gizmoriftPrivacy & trust
Protection you can understand.
Clear access controls help keep conversations within the groups and friendships you choose.
Private by invitation
Personal direct chats start with an accepted friendship. Social messages use separate follow, messaging and block controls. Groups and team spaces check membership. Personal files check ownership. Community discovery does not expose private friendships or account addresses.
Messages and files
The server stores readable messages and files so your account can open them on different devices. An operator with access to the server or its backups can access stored content. Friendship, membership and ownership checks restrict access through the app; they do not prevent infrastructure access. Use care with highly sensitive information, and keep a separate copy of important files.
Messages, files, Social content and Nova library results are not end-to-end encrypted. An encrypted account archive protects the downloaded archive with your chosen passphrase; it does not change how live account content is stored.
Account protection
Passwords use salted scrypt hashing. Protected browser cookies maintain sessions, and sessions can be revoked. The server checks access to private resources. Administrator accounts require a second factor and cannot browse private conversations or set a member’s password through normal administration pages. Pro and Ultra members can create a passphrase-protected encrypted account archive that includes authorized files; all members can use the basic JSON export.
Calls and connections
Direct calls require an invitation and acceptance. Group calls require membership and support up to eight participants. Participants can see who else has joined. Call summaries remain in the conversation; Gizmorift does not record call audio or video. Browser WebRTC protects media in transit. Independent participant identity verification and a TURN relay are not implemented. Connection information can be visible to peers and network providers. HTTPS reaches the service through Cloudflare’s tunnel and network infrastructure.
Nova and external services
Nova sends confirmed prompts, selected media and tool context to Venice and, for some models, an upstream provider. Check the processing category and credit review before confirming. Saved results are readable by the service. A personal Venice key is encrypted with a server-managed key, which protects its stored form but does not prevent operator access.
Shared devices and notifications
Readable drafts remain in the current browser tab until sign-out. Notification previews can appear outside the app, including on a lock screen. Use neutral previews or turn notifications off on shared devices, sign out when finished, and review active sessions in Settings.
What to keep in mind
People you share with can save or forward content. A compromised device or server can expose data. Public posts, reports and account metadata have different access rules from direct chats. External community bots follow their granted scopes and their operators’ data practices.
Gizmorift has not undergone an independent security audit and does not claim certification.
Report a security concern
Email Gizmorift@gmail.com. Describe the issue and how to reproduce it using test data. Please leave out passwords, recovery codes and other members’ private content.