Privacy Policy

This Privacy Policy describes how Green Union Capital Inc. ("we", "us", "our", or "Geb AI") collects, uses, and discloses personal information when you use the Geb AI service at gebai.ca, chat.gebai.ca, and related surfaces (collectively, the "Service").

1. Who we are

Geb AI is operated by Green Union Capital Inc., a corporation existing under the laws of Canada. For any privacy question, contact [email protected].

Privacy Officer. Our Privacy Officer is the Founder of Green Union Capital Inc., reachable at [email protected]. The Privacy Officer is accountable for our compliance with applicable privacy laws including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector(Law 25), Alberta's and British Columbia's PIPA, the EU and UK GDPR, and Egypt's Personal Data Protection Law 151/2020.

2. Information we collect

• Account information: email address, display name, authentication provider (Google or email/password), account creation date.
• Conversation content: messages you send to Geb, AI-generated responses, chat titles and folders you create.
• Usage and telemetry: API call metadata (timestamps, token counts, model identifiers), request IPs, device and browser information.
• Billing information: subscription status and plan. Payment card details are handled exclusively by our payment processor (Stripe) and are never stored on our servers.
• Uploaded files: two distinct kinds. (a) Chat attachments you add to a conversation for AI analysis; these are kept until you delete the conversation or your account (see section 6). (b) Key of Life documents you upload to your private memory so Geb can recall their contents later; these are not auto-purged — they are retained until you delete them, or purged within 30 days if you delete your account (see section 6).

3. How we use your information

We use your information to:

• Provide the Service, including routing your messages to our AI models and returning responses.
• Maintain your chat history so you can resume prior conversations.
• Process subscription payments and send billing receipts.
• Diagnose, debug, and improve the Service (including model quality and reliability).
• Learn from conversations to fix mistakes and improve Geb for everyone, as described in section 5A and Terms of Service section 6A.
• Detect fraud, abuse, and violations of our Terms of Service.
• Communicate service announcements, security notices, and product updates.
• Comply with legal obligations in jurisdictions where we operate.

4. Legal bases (for users in the EEA / UK)

We process personal data under one or more of these lawful bases: (a) performance of our contract with you; (b) our legitimate interests in operating and improving the Service; (c) your consent where required; and (d) legal compliance.

For the learning described in section 5A, we rely on performance of our contract with you for live repair, and on our legitimate interest in improving the Service — or on your consent where the law requires it — for the other learning uses. You can object at any time with the "Help improve Geb" switch described in section 5A.

5. How we share your information

We do not sell your personal information. We share it only with the sub-processors listed below, and with regulators or law enforcement where required by valid legal process or to protect the rights, property, or safety of users or the public.

We update this list as sub-processors change and notify affected users where legally required.

5A. How Geb learns from your conversations

Geb learns from conversations on the Service to fix its mistakes and improve for everyone. Section 6A of our Terms of Service is the full description; in summary:

• What is used. The text of the messages you send, Geb's responses, and information about how each turn was handled. We are introducing automatic replacement of common identifiers in the text kept for learning, but it does not yet apply to every learning step.
• Live repair (every signed-up account). Geb may review a failed turn and correct it in the same conversation; a copy of the message text is kept for up to 24 hours.
• Improving Geb for everyone. Patterns across conversations are used to improve how Geb handles requests, to train Geb's own models, and to keep a reference set of examples. This analysis is done by Geb's own models (Geb and its agent Tjaty) on servers we operate. Message text and turn information are kept for up to 365 days; reference-set examples, with identifiers removed, may be kept while your account exists.
• Your choice. Learning is on by default on every plan, Free and paid. You can turn it off at any time in your profile settings under Privacy and data → "Help improve Geb"; your choice applies to your conversations from then on. Your own messages are used word for word as training examples only if you turn on the separate paid-plan setting described in the Terms.
• Who can see it. Geb's automated systems, and a limited number of authorized staff checking the quality of an improvement (every access is logged). Learning records are never sold and never shown to other users.
• Deletion. Deleting your account deletes your learning records. Improvements already built into a released version of Geb are not reversed. Deleting a single conversation does not remove learning records already made from it; they expire at the end of their retention period.

