This covers the Gliddi website at gliddi.com, the Gliddi apps for Mac, Windows, iPhone and Android, and the Gliddi web apps at login.gliddi.com, docs.gliddi.com and meet.gliddi.com. It is written to be read rather than to be survived, so it is short. If something here is unclear, ask us and we will explain it and then fix the wording.
Gliddi is the service described at gliddi.com. For anything to do with your data, including the requests described below, write to hello@gliddi.com and a person will answer.
When your employer or organisation gives you Gliddi for work, that organisation decides what goes into its workspace and how it is used, and Gliddi holds and processes that content on its behalf. Gliddi is responsible for the things it decides itself: running your account and sign-in, keeping the service secure, answering support requests, and the gliddi.com website. If you use Gliddi on your own rather than through an organisation, Gliddi is responsible for your data directly.
You can read it. The gliddi.com site has one form, to ask for a demo; what you type there is sent to us so we can reply, and our email provider keeps it for that purpose only. To understand who visits, the site runs two services, both hosted in the EU: Plausible, an analytics service we serve from our own domain that uses no cookies and no persistent identifier, and Leadfeeder, which matches a visitor's network address to a company name and nothing more, and sets no cookie unless you agree to one. Nothing on the site identifies you personally or advertises to you. To deliver and protect the site, our network provider (Cloudflare) processes your IP address.
The apps, and the web apps at login.gliddi.com, docs.gliddi.com and meet.gliddi.com, keep on your device only what is needed to sign you in and let you work: a sign-in cookie your browser sends back to us, and, in the desktop and mobile apps and at docs.gliddi.com, a copy of your own workspace content so it is there when you are offline. If you join a meeting as a guest and ask us to remember your name, that name stays in your browser until you clear it. If you write to us at the address above, we keep your email address so we can reply and, if you ask, to tell you about Gliddi. You can ask us to remove it at any time.
We do not sell any of it, we do not share it with advertisers, and we do not add you to anything you did not ask for.
To use Gliddi you give us an email address, which you need to create an account. We sign you in with a one-time code sent to that address, so there is no password for either of us to lose.
We do not read your messages, documents or files. A person at Gliddi looks only if you ask us for help and agree to it, if it is needed to keep the service secure, or if the law requires it. We do not sell your data, we do not use it to advertise to you, and we do not use it to train AI models.
What Gliddi does hold is what a workspace needs to work: your name, email and profile; the workspaces you belong to and your role in them; your messages, threads and reactions; the channels and direct messages you are in; who you work with; the documents you write and comment on; the files you attach; which messages you have read; and the meetings and calendar events you schedule. We hold this so we can deliver it to you and the people you work with, and so the app keeps working offline.
Some information about you reaches us from other people rather than from you: your organisation, when an admin adds you to a workspace, and colleagues, when they message you or schedule a meeting you are part of. We handle it under the same terms as the data you give us yourself.
To keep the app working we also collect a small amount of diagnostic information, such as error and event logs, which is sent to our own servers. We do not run an advertising or tracking service inside the app: there is no third-party analytics, no advertising identifier, and no ad network.
Gliddi keeps a copy of your own data on your own device so the app works with no network. It is stored there only for what the product needs, to sign you in, to work offline, and to remember your preferences, and it is removed when you sign out.
If you turn on push notifications, we send the notification through Novu to Apple or Google so it can reach your device. That is the only way push works on a phone; Apple and Google necessarily handle the delivery.
Meet, at meet.gliddi.com, carries live audio and video between the people on a call. The call is not recorded and not transcribed. If someone shares their screen, that is part of the same live call and is not stored either.
If you search for a GIF in the composer, the words you type are sent to KLIPY, which returns the GIFs to choose from. If you send one, Gliddi keeps a link to it rather than the file.
If you connect a Google or Microsoft calendar from Settings, Gliddi asks the provider for access to your calendar. We use that access for exactly two things: to show your upcoming meetings inside Gliddi, and to put a meeting you schedule in Gliddi on your calendar so the provider sends the invites.
