gpt2link

Privacy Policy

How GPT2Link handles personal information across the Service.

Effective: Last updated:

Contents

Scope and who we are

This Privacy Policy explains how GPT2Link (“GPT2Link,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you access gpt2link.com, create or manage an account, purchase a plan, use an API or automated workflow, contact us, or create, host, visit, or interact with pages and other digital assets through the service (together, the “Service”).

For personal information relating to accounts, billing, Service operations, security, and our own communications, GPT2Link generally determines why and how the information is processed. When an account holder uses the Service to publish content or collect information from visitors, that account holder may separately control that information and is responsible for providing any required notices, obtaining any required consent, and responding to privacy requests. We may process such information on the account holder’s behalf where applicable.

This Policy does not apply to third-party websites, services, or content that users link to, embed, or load through a GPT2Link page. Those third parties have their own privacy practices.

The Service is intended for users who are at least 18 years old and is not directed to children. We do not knowingly create accounts for children. If you believe a child has provided personal information to GPT2Link, contact us so that we can review and take appropriate action.

Important information about public pages

A URL generated through GPT2Link may be public. Anyone who receives or discovers a public URL may be able to view, copy, download, or redistribute its content. User-hosted pages may also contain scripts, forms, downloads, media, trackers, and requests to third-party services.

Do not upload passwords, authentication tokens, API keys, payment-card data, confidential information, regulated data, special-category or highly sensitive personal information, or personal information that you are not authorized to make public. GPT2Link is not a confidential file-transfer service or a substitute for secure archival storage.

Information we collect

Information you provide. Depending on the features you use, we may collect account and profile details such as your name, email address, login credentials or password hash, account preferences, organization information, and verification or account-recovery information.

User Content. We process the HTML, CSS, JavaScript, text, images, media, files, forms, metadata, page settings, domain or link information, and other material you upload, create, host, or transmit through the Service. User Content may contain personal information about you or others.

Billing and transaction information. If you purchase a page or subscription plan, we and our payment providers may process billing contact information, transaction amounts, currency, tax information, payment status, billing identifiers, and limited payment-method details. Full payment-card information may be collected directly by the payment provider rather than GPT2Link.

Communications. We collect information you include in support requests, abuse or copyright reports, privacy requests, surveys, feedback, and other communications with us.

Technical, device, and usage information. We may automatically collect IP address, browser type, device and operating-system information, language, approximate location derived from IP address, referral information, timestamps, page or link identifiers, account and admin actions, feature interactions, traffic and performance information, error reports, and security and audit logs.

Cookies and similar technologies. We use cookies and similar technologies when you access or interact with the Service. See Cookies and similar technologies below for more information.

Information from third parties. We may receive information from payment processors, authentication providers, hosting and security providers, analytics providers, integration partners, and other services you choose to connect. The information received depends on the provider, your settings, and the permissions you grant.

Unless a law requires otherwise, providing personal information is voluntary. However, if you do not provide information required for an account, payment, security check, support request, or requested feature, we may be unable to provide that part of the Service.

How we use information

We may use personal information to:

  • Provide, operate, host, maintain, and improve the Service.
  • Create and administer accounts, sessions, pages, links, plans, and subscriptions.
  • Process payments, renewals, cancellations, credits, refunds, taxes, and transaction records.
  • Publish User Content at the user’s direction and deliver public pages to visitors.
  • Authenticate users, recover accounts, and provide the admin panel and API features.
  • Apply product limits and measure storage, traffic, page, link, and feature usage.
  • Detect, investigate, prevent, and respond to fraud, malware, phishing, abuse, infringement, security incidents, policy violations, and technical problems.
  • Respond to support, legal, privacy, abuse, and copyright requests.
  • Send transactional, security, billing, policy, and other Service-related communications.
  • Analyze performance and usage, troubleshoot, develop features, and improve reliability and user experience.
  • Send marketing or promotional communications where permitted by law and consistent with your choices.
  • Comply with law, court orders, regulatory requirements, and lawful requests, and establish, exercise, or defend legal claims.
  • Protect the rights, safety, property, and integrity of GPT2Link, users, page visitors, and others.

We may use information for another compatible purpose or with additional notice or consent where required by law.

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No system or transmission method is completely secure, and you are responsible for protecting your credentials and maintaining your own copies of User Content.

Where applicable law requires a legal basis, we process personal information on one or more of the following bases:

  • Contract: processing needed to provide the Service, administer your account or plan, host requested content, process payments, and fulfill our Terms of Service.
  • Legitimate interests: operating and improving the Service; protecting security and integrity; preventing abuse and fraud; understanding Service performance; supporting users; and protecting legal rights, provided those interests are not overridden by your rights and interests.
  • Consent: where you consent to optional cookies, certain marketing, a specific integration, or another activity for which consent is required. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.
  • Legal obligation: processing needed to comply with tax, accounting, consumer-protection, privacy, law-enforcement, court, and other legal requirements.
  • Vital interests or public interest: where processing is reasonably necessary to protect a person’s life or safety or for another basis recognized by applicable law.