Requests you pay for with your own API key (BYOK) may be cached and re-served to you for a short period to reduce cost and latency. Your current choice, and the policy version in force when you made it, are recorded on your account.

5A.1. Key of Life (KoL) memory

Geb uses a private memory layer called Key of Life (KoL). KoL stores facts, preferences, and prior context that you explicitly share with Geb during conversations, encrypted at rest in our Canadian data centre (Edmonton, Alberta). You can view, edit, or wipe your KoL memory at any time from the in-app memory panel. KoL is per-account and never shared with other users.

5B. Browser-as-egress for Tier 2 deep research

If you opt in, the Service may use your browser as a transient egress point to fetch public web pages on your behalf during deep research. The fetched HTML is sent to the Geb backend solely for parsing and inclusion in the research result. We do not read, copy, or transmit your cookies, tokens, autofill data, browsing history, bookmarks, saved passwords, or content from other tabs. We log only the request URL, fetch timestamp, response size, and HTTP status code for diagnostics. See Terms of Service section 6B for full scope, and the warnings about restricted networks (corporate, school, government).

6. Data retention

The periods in this table apply in the same way whether you delete your account yourself or we delete it under section 8 (Termination) of our Terms of Service.

7. How to exercise your rights

You may request access to or correction of your personal information at any time. Email [email protected] with the subject line "Privacy Request" and we will respond within 30 days.

If you are not satisfied with our response, you may file a complaint with the appropriate supervisory authority for your region:

• Canada (federal): Office of the Privacy Commissioner of Canada — priv.gc.ca
• Alberta: Office of the Information and Privacy Commissioner — oipc.ab.ca
• British Columbia: Office of the Information and Privacy Commissioner — oipc.bc.ca
• Quebec: Commission d'accès à l'information — cai.gouv.qc.ca
• Egypt: Personal Data Protection Center — المركز المصري لحماية البيانات الشخصية

Geb AI is not currently offered in the European Economic Area, the United Kingdom, or Switzerland, except the Netherlands. It is also not offered in Israel. Where the EU GDPR applies, the rights in this section and the legal bases in section 4 apply to you.

8. International data transfers

We are a Canadian company. Personal information may be transferred to, stored in, and processed in Canada (where our team and Edmonton data centre are located), the Netherlands (where our backend is hosted on Google Cloud europe-west4), the United States (where some sub-processors operate), and Qatar (for the MENA-region SearXNG search egress proxy on Google Cloud me-central1). Where required, we rely on standard contractual clauses or equivalent safeguards.

Foreign government access. Personal information stored in the Netherlands, the United States, Egypt, Qatar, or other jurisdictions may be subject to lawful access requests by foreign governments under applicable local law (for example, U.S. CLOUD Act or FISA process for data held by U.S.-headquartered providers). We disclose information only when required by valid legal process and we publish a transparency report on request.

8A. Responsible AI

Geb AI is a generative AI service. Outputs are AI-generated and may be inaccurate, incomplete, or biased. They are not a substitute for professional advice in any field (legal, medical, financial, tax, safety-critical, or otherwise). Do not input information you would not share with a third party. We do not perform automated decision-making with legal or similarly significant effects on you; account-protective decisions (anti-abuse enforcement, payment-fraud blocking, rate-limit enforcement) may involve automated processing — you may request human review at [email protected]. Our generative AI practices are aligned with the Office of the Privacy Commissioner of Canada's Principles for responsible, trustworthy and privacy-protective generative AI technologies (December 2023).

9. Security

We employ administrative, technical, and physical safeguards designed to protect personal data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9A. Biometric information

Geb AI does not perform facial recognition or biometric identification on uploaded images. Image content sent to AI models for analysis is processed only for the requested task and not retained beyond the conversation. We do not build, use, or share biometric profiles. Where Quebec Law 25 applies, image attachments depicting a person's face are treated as sensitive personal information and rely on your express consent given when you upload the file.

10. Minors and Child Mode

You must be at least 18 years of age to hold a Geb AI account. We do not knowingly create separate accounts for anyone under 18; if we discover an under-18 account it will be terminated and the associated personal information deleted. If you believe a minor has provided personal data to us, please contact our Privacy Officer at [email protected].

