Legal
Privacy policy
Placeholder · last updated 2026-10-02
Draft
This is a placeholder summary of the commitments below. The full legal text will replace it before general availability.
What we collect
- Account data: your email address and organization name.
- Billing data, processed by Stripe; we never see full card numbers.
- The posts and media you submit, and the results we derive from them.
- Usage analytics, described below.
- Free tries (without an account) are processed and then deleted: we don’t store the file, the link or the result, and the result is shown only in your browser.
How we measure use of the site
We want to know which parts of Garfunkel help people and where they get stuck, so we record what happens on the site and in the app. We do it ourselves, without advertising or tracking companies, and without cookies.
- Our own analytics, no cookies.Your browser keeps a random ID in its local storage so we can tell one visit from the next. It isn't linked to anything about you or your device, and clearing your site data removes it. A visit ends after 30 minutes without activity.
- What we record: the pages you open, how far you scroll, which buttons and features you use (for example “searched”, “opened a post”, “downloaded a spreadsheet”), errors you run into, how long things take to load, the site that sent you (its domain only) and any campaign tags in the link, your device type and screen size bucket, and your country (from our hosting provider, not your exact location). Once you sign in, this is connected to your account so we can see whether new features help.
- What we never record: what you type or paste — not your searches, chat questions, file names or the links you paste (for a pasted link we keep only which platform it is from, like TikTok), not your transcripts, captions or results, not your email address, and not your IP address. No recordings of your screen or mouse (no “session replay”), and no advertising or cross-site tracking.
- Vercel Analytics and Speed Insights. Our hosting provider, Vercel, counts page views and measures page speed for us without cookies and without identifying you. We send it page addresses with any personal parts removed.
- Do Not Track and Global Privacy Control are honored.If your browser sends either signal, we only count what happens — no ID is stored in your browser, nothing is connected to you or your account, and we don't record where you came from.
- Retention and access. Analytics events are deleted after 13 months. Only Garfunkel staff can see them. If you delete your account, your analytics are disconnected from you.
How we handle your content
- Raw media is deleted after processing. Videos, images and audio we fetch or you upload are removed once the analysis is done (with a scheduled storage cleanup as a backstop). We keep only the derived results.
- Analyses of public posts may be reused across customers. If a public post was already analyzed with the same pipeline and options, we may serve that analysis (after re-checking that the post is still public). The price is the same either way, and who requested which post is never shared.
- Uploads are never shared. Media you upload and its results are visible only to your organization.
- Training is opt-in, uploads only.We use content for model training only if your organization opts in, and only for your uploads — never for posts fetched from public URLs, because we can't consent on behalf of their creators.
- You can delete everything. Delete a single result or all of your data from Settings at any time.