Privacy Policy
This Privacy Policy explains what personal data GitMir Ltd collects, why we collect it, how we use it, and the choices you have. It applies to gitmir.com and to the services we operate. By using our website or services you agree to the practices described below.
1. Who we are
GitMir Ltd is a company registered in England and Wales, Company Registration No. 15860347, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), GitMir Ltd is the controller of the personal data described in this policy. You can reach us at [email protected].
2. Information we collect
Contact and qualification data — when you use the contact form we collect your name, work email, company, role, and the information you choose to share about your workflow (its owner, frequency, current cost and target). This is the information we need to answer you with an assessment.
Scheduling data — if you book a call, the booking is handled by Calendly under its own privacy terms; we receive the details you enter there (name, email, chosen time).
Payment data — paid products are billed through Stripe. Card details are sent directly to Stripe and are never stored on GitMir servers; we retain the transaction reference, amount, currency and billing email.
Usage data — pages visited, referral source, approximate location derived from IP address, and similar analytics collected through standard server logs and Google Tag Manager / Google Analytics, subject to your cookie choice.
Product content — models, workflows and other artifacts you create inside GitMir products are treated as your confidential content. We access them only to operate the service, or with your explicit permission.
3. The local-first tool collects nothing
gitmir-local, our open-source tool, runs entirely on your machines: it requires no GitMir account and sends no telemetry to GitMir. The models it builds are plain files inside your own repository. Anything an AI model provider receives when you run tasks is governed by your own agreement with that provider — GitMir does not receive it.
4. Public models registry
The models published at gitmir.com/models are built from public open-source repositories with explicit licenses. They describe software, not people; we do not intentionally include personal data in published models. Every model names its source repository and license, and repository maintainers can request an update or removal of a public model at any time via [email protected].
5. How we use information
To provide, maintain and improve gitmir.com and our products, and to respond to your enquiries with an assessment (legal basis: our legitimate interest in operating and improving the business, or steps taken at your request before entering a contract).
To perform contracts with you — engagements, assessments and product subscriptions — including invoicing and support (legal basis: performance of a contract).
To send transactional messages such as receipts and account notifications, and to keep records we are legally required to keep (legal basis: contract and legal obligation).
To detect and prevent fraud, abuse and security incidents (legal basis: legitimate interest).
We do not sell or rent personal data, and we do not use your confidential engagement content to train models.
6. Sharing with third parties
Service providers who help us operate: hosting infrastructure, email delivery, Stripe for payments, Calendly for scheduling, and Google (Tag Manager / Analytics) for site analytics. Each provider processes data only to deliver its service to us.
During an engagement, access to your materials is limited to the scope named in the engagement and governed by its terms, including confidentiality.
Authorities — when required by law, court order, or to protect the rights, property or safety of GitMir, our users or the public.
7. International transfers
Some of our providers process data outside the United Kingdom. Where that happens, transfers rely on adequacy regulations or appropriate safeguards such as the applicable standard contractual clauses.
8. Retention
We keep contact and enquiry data for as long as needed to handle the enquiry and any resulting relationship, engagement records for the period required by contract and law, and analytics data per the configured retention of our analytics tools. We delete or anonymize data when it is no longer needed.
9. Your rights
Under UK GDPR you have the right to access, rectify, erase and port your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. To exercise any right, write to [email protected] — we respond within one month.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk), although we would appreciate the chance to address your concern first.
10. Cookies
We use cookies and similar technologies for core site functionality and analytics, as described in our Cookie Policy. You can accept or reject non-essential cookies via the banner, and change your browser settings at any time.
11. Changes to this policy
We may update this policy as our services evolve. The date above reflects the latest revision; material changes will be highlighted on this page.