Privacy

Privacy Policy

Effective date: 9 October 2026

Controller: GLMMR ME LTD ("Glint", "we", "us"), company number 17360045, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

Contact:

1. Who this is for and what it covers

This policy explains what personal data Glint collects when you use the Service at betaglint.co, why we collect it, how we protect it, and the rights you have. It is written to meet the UK GDPR and the EU GDPR. If you are in California or another region with its own rules, the "Your rights" section notes how those apply.

2. The data we collect

You give us:

Account and context data. Your name, email, role, industry, years of experience, and a short bio or profile. At sign-up you may add context by uploading a CV or giving a LinkedIn URL, or by filling a short form.
Content samples. Authentic-voice material you choose to provide or link, such as posts, articles, newsletters, podcast or video links, or transcripts. We do not scrape this. It is only what you give or link.
Your drafts. The text you paste in for diagnosis.
Captured insights (your "Gems"). The anecdotes, judgements, and points of view Glint draws out during a session, and the memory it builds from them.
Voice input. If you use voice, your speech is transcribed to text.
Beta and contact data. If you join the early-access list, your email address and any details you provide.

We collect automatically:

Usage and technical data. Basic logs needed to run and secure the Service, such as requests, timestamps, error events, access-code usage, and device or browser information.

We try to keep collection to what the Service needs. Please do not paste other people's sensitive personal data into your drafts unless you have a lawful basis to do so.

3. Why we use your data, and our legal bases

Purpose	Legal basis (UK/EU GDPR)
Provide the diagnosis, extraction conversation, and your voice memory	Performance of our contract with you
Build and store your voice profile and Gems so the Service works across sessions	Performance of our contract with you
Keep the Service secure, prevent abuse, and fix errors	Our legitimate interests in a safe, working service
Improve the Service (in aggregate or de-identified form where possible)	Our legitimate interests, or your consent where required
Send you service and beta communications	Contract, or consent for marketing where required
Optional integrations you connect (for example linking a content source)	Your consent

We do not use your content to train foundation models, and we bind our AI providers not to train on it.

4. How AI processing works

To diagnose a draft and run the conversation, Glint sends the relevant text to AI model providers through our own secure backend. Prompts are managed in a prompt-management system and provider keys are held server-side, never in your browser.

Current providers in the AI path:

Anthropic (Claude models) for diagnosis and conversation.

5. Who we share data with (subprocessors)

We do not sell your personal data. We share it only with service providers that process it on our behalf, under contract, to run the Service:

Provider	Role	Notes
Supabase	Database, authentication, storage, backend functions	Cloud backend infrastructure
Lovable	Application hosting	Web application hosting
Anthropic	AI model provider (diagnosis, conversation)	Receives draft text at diagnosis time
Langfuse	Prompt management and usage tracing	Tracing and prompt management

We keep the current list available and update it when it changes.

6. International transfers

Some providers (for example AI model providers) may process data outside the UK/EU. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

7. How long we keep it

We keep Your Content and account data while your account is active and for as long as needed to provide the Service.
Backups and logs are kept for a limited period, then deleted or rotated.
When you delete content or close your account, we delete or de-identify your personal data promptly, except copies we must keep briefly for backups or to meet a legal duty.

8. Your rights

Under the UK/EU GDPR you can ask us to:

give you a copy of your data (access);
correct data that is wrong (rectification);
delete your data (erasure);
export your data in a portable format (portability), and Glint is designed so you can export all your data layers;
restrict or object to certain processing;
withdraw consent you gave, at any time.

To exercise a right, contact . We respond within one month. You can also complain to your data-protection regulator (in the UK, the Information Commissioner's Office at ico.org.uk).

If you are in California, you have similar rights to know, delete, correct, and opt out of "sale" or "sharing" of personal information. We do not sell your personal information.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include access isolation enforced by row-level security on user-owned data, server-side secret management with API keys never exposed in the browser, and access controls limiting team access to production systems.

No service can promise perfect security, but we work to protect your data and to keep these measures current.

10. Cookies and analytics

The Service uses only essential cookies and similar technologies required to operate the Service and keep you securely signed in.

11. Children

The Service is for adults (18+) and is not directed at children. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy as the Service develops. If a change is material, we will give reasonable notice. The effective date at the top shows when it last changed.

13. Contact

Privacy questions, requests, or security concerns: .