Privacy Policy
This policy explains how Seamint LLC, doing business as Bistellar ("Bistellar", "we", "us"), handles personal information when you use the Bistellar website at bistellar.ai, the Bistellar app at app.bistellar.ai, and the Bistellar API and MCP server (together, the "Services"). Bistellar is a business product: customers are companies, and the people who use it do so on behalf of their company.
Information we collect
- Account information. Your email address and, when you sign in with Google or Microsoft, the basic profile those providers share: your name, email address and profile picture.
- Workspace information. Your company's workspace name, approved email domains, the members of the workspace and their roles, and pending invitations.
- Content you provide. Ad copy, moods, context, scripts and their directions, and descriptions of brand voices.
- Content we generate for you. Audio takes, designed brand voices and voice samples.
- API keys. The name you give a key, when it was created and last used. We store only a cryptographic hash of the key itself.
- Technical data. IP address, browser and device information, and request logs, collected by our hosting provider to run and secure the Services.
We don't use advertising or analytics cookies. The app keeps your sign-in session and unsaved drafts in your browser's local storage so you stay signed in and don't lose work.
Google and Microsoft sign-in
If you sign in with Google or Microsoft, we receive only your name, email address and profile picture, and use them only to sign you in, match you to your company's workspace and show who you are to your teammates. We don't request access to your Gmail, Google Drive, Outlook, calendar or any other data in those accounts.
Bistellar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell this information, use it for advertising, or use it to train AI models.
How we use information
- To provide the Services: directing scripts, generating audio and voices, and storing your work in your workspace.
- To sign you in, send sign-in codes and workspace invitations, and control who can access each workspace.
- To keep the Services secure, prevent abuse and fix problems.
- To respond to your requests and communicate with you about your account.
We don't sell personal information, and we don't use your content to train our own AI models.
Who we share it with
Your workspace's members can see the workspace's content and member list. Beyond that, we share information only with these service providers, who process it on our behalf:
| Provider | What it does for us |
|---|---|
| Cloudflare | Hosting, content storage (audio and voices) and request logs |
| Supabase | Sign-in and the database of accounts, workspaces and memberships |
| Google (Gemini API) | Processes scripts to direct them and generate audio and voices. We use Google's paid API terms, under which Google doesn't use this content to improve its products. |
| Resend | Delivers sign-in codes and invitation emails |
| Google, Microsoft | Sign-in, if you choose them |
We may also disclose information if required by law, or to protect the rights, property or safety of Bistellar, our customers or others.
Retention
We keep workspace content for as long as the workspace exists. When a customer asks us to delete a workspace, we delete its content and memberships within 30 days, except where the law requires us to keep it. Backups and logs are kept for a limited period and then deleted.
Security
Data is encrypted in transit. Every request is checked against your workspace membership, generated files are served only through expiring signed links, and API keys are stored only as hashes. No system is perfectly secure, but we work to protect your information.
Where data is processed
The Services are operated from and hosted in the United States, and our providers may process data in other countries. By using the Services you understand that your information will be transferred to and processed in the United States.
Your choices and rights
You can ask us to access, correct, export or delete your personal information, or object to how we use it, by emailing hello@bistellar.ai. If your company manages your workspace, we may refer some requests to it. Depending on where you live (for example in the EU, the UK or California), you may have additional rights under local law, and you can also complain to your local data protection authority.
Children
The Services are for businesses and are not directed to anyone under 16. We don't knowingly collect information from children.
Changes
We may update this policy. If the changes are significant, we'll tell workspace owners by email before they take effect.
Contact
Seamint LLC, doing business as Bistellar · hello@bistellar.ai