Legal

Privacy Policy

Last updated: August 2026

      Gistio runs entirely inside Google's infrastructure. Your emails are never stored on external servers and are never sold or shared with third parties beyond what is described in this policy.
    

1. What Gistio is

Gistio is a Gmail Add-on built on Google Apps Script. It reads your unread inbox emails, classifies them using the Gemini AI API, cleans up low-priority threads, and sends you a digest summary email. All processing happens within Google's infrastructure under your Google account.

2. What data Gistio accesses

To function, Gistio requests the following Gmail permissions:

gmail.modify — to read inbox threads, mark emails as read, archive threads, and apply labels. This is the minimum scope required to clean your inbox.
gmail.addons.execute — to run as a Gmail Add-on within the Gmail interface.
script.send_mail — to send the digest summary email to your own address.
userinfo.email — to identify your email address for sending the digest.
script.scriptapp — to create and manage the scheduled digest trigger.
script.locale — to display times in your local timezone.

3. What data is sent to Gemini AI

For each unread email, the following fields are sent to the Gemini API for classification:

Email subject
Sender name and address
A plain-text snippet (up to 600 characters of the message body)

Full email bodies are not sent. Attachments are never accessed or sent. The Gemini API is used solely to classify emails by category and priority. Gemini's data handling is governed by Google's Privacy Policy.

4. What data Gistio stores

Gistio stores a small amount of data in Google's UserProperties service (per-user, within your Google account):

Your Gemini API key
Your digest schedule preferences (frequency, hour, day)
Your timezone
Last run statistics (count of emails processed, kept, cleared)
Subjects and thread IDs of emails that needed attention in the last run (displayed in the add-on panel)
Your preferred Gmail label name and inbox action

This data is stored entirely within Google's infrastructure, accessible only to you and to Gistio's script running under your account. It is never transmitted to or stored on any external server.

5. What data Gistio does NOT collect

No full email bodies are stored or transmitted beyond the 600-character snippet sent to Gemini
No analytics or usage tracking
No advertising or profiling
No data shared with or sold to third parties
No cookies or cross-site tracking

6. How to delete your data

Removing the Gistio add-on from your Google account deletes all UserProperties data associated with it. You can remove the add-on at any time from Gmail Settings → Add-ons or from the Google Workspace Marketplace.

Any data previously sent to the Gemini API for classification is subject to Google's data retention policies.

7. Open source

Gistio is fully open source. You can inspect exactly what the add-on does at any time: github.com/BugDiver-Technologies/gistio.

8. Changes to this policy

If this policy changes materially, the "Last updated" date above will be updated. Continued use of Gistio after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this privacy policy? Open an issue on GitHub.