Data we store
We store a Site-scoped account identifier, API key hashes and prefixes, credit balances, review content and responses, callback payloads, task leases and results, and purchase metadata. We do not run model inference on this content. ChatGPT handles sign-in; Stripe handles card details when payments are enabled.
Private links
Anyone holding a review link can view and respond to that review. Anyone holding an intake URL can send events to that inbox; the account key is required to read them. Keep these URLs out of public repositories and logs. Reviewer names are optional and self-reported. Remote review images load from the image host you provide, which can observe the request.
Retention and deletion
Review content and callback queues are scheduled for deletion seven days after their expiration. Acknowledging events immediately erases their payloads; deleting an inbox erases all events and stops intake. Task records are scheduled for deletion 30 days after their last update. Cleanup runs opportunistically during service traffic, so physical deletion may lag when the service is idle; API expiry still applies. Sandbox access ends after 24 hours.
Abuse protection
We use a SHA-256 hash of the connecting IP address, when provided by hosting, for time-limited sandbox provisioning quotas. We do not use advertising trackers. Browser storage is not used for authoritative product data or API keys.
Control your data
You can revoke keys, cancel reviews, erase inbox payloads and delete operational account data through authenticated API endpoints. Payment provider and hosting records follow their own retention rules.