1. Website data
The website processes email, optional phone, order and payment state, device authorization identifiers, sessions and security logs for accounts, orders, membership, authorization and abuse prevention. It also records the source IP when an account is registered or an order is created. A region is stored only when supplied by the reverse proxy; otherwise it is shown as unknown. IP and region are used for security and administrator reporting and are not sent to a third-party geolocation service. Passwords, one-time codes and refresh tokens are never stored in plain text.
Optional phone numbers are unverified and cannot be used for sign-in, recovery or bypassing email verification.
2. Local extension data
Prompts, references, tasks, templates, result indexes and settings stay in browser-local extension storage. The website cannot upload, inspect, delete or take over this content.
Only when you start a task are prompts and references submitted through the signed-in ChatGPT or Gemini page.
3. Necessary processors
Payment, email and CAPTCHA providers process the minimum data needed once configured. Vendors are not final, so none are invented here.
We do not collect identity-card numbers, bank-card numbers, payment passwords or ChatGPT/Gemini credentials.
4. Retention, export and deletion
Account security and business records are retained for their purpose and applicable requirements; finance and audit data is minimized. You can export website account data or request deletion in Account Security.