The pack for finance, IT and legal.

Who sees what.

For IT

Access	Sign in with Slack, Google or an email code. Single sign-on (SAML or OIDC) for your company's domain. Access by role: HR admins, named leaders read-only, each manager their own team only.
Audit log	Every view of results is logged.
Data region	Data is stored with Google Cloud in the United States. SCCs, UK Addendum and Swiss terms are in the DPA.
Calendar	Optional: Google Workspace or Microsoft 365. Gists sees only when people are busy, not what their meetings are about. People at your company don't see calendars through Gists.
HR system	Optional: Rippling, Workday and others. Teams, managers, and start and leave dates.
Breach notice	We tell you within 72 hours of learning of a breach.
Uptime	Beta: no uptime commitment (SLA) yet.
Questionnaire	Have a security questionnaire? Send it to support@gists.ai.

Each privacy setting, in words: gists.ai/security

Data Processing Agreement

Between TakeOnePiece LLC (processor) and the customer below (controller). Includes the Standard Contractual Clauses, the UK Addendum and Swiss terms.

Your company agreed not to use results to judge or rate people.

The customer agrees to

• use results only for groups of 5 or more;
• never use results, or any answer, to judge, rank, discipline or decide about one person, including pay, promotion or redundancy;
• never try to find out who gave an answer, or combine results with other data to do so;
• never act against anyone for answering, or for not answering.

We agree to

• We tell you within 72 hours of learning of a breach.
• We email you at least 30 days before adding or replacing a subprocessor, and you may object.
• Gists staff never see who wrote what.

Liability is capped at 12 months' fees, as set out in the Terms.

Who helps us run Gists.

Company	Purpose	Region
Google Cloud	Hosting and storage	United States
Google (Gemini)	Themes, summaries and suggestions, only when AI is on	United States
SendGrid	Email delivery	United States
Stripe	Payments	United States

We email you at least 30 days before adding or replacing a subprocessor, and you may object.

What Gists asks Slack for.

Scope	Why
chat:write	Send each survey, and a short post after each survey about what changed.
chat:write.public	Post in the public channel you pick, without inviting the app first.
chat:write.customize	Messages to admins and managers carry their own Gists name and icon.
im:write	Open each person's private message with Gists.
commands	The /survey command.
channels:read	List public channel names so you can pick where the post goes. Names only.
groups:read	List private channels Gists was invited to, for the same picker. Names only.
users:read	Names and time zones, so questions arrive at a sensible hour.
users:read.email	Work emails, to match each person to their HR record.
team:read	Your workspace name, to set up your company.
usergroups:read	Build teams from Slack user groups when no HR system is connected.
dnd:read	See whether someone has paused notifications, so a survey doesn't arrive then. Read only while a message is being timed; not stored.
Sign in with Slack	identity.basic, identity.email, identity.team, identity.avatar. Asked only when a person signs in to the web app with Slack, never at install.

Doesn't ask for access to channels, conversations between people, or files.

The agreement.

Between TakeOnePiece LLC ("we") and the company that adds Gists to its Slack workspace ("you").

Use	Don't use it to find out who wrote what or to get around the group size floor. The DPA is part of these terms.
Price	The first 5 seats are free. Then $2.50 a seat a month. People no survey reaches use no seat.
Payment	Monthly plans are paid by card. Annual plans are paid by card or by invoice (net 30), or another way we agree with you.
Monthly	Monthly: cancel any time in Billing. You pay for the month you're in, nothing after.
Annual	One year at a time. Renews at the same price; we email 60 days before.
Leaving	Download all your company's data from Settings: one file with people, teams, settings, and each survey's results, briefs and reports. An admin can delete the workspace in Settings. Everything is deleted 30 days later; we email you 7 days before. Backups clear within two weeks after that.
Liability	Liability is capped at 12 months' fees, as set out in the Terms.
Law	Massachusetts.

What we collect, and why.

Controller	For survey answers, the employer. For visitors and buyers, TakeOnePiece LLC.
From Slack	Names, work emails, time zones, user groups and channel names.
Answers	How they are stored and who sees them: Security overview, above.
Use	Only to run Gists. We don't sell data, show ads, or use answers to train AI models.
Rights	Your employer controls the data in Gists. To see, correct or delete yours, ask your HR team: they can download or delete a person's data in Gists, and Gists carries it out. Your survey answers aren't affected: they're stored without your name, and they're part of your company's results, which don't show who said what. Questions about your data? Write to support@gists.ai.

Price for 400 seats.

Seats are how many different people your surveys can reach in any 30 days. Each person counts once, however many surveys they get.

• The first 5 seats are free.
• $2.50 a seat a month, from the 6th seat to the 1,000th.
• $25 a seat a year, from the 6th seat to the 1,000th.
• Volume pricing: each seat after your first 1,000 is $1.00 a month, or $10 a year on annual.
• AI add-on · $1 per seat, $20 minimum, $1,000 maximum
• Monthly by card. Annual by card or invoice (net 30).
• People no survey reaches use no seat.