Legal
Privacy Policy
Last updated July 8, 2026
This Privacy Policy explains how Gavel, operated by Arun Agrahri ("Gavel," "we," "us," or "our"), collects, uses, and protects your information when you use usegavel.com and the Gavel service (the "Service"). Gavel gives you cited expert frameworks applied to your specific business decisions. We built the Service around trust, and that starts with being honest about your data.
Our core promise: we do not use your chats, questions, or the business context you share to train AI models or to build our expert corpus. Your conversations are used to deliver the Service to you — nothing else.
Information we collect
Information you provide
- Account information — when you sign in with Google or with an email and password, we collect your name, email address, profile image, and Google account identifier.
- Professional context — details you choose to add during onboarding, such as your role and years of experience, so answers fit your situation.
- Workspace and business context — a workspace name, your company URL and description, and a profile of your ideal customer that we synthesize from the URL you provide. You can view and edit this at any time.
- Chat content — the questions you ask, the context you paste in, and the responses the Service generates. This can include information about your business, so please share only what you're comfortable storing.
Information we collect automatically
- Billing information — if you subscribe to a paid plan, our payment processor Stripe handles your card details. We store a Stripe customer identifier, your plan, and credit balance; we do not store full card numbers.
- Usage information — how you sign up (referrer and source), your credit usage, and basic activity needed to run the Service.
- Device and analytics data — via Google Analytics, we collect standard analytics data such as pages visited, approximate location, browser, and device type. See "Cookies and analytics" below.
How we use your information
- Provide, maintain, and improve the Service and generate cited answers tailored to your context.
- Authenticate you, manage your account, and process payments and credits.
- Send you transactional email (for example, password resets and account or billing notices).
- Understand aggregate usage so we can make the product better.
- Protect the Service against abuse, fraud, and security threats, and comply with legal obligations.
What we do not do with your data
We do not use your chat content or the business context you provide to train, fine-tune, or evaluate AI models, and we do not add your content to our expert corpus. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
How your chats are processed by AI
To generate an answer, we send your messages and the relevant context to OpenRouter, which routes the request to an underlying model provider (such as Google, OpenAI, or Anthropic). This processing exists only to produce your response in real time. Every citation in an answer links to its original public source so you can verify it yourself. We instruct our providers not to train on data sent through the Service; provider practices are governed by their own policies, which we encourage you to review.
Who we share information with
We share information only with the service providers ("subprocessors") that help us run Gavel, each limited to what its job requires:
| Provider | Purpose | Data shared |
|---|---|---|
| Google Sign-In | Authentication | Name, email, profile image, Google account ID |
| Stripe | Payment processing | Email and billing details (card data handled by Stripe) |
| OpenRouter and AI model providers | Generating your responses | Your chat messages and provided context |
| Amazon Web Services (S3) | Content and file storage | Content and files you upload or generate |
| Resend | Transactional email | Your email address |
| DigitalOcean | Hosting infrastructure | Application data, as our hosting provider |
| Google Analytics | Usage analytics | Device and usage data, cookies |
We may also disclose information if required by law, to enforce our Terms of Service, or in connection with a business transfer. Any successor would remain bound by this Policy.
Cookies and analytics
We use essential cookies to keep you signed in and to secure the Service; these are required for it to function. We also use Google Analytics, which sets cookies to measure usage. If you are in a region that requires prior consent for analytics cookies (such as the EU or UK), you may decline or clear these cookies through your browser without losing access to the Service. You can opt out of Google Analytics using Google's browser add-on.
Data retention
We keep your account and content for as long as your account is active. You can delete individual chats and workspaces at any time from within the Service. When you ask us to delete your account, we remove your personal data and content within a reasonable period, except where we must retain limited records to meet legal, tax, or security obligations. Backups are purged on a rolling schedule.
Your rights and choices
Depending on where you live, you may have some or all of the following rights over your personal information:
- Access and portability — request a copy of the data we hold about you.
- Correction — fix inaccurate or incomplete information (much of which you can edit in-app).
- Deletion — ask us to delete your account and associated data.
- Objection and restriction — object to or restrict certain processing.
- Opt out of sale or sharing — we do not sell or share your personal information, so there is nothing to opt out of, but you retain this right.
- Non-discrimination — we will not treat you differently for exercising these rights.
These rights reflect the EU/UK GDPR and the California Consumer Privacy Act (as amended by the CPRA). To exercise any of them, email gavel@recmend.com. We will verify your request and respond within the timeframe the law requires.
Security
We protect your information with encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is perfectly secure, but we work to safeguard your data and to notify you of any material breach as required by law.
International users
Gavel is operated from the United States, and your information is processed there and in the locations of our subprocessors. Where we transfer personal data from the EU or UK, we rely on appropriate safeguards such as the Standard Contractual Clauses.
Children
The Service is intended for people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
Changes to this Policy
We may update this Policy as the Service evolves. When we make material changes, we will revise the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised Policy.
Contact us
Questions about this Policy or your data? Email gavel@recmend.com. This Service is operated by Arun Agrahri.