Privacy Policy

Who we are

GliddeSignal is a feedback-analysis service operated by GLIDDE AI (SMC-PRIVATE) LIMITED, Zaraj Housing Society, Islamabad, Pakistan. In this policy "we" and "us" mean GLIDDE AI (SMC-PRIVATE) LIMITED, and "you" means the person or organization using the service.

For most of what we do with your data we are the data controller. For the customer feedback you upload — which is usually other people's personal data, not yours — you are the controller and we act as your processor, handling it only to produce the output you asked for.

What we collect

• Account information — your email address and authentication details when you create an account.
• Feedback content you upload or connect — the CSV rows, pasted text, forwarded emails, Zendesk tickets, Intercom conversations, App Store and Google Play reviews and Slack messages you bring in for analysis, plus the product context and corrections you add. This is the substance of the service and it may contain personal data about your customers.
• Integration credentials — the OAuth client secret you supply for Zendesk, the Access Token for Intercom, the service-account key for Google Play, and the API tokens for Linear or Jira. These are encrypted before storage and are never returned to your browser after you save them.
• Billing information — your billing email and subscription state. Card details are entered with our payment processor and never reach our systems.
• Usage and diagnostic data — request logs needed to operate, secure and debug the service.
• Marketing enquiries — if you submit the contact form or subscribe to updates on this website, the email address and message you send. That is stored separately from the product.

The website itself uses cookieless, aggregate page analytics. It does not set advertising cookies, does not build a profile of you, and does not need a consent banner — which is why you didn't get one.

Why we use it, and on what basis

• To provide the service — grouping feedback, tracking what changed, and generating memos and actions. Basis: performance of our contract with you.
• To enforce plan limits and take payment. Basis: contract.
• To secure the service and prevent abuse. Basis: our legitimate interest in running a service that isn't misused.
• To reply to you when you contact us, and to send product updates you asked for. Basis: contract, or your consent for marketing email — withdrawable from any message we send.

How AI processing works here

Producing a run means sending the feedback text in that run, together with any product context you've written, to our AI provider to be embedded and summarized. That happens per request, for your run, and for nothing else.

Your content is not used to train or fine-tune any model, ours or a provider's. The corrections you make stay scoped to your own project and steer only your future runs. If it matters to your assessment: no model is trained on your data at any point.

Who else processes it

A short list of subprocessors runs the service. Each one handles only its own part:

• Supabase — managed postgres database and authentication. Your account, projects, uploaded feedback, runs, and generated output.
• OpenAI — embeddings, clustering labels, memo and action generation. The feedback text in a run, plus your product context, sent per request.
• Lemon Squeezy — payments, subscriptions, and invoicing. Billing email and subscription state. Card details go to them, never to us.
• Vercel — application hosting and scheduled syncs. Request logs; no feedback content is stored outside the database.
• Resend — receiving mail sent to your project's email-in address. The emails you forward, in transit.
• Brevo — transactional email — run-complete notices, account mail. Your email address and the notification's contents.

We do not sell your data, and we do not share it for advertising. We will disclose it if we are legally required to, and we'll tell you unless we're prohibited from doing so.

These providers operate across several countries, so your data is transferred internationally. Specifically: product data — your account, projects, feedback and generated output — is stored in Supabase's Seoul region (ap-northeast-2, South Korea) and is read and written by application code running on Vercel in Washington, D.C. (iad1, United States). AI processing runs through OpenAI's API, whose default processing is in the United States. The separate database behind this website's contact and subscribe forms is in Supabase's Singapore region (ap-southeast-1).

Where a transfer leaves the UK or EEA it relies on the standard contractual clauses or an adequacy decision, as applicable. If your own compliance assessment needs these confirmed in writing, or needs them to change, email support@gliddeai.com.

How long we keep it

• Account and project data — while your account is active. Delete a project from inside the product and its runs, feedback and generated artifacts go with it.
• Closed accounts — we delete or anonymize account and project data within 30 days of a deletion request.
• Backups— deletions propagate out of routine database backups as those age out on our provider's rolling schedule, so a deletion is not instantly erased from every backup copy.
• Billing records — kept as long as tax and accounting law requires, which is longer than your account.
• Trial accounts — a 14-day trial that doesn't convert is treated the same as any closed account.

Security

Traffic is TLS-encrypted in transit and data sits in managed Postgres with disk-level encryption at rest. Every request enforces per-account ownership on your projects, runs and feedback. Integration tokens are encrypted before storage. We make no claim to a formal security certification — the Security page sets out what we do and don't have.

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or port it elsewhere. You can withdraw consent for marketing at any time. We don't charge for this and we don't make it conditional on anything.

If you are in the UK or EEA you also have the right to complain to your data protection authority. If you are in California you may request disclosure or deletion, and we do not sell personal information or share it for cross-context behavioural advertising.

To exercise any of this, email support@gliddeai.com. We aim to respond within 30 days. If you are asking on behalf of one of your own customers about feedback you uploaded, we'll route it to you as the controller rather than acting on it ourselves.

Children

The service isn't intended for anyone under 16 and we don't knowingly collect their data.

Changes to this policy

If we change this materially we'll update the date above and, for anything that affects how we handle your data, email account holders before it takes effect.

Contact

Privacy questions, data requests, or a DPA: support@gliddeai.com. Anything else: support@gliddeai.com.