Privacy notice

Who is responsible

Mohsen Arjmandi, operating as Gelim, Schwindstr. 20, 80798 Munich, Germany, is responsible for the personal data processed for this website, your Gelim Account and the Gelim apps. Contact hi@gelim.ai or use our enquiry form.

What this notice covers

• gelim.ai, this website.
• Your Gelim Account: account.gelim.ai, and its sign-in pages at identity.gelim.ai. It holds your credit, your team and your access to AI models.
• The Gelim apps: Gelim for Mac, Gelim in the browser (gelim.ai/app), Gelim for iPhone with the Gelim keyboard, and the Gelim extension for Chrome.

Our server

The website, your Gelim Account and the Gelim apps all run on our own server, hosted by OVH SAS. Nightly backups are kept with OVH for 30 days, so something you delete can stay in a backup for up to 30 days. What is sealed in use, your chats and your cloud clipboard, stays sealed in the backups.

When you visit this website

Our server processes technical request information needed to deliver and protect the website. That includes your IP address, browser information, the requested page or file and the time of the request.

Our proxy writes no access log. The application logs record request identifiers, routes, status codes and timings, never content, and they rotate.

We rely on our legitimate interest in operating a reliable, secure business website under Article 6(1)(f) GDPR.

Our own site code does not run advertising trackers, set cookies or store form drafts in your browser. Fonts are served from our own server.

When you contact us

The enquiry form collects:

• your name and email address;
• what your message is about: Gelim, press, or something else;
• your message.

A broad source label from the enquiry link is recorded with the enquiry, together with the submission time, a reference and the processing status. The label comes from a fixed campaign code in a link, or from the referring website’s hostname, as a broad label such as search; never the full referring address. These details are saved in the website’s database on our server, so we can respond and manage the enquiry.

Email sent to hi@gelim.ai is forwarded through Porkbun.

Please do not include passwords, payment details, customer lists or sensitive personal information.

We use enquiry information to respond, and to discuss your request with you.

• Where the request concerns a contract with you, the legal basis is Article 6(1)(b) GDPR.
• For other business enquiries, including messages from business representatives, we rely on our legitimate interest in handling business communications, under Article 6(1)(f) GDPR.
• Providing the information is voluntary. Without a reply address and the relevant details, we may be unable to respond.

Sending an enquiry does not subscribe you to marketing. We use Claude, Anthropic’s AI assistant, to help review enquiries and prepare our replies. We do not use the form to make automated decisions with legal or similarly significant effects on you.

Your Gelim Account

Signing in:

• With your email and a password, or with your team’s Microsoft sign-in once your team has connected it.
• You can turn on two-step verification with an authenticator app.
• Our sign-in server keeps your email and name, a hash of your password (never the password itself), the two-step secret, a linked Microsoft sign-in, and your sessions.
• A browser session lasts from 30 minutes to 30 days. An app’s sign-in ends after 30 days without use.

What the account keeps, while it exists:

• your email and name, your plan, and your team memberships and roles;
• your devices: their name, platform and when each was last seen;
• the models you hid, and your monthly limits;
• your credit and its history: each charge with its date, app, feature, kind of work, model, provider and cost. When purchases open, it also keeps the payments by their Stripe references.

Requests and answers. When an app asks a model to do something, Gelim Account keeps the request and the answer (a transcript, for example) for about 24 hours, so that the app can collect the result, and then deletes them. They are sealed with a key of your own while they wait. Images and video are passed through once and not kept.

Your chats and your cloud clipboard:

• Your chats, and your cloud clipboard if you turn it on, are kept in your account so that every Gelim app shows the same history.
• They are sealed with a key of your own, which Gelim Account holds wrapped by its keyring. Gelim Account’s operators see counts and sizes, never the content.
• A deleted chat stays in Recently deleted for 30 days, then it is gone.
• Clipboard items go when you delete them, or when they are pushed out by the newest 100 MB.

Your change stream. Your devices learn about changes from a stream of change identifiers, with no content. It is kept for 30 days.

Emails about your account, such as invitations, address verification and password resets, are sent through Resend.

Payments. When credit purchases open, Stripe processes payments. We receive a payment’s status and amount, never your card number. Until then, credit is granted by the Gelim team.

Operators see identifiers, roles and counts, never your chats or your clipboard.

The legal basis is Article 6(1)(b) GDPR: providing the account you asked for.

Gelim

What you create

• What is stored:
  • your canvases and recordings, with their transcripts, translations and the results of Actions;
  • the files you attach to a canvas;
  • your published editions, your own Actions, your pins and your settings;
  • counts per kind of Action, added up on your account, so that Gelim can show the time it saved you.
• Where: in Gelim’s database and file storage on our server, for your account. Connections use HTTPS. Unlike your chats and your cloud clipboard, this content is not sealed with a key of your own. Our server’s access controls protect it.
• Files you attach to a chat.
  • Gelim for Mac reads them on the Mac: text, code, PDFs (scanned pages through the Mac’s own text recognition), Word, Excel and PowerPoint files. Only their text goes, inside your message, to Gelim Account. No file is uploaded for it. Gelim for iPhone also reads its attachments on the phone.
  • In the browser, Gelim’s server reads the text of PDF, plain text and Markdown files, and deletes the file 10 minutes after its text is first read, and within 24 hours at the latest.
  • Documents you add to a canvas are uploaded and kept with the canvas.

