Start free

Privacy Policy

Effective August 17, 2026

This Privacy Policy describes how Linkstone Studios (“Linkstone,” “we,” “us”) collects, uses, shares, and retains information in connection with Gahmbit (the product at app.gahmbit.com and related clients) and this marketing site (gahmbit.com).

For a plain-language product story about company isolation and optional AI defaults, see Trust. This policy is the operator statement for store listings, account signup, and customer diligence. It may be updated; the effective date above is current.

Gahmbit is operated by Linkstone Studios. The marketing site is informational. The product is a radical-transparency OKR platform: within an organization, authenticated members can read that organization’s OKRs and related strategy content. There is no private-OKR mode that hides objectives from other members of the same organization.

Depending on how you use Gahmbit, we may process:

  • Account and identity data — typically name, email, and authentication identifiers via Firebase Authentication when you sign up or sign in.
  • Organization and membership data — organization name, roles (for example member or admin), invites, and membership status on our platform control plane.
  • Strategy and OKR content you or your organization create — people directory snapshots, teams, cycles, objectives, key results, check-ins, comments, coverage state, and similar tenant content. That content is stored in a dedicated database for your organization.
  • Usage and product analytics — events that help us operate and improve the service (for example Firebase Analytics, Crashlytics, and Remote Config where enabled).
  • Billing and payment metadata — when an organization purchases prepaid AI credits on the web, payment is processed by Stripe; we store wallet balances, ledger rows, pack identifiers, and limited payment-method display metadata (for example brand and last four digits), not full card numbers.
  • Integration data you connect — for example Slack workspace mapping or HRIS/CSV people sync metadata and credentials references needed to run those connections.
  • AI run metadata — when optional AI is used: organization, actor, agent type, model id, token counts, status, and timestamps on the billing store. Prompt and completion bodies are not kept there or for model training.
  • AI product archive — when Agents are enabled: coach transcripts, Document Alignment Review reports, and org-visible workflow findings in your organization’s database, so members can reopen them. Document uploads from Run the Gahmbit are not retained. Org Brain sources you upload, when that feature is enabled.
  • Communications you send us — support or sales messages you choose to send.
  • Website technical data — standard server or hosting logs (for example IP address, user agent, and request metadata) when you visit gahmbit.com. Marketing page views on gahmbit.com are measured with Google Analytics 4. We store allowlisted first-party campaign parameters (for example utm_* and gclid) in session storage on gahmbit.com so Start free can pass them to the product. Marketing analytics include page path and those campaign keys — not emails, names, or OKR text.

We use information to:

  • Provide, secure, and maintain the Gahmbit product and this site.
  • Authenticate users, enforce organization membership, and route each organization to its own strategy database.
  • Display org-visible OKRs, coverage, comments, and related product surfaces to authenticated members of that organization.
  • Process prepaid credit purchases and auto-refill (when enabled), and meter optional AI inference against the organization wallet.
  • Operate optional integrations (Slack, people sync) that you enable.
  • Send transactional or product emails related to your account or organization (for example invites, check-in reminders, or org digests), subject to applicable controls.
  • Send occasional product-update emails about new Gahmbit features to people who create an account. These are separate from org digests; you can unsubscribe from product updates via the link in those emails.
  • Monitor reliability, prevent abuse, and improve the product. We do not use your organization’s OKR text to train models.
  • Comply with law and enforce our Terms of Use.

Isolation is between companies. After membership checks, members of organization A cannot open organization B’s strategy database. Accounts, membership, and billing live on a platform control plane separate from strategy content.

Within your organization, radical transparency is a product feature: every authenticated member can read that organization’s OKRs and related org-visible content. Missing coverage is shown deliberately. Contributors and watchers are display metadata only — OKRs stay company-visible. Optional AI findings computed from org-visible OKRs are readable by members of that organization — metering gates who can spend credits to run AI, not who can read existing findings.

If you do not want colleagues in your organization to see certain strategy content, do not put it in Gahmbit. The product is not designed as a personal private notebook.

Optional AI features (when enabled for your organization) use private open-source models behind Gahmbit’s AI service. We do not use your organization’s OKR text to train public or third-party commercial models.

Prompt and completion bodies are not retained on the platform billing store, the inference provider training path, or for model training. We retain run metadata (who, when, which agent, tokens, status). When Agents are enabled, coach transcripts, Document Alignment Review reports, and org-visible workflow findings are archived in your organization’s isolated database so members can reopen them — that archive is org-visible product data, not a training corpus. Document uploads from Run the Gahmbit are not retained. Continuing a coach thread can include prior archived turns (those turns are billed). Org Brain, when enabled, stores company-visible sources you upload and may retrieve them to ground a run.

AI is prepaid and optional. The free OKR core works with a zero credit wallet; inference requires available credits.

We do not sell your personal information. We share information only as needed to operate Gahmbit, including with:

  • Service providers and subprocessors that host or process data on our behalf — for example Google Firebase (authentication and mobile/web ops SDKs), Google Analytics 4 (marketing page views on gahmbit.com), Sentry (diagnostics and crash reporting), Turso (per-organization strategy databases), DigitalOcean (application hosting and, when AI is enabled, pinned open-source inference), Stripe (payments), and email delivery providers.
  • Integration partners you connect — for example Slack or ChartHop / HRIS sources — so that the connection you authorize can function.
  • Other members of your organization, for org-visible product content as described above.
  • Professional advisors, or authorities, when required by law, to protect rights and safety, or in connection with a corporate transaction involving Linkstone or Gahmbit.

Subprocessors process data under our instructions. Payment card data is handled by Stripe under Stripe’s terms and privacy policy; Gahmbit does not store full card numbers.

We retain account, membership, billing, and tenant strategy data for as long as your organization uses Gahmbit and as needed afterward for legitimate business, security, backup, and legal purposes. You may delete your personal account in the product (Settings → Account) or follow Delete account. An organization admin may archive an organization; further org deletion requests are subject to verification and legal retention needs.

AI run metadata is retained for billing and audit. Coach transcripts, Document Alignment Review reports, and org-visible workflow findings in the organization’s database persist as org product history while the organization remains active, unless removed through product or admin processes we provide. Document uploads from Run the Gahmbit are not retained. Some platform findings snapshots expire or are purged on a short TTL; they are not a substitute for the tenant archive.

Website logs are retained for a limited operational period.

We use administrative, technical, and organizational measures appropriate to the nature of the service, including authentication, membership checks before tenant database access, and separation of platform control-plane data from per-organization strategy databases. No method of transmission or storage is completely secure; we work to protect systems and continuously improve controls.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. Organization admins control much of the tenant content for their company. To delete your personal Gahmbit account, use Settings → Account or Delete account. For other privacy rights, contact us using the details below. We may need to verify your identity and your relationship to the organization.

You can disconnect optional integrations in product settings where available. You may be able to limit analytics or marketing communications where we offer those controls. Core transactional messages related to the service may still be sent.

Gahmbit is a business productivity service. It is not directed to children under 16, and we do not knowingly collect personal information from children under 16.

We and our subprocessors may process information in the United States and other countries where we or they operate. If you access Gahmbit from outside those locations, you understand that information may be transferred to and processed in those countries, which may have different data-protection laws than your own.

We may update this Privacy Policy from time to time. We will change the effective date above and, when changes are material, provide additional notice through the product or site as appropriate. Continued use after the effective date constitutes acceptance of the updated policy where permitted by law.

Privacy questions: contact Linkstone Studios via https://linkstone-studios.com. Product sign-in: https://app.gahmbit.com/signin. Related pages: Trust, Terms, Delete account.