Children using Geb under adult supervision. If you allow a child or minor in your household to use Geb under your direct supervision, please enable Child Mode in your account settings before handing them the device. While Child Mode is active:

• Geb operates in a restricted educational mode (homework help, science, math, vocabulary, age-appropriate creative writing).
• Tools that are not age-appropriate (the web search mode, deep research, prospecting, image and video generation, payments, document/connector creation) are unavailable; Geb can still look things up with strict safe-search.
• The child's session writes to a separate, parent-controlled memory namespace called KoLc (Key of Life — Child). You can view what your child has learned by asking Geb in your own session ("What did [child name] learn today?") and you can wipe KoLc at any time.
• We do not run analytics on Child Mode sessions and do not retain them beyond the standard conversation retention.

You remain the account holder and are responsible for all activity under your account, including activity by minors you have authorized.

11. Cookies and similar technologies

We use the following cookies and similar technologies:

• Strictly necessary (always loaded): session authentication, CSRF protection, language and locale preferences. These cannot be disabled — without them you cannot use the service.
• Cookieless page analytics (always loaded): Plausible counts page visits in aggregate. It sets no cookies and does not identify you.
• Analytics and product improvement (loaded only after you accept): PostHog (aggregated session-level usage patterns) and Microsoft Clarity (heatmaps and session recordings of how users interact with the interface). These help us understand how Geb is used so we can improve it.
• Advertising conversion measurement (the pixel loads only after you accept): the TikTok pixel records when a visit from one of our own ads leads to a sign-up, a contact request, or a purchase. Our servers may also report those conversions to TikTok's Events API with a hashed (one-way encoded) email address. We never share your conversations or memory for this purpose.

Where required by law in your region, analytics cookies load only after you click "Accept" on our cookie banner. You may opt out at any time in your account settings under "Privacy → Analytics."

11A. New 2026 features and the data they process

As we add capabilities, this section describes the additional processing each one performs. These features are opt-in or tied to a specific action you take. How Geb learns from conversations is described in section 5A.

• Quality verification (verifier shadow). To measure and improve answer quality, a sample of AI responses may be sent — together with the prompt that produced them — to a separate large language model acting as an automated judge (currently Google's Gemini, via the Google sub-processor already listed in section 5). The judge returns only a quality score and short rationale; its output is used for aggregate quality monitoring and is not shown to you or other users. This is a shadow evaluation: it runs alongside the response you already received and does not change it. Content sent to the judge is processed transiently for scoring.
• Connectors that write to your other accounts.When you connect a third-party app (for example a calendar, email, project tracker, or cloud-storage account) and ask Geb to perform an action there, Geb sends the data needed to complete that action to that third party using the access you authorized. Write actions (creating, editing, sending, or deleting items in your connected account) run only when you request them, and — for sensitive actions — only after you confirm. Credentials for connectors are stored encrypted; you can review and revoke any connection at any time from the integrations panel. The third-party provider's own privacy policy governs the data once it reaches them.
• Session memory and journal. For longer, multi-step tasks, Geb may keep a short-lived working memory and an activity journal for the current task or session — what it has done, what it learned, and what it plans next — so it can pick up where it left off. This session memory is per-account, is used only to continue your own task, is not shared with other users, and is deleted when the session ends or when you delete the associated conversation.
• Conversation embeddings for memory recall.So Geb can recall relevant earlier context within your own account, we generate numeric vector representations ("embeddings") of your messages and store them in our database in Canada (Edmonton, Alberta). Embeddings are derived from your content and are used solely to retrieve your own relevant context; they are per-account and never shared across users. They are deleted when you delete the underlying conversation or your account.

Updated sub-processor note. Google (already listed in section 5) additionally acts as the automated quality-judge model described above. Where you enable a connector, the corresponding third-party provider acts as an independent controller of the data you direct Geb to send it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will tell you about material changes before they take effect with a prominent notice shown on our website and in the app. Continued use after changes take effect constitutes acceptance.

13. Contact

Green Union Capital Inc.
Privacy Officer (Founder) and general support — [email protected]