Recordings

• Audio is saved on your device first, then sent to our server. If you are offline, it waits on the device, or in the browser’s storage, until the connection returns.
• Speech to text. Soniox turns the audio into text in the EU, through its EU project and endpoint. It deletes a file’s audio after the transcription.
• Translations and Actions use the model you choose (“Automatic” picks one from Gelim Account’s list).
• Retention. Gelim keeps a recording’s audio for 30 days after its transcript is ready, and then deletes it. Audio that is never transcribed stays until you delete it. The transcript, translations and the results of Actions stay until you delete them.
• Delivery reports. Your apps can send a short report about a recording’s upload, with numbers and codes only, never audio or text, so that we can find upload problems.
• The people you record: you are responsible for telling them, and for their consent where the law requires it (see the terms).

Archive and delete

• Archive is reversible.
• Delete moves a chat, canvas or recording to Recently deleted for 30 days. After that it is gone.

Sharing

• With your team. You can share a recording with members of your team.
• Public links. A public link lets anyone who has it read the recording. It expires after 90 days by default, and you can turn it off at any time. Your team’s admin can set rules for public links.
• Published canvases. A canvas you publish can be read by anyone with its address, and found in Explore if you choose to list it there. We count its readers without identifying anyone. A reader can save a private copy to their own account. Unpublishing it ends access to it.
• Webhooks. Your team’s admin can have Gelim notify another service when a transcript or the result of an Action is ready. Gelim sends the notice over HTTPS to the address the admin sets.

Gelim in the browser

• Signing in. Gelim keeps you signed in with one session cookie, which pages cannot read. It renews while you use Gelim.
• The browser’s storage holds a few settings (the appearance, this browser’s device id, the clipboard switch, the sidebar width), who you are, so that Gelim can open offline, and recordings waiting to be sent. It holds no Gelim Account token.
• Offline. A cached copy of the app lets Gelim open, and record, without a connection.

Gelim for Mac

• Context is sent only when you add it.
  • Gelim for Mac reads, on the Mac, what you could add as context: the selection in the front app, the files selected in Finder, the front browser tab’s page, the open Mail message, what you copied, and a screen area you choose.
  • It offers them as chips. One leaves the Mac only when you add it to a message, or run an Action on it.
  • There is one standing choice, off until you turn it on: “Always attach” (in the first-use tip, and in Settings → Chat). It adds the front app’s selection to each new message, as a chip you can remove before sending.
• Permissions it asks for:
  • Accessibility, to read a selection and to insert an answer into another app;
  • Automation, to read the Finder selection, a browser page or a Mail message;
  • System Audio Recording and the microphone, to record a meeting.
• A folder canvas’s files stay on the Mac.
  • The folder’s index and its files never leave it, and nothing in the folder is uploaded.
  • To answer a question, the Mac sends the question, and what the model asks to see, to the model through Gelim Account. That is file names, matching lines, and excerpts of at most 200 lines or 24 KB each.
  • The answer is saved to your account with the names and line ranges of the files it cites, never the files themselves.

The Gelim keyboard (iPhone)

• What is sent. When you tap an action, the relevant text is sent over HTTPS to Gelim Account, which runs the model you chose through its provider. That is your selection or, with nothing selected, the text around the cursor, up to its last 700 characters, or the clipboard item you pick.
• Typing. Text is sent only when you trigger an action. The keyboard does not transmit what you type in the background.
• No microphone. iOS gives keyboards no access to the microphone, so the keyboard never records.
• Full Access. Gelim’s keyboard asks for Full Access so that it can reach Gelim and your Gelim Account when you run an action, chat in the keyboard or use the cloud clipboard, read what you copy for its Clipboard tab, and share its settings and saved clips with the Gelim app. It types without Full Access and never sends your keystrokes: only the selected text (or, with nothing selected, the text around the cursor, up to its last 700 characters) when you run an action, your message when you chat, and what you copy while the cloud clipboard is on, never passwords or one-time codes.

The clipboard

• The cloud clipboard is off until you turn it on, in Settings → Clipboard.
  • When it is on, the items you copy go to your Gelim Account, so your other devices can show them under “All devices”.
  • It never sends what the system marks as secret, such as passwords and one-time codes (on the Mac, concealed or transient items), nor files, nor items over 20 MB. Formatted text goes as plain text.
  • Deleting an item removes it everywhere.
• The local history stays on the device: up to 200 items (100 MB) on the Mac, which skips what the system marks as concealed or transient, and up to 20 in the iPhone keyboard.

