Privacy Policy

1. Introduction

At CVNGPT, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform that facilitates cost-sharing for premium ChatGPT Plus subscriptions.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, including:

• Account Information: Email address, username, password
• Profile Information: Optional profile details you choose to provide
• Payment Information: Billing details processed through secure third-party providers
• Communication Data: Support tickets, messages, and correspondence

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Log Data: Server logs, error reports, access timestamps
• Cookies: Session cookies for authentication and preferences

2.3 Information We Do NOT Collect

3. How We Use Your Information

3.1 Primary Uses

• Service Provision: Manage your account and provide access to shared ChatGPT Plus
• Lobby Management: Match users in lobbies and coordinate shared access
• Payment Processing: Handle billing and subscription management
• Customer Support: Respond to inquiries and resolve issues

3.2 Secondary Uses

• Service Improvement: Analyze usage patterns to enhance platform features
• Communication: Send important service updates and notifications
• Security: Detect fraud, abuse, and unauthorized access
• Legal Compliance: Meet regulatory requirements and legal obligations

3.3 Marketing Communications

• We may send promotional emails with your consent
• You can opt-out of marketing communications at any time
• Essential service communications cannot be disabled

4. Information Sharing and Disclosure

4.1 We DO NOT Sell Your Data

4.2 Limited Sharing Scenarios

• Service Providers: Payment processors, email services, hosting providers
• Legal Requirements: When required by law, court order, or government request
• Business Transfer: In case of merger, acquisition, or asset sale
• Safety Protection: To protect rights, property, or safety of users

4.3 Lobby Member Information

• Lobby members may see basic information (username, join date)
• Email addresses are never shared with other users
• ChatGPT credentials are shared only within active lobbies

5. Data Security Measures

5.1 Technical Security

• Encryption: All data transmission uses SSL/TLS encryption
• Password Security: Passwords are hashed using industry-standard methods
• Access Controls: Strict access controls and authentication requirements
• Regular Updates: System security patches and updates

5.2 Operational Security

• Staff Training: Employees trained on privacy and security practices
• Data Minimization: We collect only necessary information
• Regular Audits: Periodic security assessments and reviews
• Incident Response: Procedures for handling security breaches

5.3 Your Security Responsibilities

• Use strong, unique passwords
• Keep login credentials confidential
• Report suspicious activity immediately
• Log out from shared devices

6. Cookies and Tracking Technologies

6.1 Essential Cookies

• Authentication: Keep you logged in during sessions
• Security: CSRF protection and security measures
• Preferences: Remember your settings and preferences

6.2 Analytics

• We may use analytics to understand platform usage
• Data is aggregated and anonymized
• No personally identifiable information in analytics

6.3 Cookie Management

• You can control cookies through browser settings
• Disabling cookies may affect platform functionality
• Essential cookies cannot be disabled

7. Data Retention

7.1 Account Data

• Active accounts: Data retained while account is active
• Deleted accounts: Data removed within 30 days
• Legal holds: Data may be retained longer if legally required

7.2 Transaction Records

• Payment records retained for 7 years for tax purposes
• Support tickets retained for 2 years
• System logs retained for 90 days

7.3 Automatic Deletion

• Expired notifications deleted after 30 days
• Inactive accounts may be deleted after 2 years
• Email verification tokens expire after 24 hours

8. Your Privacy Rights

8.1 Access and Control

• View Your Data: Access your personal information through account settings
• Update Information: Modify your profile and preferences
• Delete Account: Request account deletion at any time
• Data Export: Request a copy of your personal data

8.2 Communication Preferences

• Opt-out of marketing emails
• Control notification preferences
• Set quiet hours for notifications
• Choose notification delivery methods

8.3 Legal Rights (Where Applicable)

• Right to Know: Information about data collection and use
• Right to Delete: Request deletion of personal information
• Right to Correct: Request correction of inaccurate data
• Right to Portability: Receive data in structured format

9. Third-Party Services

9.1 Payment Processors

• We use secure third-party payment processors
• Payment data is handled according to PCI DSS standards
• We do not store full credit card information

9.2 Email Services

• SendGrid for transactional emails
• Subject to SendGrid's privacy policy
• Email content limited to service communications

9.3 OpenAI Services

• ChatGPT usage subject to OpenAI's privacy policy
• We do not monitor or store ChatGPT conversations
• Shared credentials managed securely

10. International Data Transfers

• Data may be processed in countries where our service providers operate
• We ensure adequate protection for international transfers
• Data processing agreements with all service providers
• Compliance with applicable data protection laws

11. Children's Privacy

• We do not knowingly collect information from minors
• If we discover minor's information, it will be deleted
• Parents should monitor children's internet usage
• Contact us if you believe a minor has provided information

12. Privacy Policy Changes

• We may update this policy to reflect service changes
• Material changes will be communicated via email
• Updated date will be changed at the top of this policy
• Continued use constitutes acceptance of changes

13. Contact Information

For privacy-related questions or requests, contact us:

• Email: privacy@cvngpt.com
• Support System: Available through your account dashboard
• Response Time: Within 48 hours for privacy requests
• Data Requests: Allow up to 30 days for processing

14. Compliance and Certifications

• GDPR compliance for European users
• CCPA compliance for California residents
• SOC 2 Type II certification (planned)
• Regular third-party security audits