Privacy Policy

1. What we collect

We never ask for your ChatGPT password, one-time codes or recovery codes, and we do not collect personal data beyond what an order requires.

• Checkout email — used for order notifications and delivery updates.
• Order number and payment status — used for lookups, refunds and duplicate-delivery prevention.
• The account email and notes you submit for a manual top-up — encrypted at rest and visible only to the operator fulfilling the order.
• Messages you send us — used to answer your support request.

2. Why we use it

• Create the order and complete the direct top-up.
• Send payment, delivery, refund and status notifications.
• Handle support cases, refunds and payment disputes.
• Meet the requirements of our payment processor and applicable law.

3. Payment data

Card details are entered on Stripe's hosted checkout and are never stored on our servers. We receive only the payment status, amount, currency and identifiers needed to match a payment to an order.

Stripe may process data in other jurisdictions under its own privacy terms.

4. Cookies and analytics

• A short-lived, HTTP-only cookie keeps you signed in to your own order page; it contains a signed session value, not your personal data.
• Aggregate analytics may be used to understand which pages are useful; order pages are excluded and the account information you submit is masked.

5. Retention and security

Order records are retained as long as needed for accounting, refunds and legal compliance. Sensitive fields — such as delivery content and the account email you submit — are stored with AES-256-GCM encryption.

Access to order data is limited to the operator fulfilling the order and support staff handling your request.

6. Sharing

We share data with service providers only where it is necessary: Stripe for payments and, where configured, an email provider for delivery notifications. We do not sell personal data.

7. Your choices

• Ask us what order data we hold about you.
• Ask us to correct inaccurate contact details.
• Request deletion where we are not required to keep the record for accounting or legal reasons.

8. Contact

Privacy questions: support@getgpt.homes. We usually reply within 24 hours.