The Gelim extension for Chrome

• Recording. While you record, the extension captures the audio of the tab you choose, with or without your microphone, or your microphone alone. It sends the audio over a secure connection to Gelim’s server, gelim.ai.
  • Nothing is captured when you are not recording, and the toolbar icon shows when recording is on.
  • Audio waits in the browser’s storage until it has been sent.
  • The popup names a Google Meet or Microsoft Teams tab from its address, to title the recording.
• Signing in. You sign in with your Gelim Account in a browser window. The extension keeps a device sign-in token in the browser’s local storage, and never sees your password.
• Permissions:
  • tabCapture and offscreen, to capture and encode the tab’s audio;
  • activeTab, for the tab you choose;
  • storage and unlimitedStorage, for your sign-in and for audio waiting to be sent;
  • identity, to open the sign-in window;
  • host access to gelim.ai only.
• Your choices. Sign out from the popup at any time. Removing the extension deletes its local data.

What Gelim does not do

• No analytics, advertising or third-party tracking in the apps. Apart from a recording’s delivery report, the apps send no usage telemetry. The server’s monitoring signals carry no content and no personal identifiers.
• We do not sell your information, or share it for advertising.
• We do not collect your contacts, location or advertising identifiers.

Older Quill apps

Older versions of Quill that are still installed load their list of actions from a service hosted by Cloudflare, which receives the usual technical information of each request. This stops when those versions are no longer in use.

Service providers and international processing

• OVH SAS: our server and its backups: the website, Gelim Account and the Gelim apps.
• OpenAI, Anthropic, Google (the Gemini API): AI models, for the requests you make. Outside the European Economic Area, on their global services. We use no EU endpoint for them.
• Anthropic (Claude): helping us review enquiries and prepare our replies. Outside the European Economic Area.
• Soniox: speech to text. The EU, through its EU project and endpoint.
• Parallel: web search and deep research: the questions, the search queries and the pages fetched. Under its standard terms. Parallel may keep search queries and train on them. Don’t put personal details in a question you send to web search or deep research.
• Resend: emails about your account.
• Porkbun: our domains, and the forwarding of hi@gelim.ai.
• Stripe: payments, once credit purchases open.
• Microsoft: team sign-in, only once your team connects it. Your team’s own tenant.
• Cloudflare: the action list of the older Quill apps, while they are in use. Our server’s monitor, which receives no personal data.
• Apple, Google: the App Store and the Chrome Web Store, which distribute the apps.

Details of each provider’s processing and safeguards are in its privacy policy. Contact us for the arrangements that apply to you.

How long information is kept

• Enquiries: while needed to answer them, discuss the request and resolve follow-up questions. We review enquiry records and remove them when those purposes end, unless a legal obligation, or a concrete need to establish, exercise or defend a claim, requires longer.
• Your account: while it exists. The credit ledger is append-only, and its money records follow the statutory retention.
• Requests and answers at Gelim Account: about 24 hours.
• Gelim content: until you delete it, then 30 days in Recently deleted. Recording audio: 30 days after its transcript is ready, or until you delete it if it is never transcribed. A file attached to a chat in the browser: 10 minutes after its text is read, 24 hours at most.
• Public links: 90 days by default, or until you turn them off.
• The cloud clipboard: until you delete an item, or the newest 100 MB push it out.
• The change stream: 30 days.
• Backups: 30 days, with OVH.

Your rights

Depending on the legal conditions, you may request access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing relies on consent, you may withdraw that consent for the future.

Deleting your account, in your Gelim Account:

• In one step, your access ends, and your key and the content Gelim Account keeps are destroyed.
• Your sign-in account is erased by its own task. Gelim erases your data within minutes and confirms it to Gelim Account; Recently deleted does not delay it.
• Recordings made in a team’s workspace stay with the team:
  • with their audio until 30 days after the transcript is ready, their transcript, translations and speaker names;
  • without a creator: the team’s admins still see them, as “Unassigned” in the People filter, and the members they were shared with keep their access;
  • a team recording in Recently deleted stays there for the rest of its 30 days.
• Erased with you:
  • every recording of your personal workspace, with its audio, transcript, translations and results, Recently deleted included;
  • what was yours alone in the team’s recordings: the action results you ran (each person’s Meeting minutes are their own), your personal action templates and your preferences;
  • your “Chat about this” chats, which Gelim Account erases with your other chats;
  • your devices, sign-ins, settings and your own Actions.
• Canvases are always your own, in a team too. Every canvas, with its documents, assets and folder bindings, is erased, Recently deleted included, and the editions you published stop being readable. Copies that other people made of a published edition are their own canvases, and stay.
• What stays with the team: its meeting templates and team Actions, whoever made them, and the team’s settings.
• At Gelim Account, two things remain:
  • the ledger’s money records, as the law requires;
  • a short record of the deletion (your account identifier and the time). That record stays with the backups, so that restoring a backup deletes your account again.
• A team’s owner hands the team over first.

You may complain to a data protection supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA). You can also contact us at hi@gelim.ai to ask about your information.

Children

Gelim and Gelim Account are not directed to children under 16.

Changes

We may update this notice. Material changes are shown by a new date on this page.