the workspace exists |
Feature requests are the one place users’ own words are stored, as written, so that you can see what they wanted. They’re not linked to anyone’s identity. To turn them off, untick Let AI agents record feature requests under How agents use your app on the Actions tab, then publish.
Asking about your data
Email hello@gephyr.ai to see, correct or delete your data. If you’re an end user, we may pass your request to the app company, since it’s in charge of your data. Anyone can disconnect a connector from their assistant at any time. It stops working on the next request.
Something missing or wrong? Email hello@gephyr.ai.