Privacy Policy

2) Data We Collect

Information you provide

• Account details (e.g., name, email, password hash).
• Prompts, messages, files, and feedback submitted to the Services.
• Billing details (e.g., payment method, transaction info) handled by payment processors.

Information collected automatically

• Usage data (pages viewed, buttons clicked, referrer, timestamps).
• Device and log data (IP address, browser/OS, language, approximate location).
• Cookies, local storage, and similar technologies (see Cookies).

Information from third parties

• Authentication providers (e.g., OAuth profile basics).
• Analytics, ad networks, and fraud prevention partners.
• AI platform providers to process your prompts and outputs.

3) How We Use Data

• Provide, maintain, and secure the Services.
• Process your prompts to generate outputs and improve relevance.
• Personalize content and features.
• Monitor usage, debug, and prevent abuse and fraud.
• Communicate with you (service updates, security notices, and�if you opt in�marketing).
• Comply with legal obligations and enforce terms.

4) Legal Bases (GDPR)

We process personal data under these bases, as applicable:

• Contract: To provide the Services you request.
• Legitimate interests: To secure, improve, and operate the Services.
• Consent: For optional analytics/marketing cookies and certain data uses.
• Legal obligation: To comply with applicable laws and regulations.

5) Sharing & Disclosure

We may share data with:

• Service providers acting on our behalf (hosting, analytics, security, payments, support).
• AI vendors to process prompts/outputs strictly to deliver the Services.
• Affiliates, in compliance with this Policy.
• Authorities or third parties when required by law or to protect rights, safety, and security.
• In a business transaction (e.g., merger/acquisition), with appropriate safeguards.

We do not sell your personal information.

6) Cookies & Tracking

We use necessary cookies to operate the site and optional cookies for analytics, performance, and personalization.

• Necessary: Authentication, security, session management.
• Analytics/Performance: Traffic analysis, feature usage, site improvements.
• Preferences: Remembering settings such as language and theme.

You can control cookies via your browser settings and our site preferences. If required, a cookie banner will ask for consent for non-essential cookies.

7) Data Retention

We retain personal data only as long as necessary for the purposes outlined in this Policy, to comply with legal obligations, and to resolve disputes. You may request deletion of your account and associated data (subject to limited exemptions).

8) Security

We implement administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit, access controls, and monitoring. However, no system is completely secure.

9) AI Processing

To generate responses, your prompts and outputs may be processed by third-party AI providers under contract. We restrict providers from using your data to train their models unless you explicitly opt in or such use is covered under separate terms presented to you. Avoid including sensitive personal data in prompts unless strictly necessary.

10) International Transfers

Your data may be processed in countries outside your own. Where required, we use approved transfer mechanisms (e.g., Standard Contractual Clauses) and implement additional safeguards.

11) Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict processing; withdraw consent where processing is based on consent.
• Port your data to another service.
• Lodge a complaint with a supervisory authority (e.g., your local data protection authority).

To exercise rights, contact us at privacy@chat-gpt.org. We may need to verify your identity.

California (CCPA/CPRA)

California residents may request disclosure/deletion of personal information and opt out of sharing for cross-context behavioral advertising. We do not sell personal information.

12) Children's Privacy

Our Services are not directed to children under 13 (or the age required by your jurisdiction). We do not knowingly collect personal data from children. If you believe a child provided us data, contact us to request deletion.

13) Changes to This Policy

We may update this Policy from time to time. The updated version will be indicated by an updated "Last updated" date and is effective when posted. Material changes may be communicated via email or prominent notice.

14) Contact Us

Data Controller: [Your Legal Entity Name]

Email: privacy@chat-gpt.org

Postal: [Your Registered Address]

Send a privacy request

If you are in the EEA/UK, you may also contact your local data protection authority.