To do that we keep a copy of your calendar events and the access tokens the provider issues on servers we run in the European Union, for as long as the connection exists. Disconnecting the calendar in Settings deletes the copy and the tokens. We do not use calendar data for advertising, we do not sell it, and we do not share it with any other product; the only companies that touch it are the infrastructure providers that host and secure it for us under contract. We do not use it to develop, improve, or train any generalised or non-personalised AI or machine-learning model. People at Gliddi do not read your calendar data. A person looks only if you ask us for help and agree to it, if it is needed to keep the service secure, or if the law requires it.
Gliddi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements. We do not use Google Workspace data to develop, improve, or train any generalised or non-personalised AI or machine-learning model.
Gliddi does not include AI features today. We do not use your messages, documents, files or calendar to train AI or machine-learning models. If we add AI features later, we will say so here first. We would use your content only to give you that feature, not to train general-purpose models on it, and it would follow the same rules and protections as the rest of your data.
Everything travels over encrypted connections (HTTPS/TLS), so nothing about your account, your messages or your calendar crosses the network in the clear. The access and refresh tokens a calendar provider issues are encrypted before we store them, and the key is held separately from the database that keeps them. Your data is held in databases we run in the European Union, kept separate per account and not accessible to other users or accounts. You sign in with a one-time code, so there is no password to lose. No one at Gliddi reads your messages, documents or calendar. A person looks only if you ask us for help and agree to it, if it is needed to keep the service secure, or if the law requires it. The copy on your own device is protected by your device and is removed when you sign out.
We do not sell your data and we do not share it with advertisers. To run the service we rely on a small number of companies that process data on our behalf, under contract and only for what we ask them to do:
If your organisation needs the current list of these providers or a data processing agreement, write to hello@gliddi.com.
Your account, messages, documents, attachments and calendar data are stored on our own servers in the European Union. Calls, push notifications and email use their providers' European regions. The website and apps are delivered to you through Cloudflare's global network. Some of the companies above are based outside the UK and the European Economic Area, so running the service can involve transferring personal data to those countries. Where it does, we rely on the safeguards the law recognises for this, such as the UK's International Data Transfer Agreement or the European Commission's standard contractual clauses. Ask us at hello@gliddi.com for a copy.
Email you send us. Until you ask us to remove it, or until we stop doing this, whichever comes first.
Your account and the data tied to it. For as long as your account exists. When you delete your account we remove your personal data, other than anything we are required to keep for accounting or legal reasons.
Content in a shared workspace. Messages and documents you post into an organisation's workspace belong to that workspace, so deleting your own account does not by itself remove them from it. The organisation decides how long its workspace and content are kept, and can ask us to delete them.
Calendar data. For as long as the calendar is connected. Disconnect it and the copy and the tokens are deleted.
Backups. We keep a rolling 14 days of backups, so deleted data can remain in them for up to 14 days before it is overwritten.
To provide the service you asked for (a contract with you), for your account and the messages and documents Gliddi has to store and deliver. When you use Gliddi through an organisation, we handle that content on the organisation's instructions rather than deciding ourselves what to do with it.
Your consent, for a calendar you choose to connect and for an email you send us. You can withdraw it at any time by disconnecting or by asking.
Our legitimate interests, for keeping the service secure, working and supported.
Which of these applies depends on how you use Gliddi, so not every one applies to everyone.
Under data protection law you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use of it, object to a use, or ask for it in a portable form. Where we rely on your consent, you can withdraw it. Which of these apply can depend on why we are holding the data, and we will explain if one does not. Write to hello@gliddi.com. We will not make you justify the request, though we may need enough information to confirm who you are and to find the data. We respond within one month. If your request is complex or you have made several, we may extend by up to two further months, and we will tell you why within the first month.
If you think we have handled your data or a request badly, you can complain to a data protection regulator. In the UK that is the Information Commissioner's Office (ico.org.uk). In the European Economic Area you can complain to the supervisory authority for the country where you live.
Gliddi is a tool for workplaces and is not intended for children under 16. We do not knowingly collect their data.
If this changes in a way that matters, we will say so here and, if you have an account, tell you. We will not quietly widen what we collect and leave you to notice.