How GEDO.AI collects, uses, stores and protects your information, the control you keep over your data, and where our responsibility begins and ends during the beta.
At Gedo, privacy isn’t a feature bolted on afterwards — it’s a design premise. We believe the memories, goals and conversations you record belong to you; our job is to keep them safe and let you view, export and delete them at any time.
This statement applies to the GEDO.AI website, app and related services (the “Service”). The Service is currently in invite-only beta, and some security capabilities are still being built. We choose to describe the real state of things here rather than make promises we can’t keep.
The Service is operated by GEDO PTE. LTD., a technology company registered in Singapore (“we”, “us”, or “GEDO”), which acts as the controller of your personal data.
This statement covers how we collect, use, store, share and delete personal data when you use the Service. It is a product-level statement; where the law requires it, we will separately provide a formal Privacy Policy and Terms of Service.
We follow a principle of minimal collection — gathering only what the Service needs to work:
We use the information above only to:
The Service’s conversations and some intelligent features rely on large language models. To provide them, your conversation content and related context — including content queued for memory extraction and source imports — are sent, at the moment you make a request, to third-party model providers (such as Anthropic and OpenAI) for inference, and the results are returned to you.
These providers act as our subprocessors and process the data only on our instructions to complete that request. Under their developer-facing terms, content submitted via their APIs is not used to train their general-purpose models by default.
Vector embeddings for semantic search are computed within our own environment, and some extraction tasks run there first, falling back to third-party providers only when needed. We continuously assess each provider’s security and compliance, and reserve the right to change providers when needed.
By default, nothing you create is ever used to train models — that is the factory setting, and we will not change it for you. The following two capabilities are optional, off by default, independent of each other, and revocable at any time:
In short: no consent, no training; with consent, only on our own compute; change your mind, and it’s gone for good.
We take reasonable technical and organisational measures to protect your data, including:
No system can be perfectly secure. We keep hardening our security, and we describe today’s limits honestly in the Disclaimer below.
Your data is yours to command. The Service gives you these self-service controls, available at any time:
While you use the Service, we retain the content you create so we can keep serving you. When you delete a piece of data or close your account, that data is hard-deleted.
Because of operational logs and routine backup cycles, incidental technical copies may briefly remain in rolling logs and are cleared automatically on their cycle; we won’t use this as an excuse to retain your deleted personal content long-term.
Some lines are fixed from day one:
We use necessary cookies and browser local storage to keep you signed in, remember interface preferences (such as language and theme) and maintain basic security. We do not use third-party marketing cookies for cross-site ad tracking. You can clear this data in your browser settings, though it may affect sign-in and some features.
GEDO is registered in Singapore and serves users worldwide, so your data may be stored or processed outside your region (including where our cloud and model providers operate).
By design, we align with the core principles of GDPR, CCPA and other major privacy frameworks — notice, minimisation, access, portability and deletion. If the law in your region grants you rights to access, correct, export or delete your personal data, you can exercise them via the contact below.
The Service is not directed to children under 14. If you are under 18, please use it with the consent and guidance of a parent or guardian. If we learn we have collected a child’s personal information without guardian consent, we will delete it promptly.
As the product evolves and our security matures, we may update this statement from time to time. Material changes will be reflected on this page, with the “Last updated” date at the top. Continuing to use the Service means you are aware of the updated content.
If you have any questions about this statement, or wish to exercise your data rights — access, export, correction or deletion — please reach us:
The Service is currently in invite-only beta and is provided on an “as is” and “as available” basis. We make reasonable efforts to keep it available and secure, but we do not guarantee it will be uninterrupted, error-free or absolutely secure.
As noted above, at-rest encryption, independent key management, comprehensive auditing and finer-grained retention policies are still being built. Until these are fully in place, please use your own judgement before entering highly sensitive information (such as ID documents, bank card numbers or other people’s private data).
Keeping your account credentials safe is your responsibility. To the extent permitted by law, we are not liable for exposure resulting from your own sharing, public publishing (for example, making a digital persona public) or a third party obtaining your credentials without authorisation.
The Service relies on third-party infrastructure and model providers whose own terms and privacy policies are independent of this statement. For issues caused by third parties, we will help address them but will not assume liability beyond our own fault.
To the maximum extent permitted by law, we are not liable for indirect, incidental or consequential losses arising from your use of, or inability to use, the Service. Nothing here excludes or limits liability that cannot be excluded under applicable law. Where this statement conflicts with mandatory law in your region, that law prevails.
This is a product-level security and privacy statement and does not constitute legal advice. At general availability we will provide a legally binding Privacy Policy and Terms of Service.
We know trust is hard-earned. Every line above is a commitment we are willing to be held to.