User-hosted pages and information about visitors

Account holders decide what their pages contain and which browser-side scripts, forms, integrations, and third-party requests they use. A page may therefore collect information directly from visitors or send information to third parties independently of GPT2Link.

The publisher of a user-hosted page is responsible for the page’s privacy notice, cookie consent, legal basis, data minimization, security, retention, and response to visitor requests. Visitors should review notices supplied by the page publisher and any linked or embedded third party before submitting personal information.

GPT2Link may process limited visitor information, such as IP address, browser and device information, timestamps, requested URL, traffic measurements, and security logs, to deliver pages, manage traffic, prevent abuse, maintain security, and operate the Service.

If your request concerns information collected by a particular user-hosted page, contact that page’s publisher first. We may assist or forward a request where appropriate, but we may not control the publisher’s separate processing or possess all information collected through its third-party integrations.

How we disclose information

We may disclose personal information in the following circumstances:

  • Service providers. We may use vendors that provide cloud hosting, content delivery, storage, security, fraud prevention, analytics, communications, customer support, authentication, payment processing, and professional services. They may process information only for authorized purposes and subject to contractual or legal obligations.
  • At your direction. We disclose User Content and related information when you publish a page, use an integration, share a URL, or otherwise direct us to do so.
  • Account administrators and organizations. If an account is owned or managed by an organization, its authorized administrators may access and manage account information and User Content.
  • Legal, safety, and enforcement. We may preserve or disclose information when we reasonably believe it is necessary to comply with law or legal process; respond to lawful requests; enforce our Terms or policies; investigate abuse, fraud, or security incidents; protect rights or safety; or establish, exercise, or defend legal claims.
  • Business changes. Information may be disclosed in connection with due diligence, financing, a merger, acquisition, reorganization, sale of assets, insolvency, or transfer of all or part of the Service, subject to appropriate confidentiality and legal safeguards.
  • Aggregated or de-identified information. We may disclose information that has been aggregated or de-identified so that it does not reasonably identify an individual, subject to applicable law.

GPT2Link does not currently sell personal information or share it for cross-context behavioral advertising. If that changes, we will update this Policy and provide any notice or choices required by law.

Because GPT2Link serves users worldwide and may use providers in multiple countries, personal information may be processed outside the country where you live, including in Israel. Where required, we use recognized transfer mechanisms, contractual safeguards, or other lawful measures for international transfers.

Communications

We may send necessary transactional messages about accounts, pages, payments, renewals, cancellations, security, policy changes, and the Service. You generally cannot opt out of messages needed to provide or secure an active account, although you may close the account.

You may opt out of promotional email by using the unsubscribe link in the message or contacting us. We may still send non-promotional messages where permitted or required.

Cookies and similar technologies

We use cookies, local storage, pixels, and similar technologies to operate and deliver the Service, keep users signed in, remember preferences, protect accounts and the Service, prevent fraud, and understand performance and usage. Where applicable law requires, we will request consent or provide appropriate choices. Your browser or device may allow you to block, delete, or restrict these technologies, but doing so may affect Service functionality.

Data retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. In determining the retention period, we consider the nature and sensitivity of the information, why it was collected, account and Service status, security and fraud-prevention needs, legal and accounting obligations, disputes, and any applicable period displayed in the Service.

Free pages are served for the period displayed in the product. When that period ends, we stop active public hosting. Associated copies or records may remain temporarily in caches, logs, backups, security systems, or restricted abuse and legal records.

When paid hosting ends because of cancellation, expiry, downgrade, or unresolved payment failure, affected pages are unpublished. We may retain the account and remaining assets in a non-public recovery state for a limited period so that the account holder can manage them or, where eligible, renew and republish them. Before permanent deletion, we may provide advance notice where reasonably practicable or required by law.

Account holders can use available admin controls to delete individual assets or close their account at any time. When an account is closed, we delete or de-identify associated personal information and assets from active systems within a reasonable period. We may also close an inactive account and delete its remaining assets after the applicable recovery period.

Limited copies or records may remain temporarily in backups, payment and tax records, security and fraud-prevention systems, or restricted legal and abuse evidence where reasonably necessary and lawful. Deletion may also be affected by legal holds, active disputes, valid law-enforcement requests, security investigations, and technical limitations. We may retain de-identified information that no longer reasonably identifies an individual.

Your privacy rights and contact

Depending on where you live and subject to legal exceptions, you may have rights to:

  • Know whether and how we process your personal information and obtain access to it.
  • Correct information that is inaccurate, incomplete, unclear, or outdated.
  • Request deletion, restriction, or objection to certain processing.
  • Receive certain information in a portable format and withdraw consent where processing is based on consent.
  • Opt out of certain marketing or other processing, appeal a refusal where applicable, and lodge a complaint with an applicable privacy or data-protection authority.

You may exercise available account and deletion controls through the admin panel. Other requests may be submitted through the contact method below. We may need to verify your identity and authority before acting. Authorized agents may submit requests where permitted by law, subject to verification.

We will respond within the period required by applicable law. Some information may be exempt from a request, and we may retain information where legally permitted or required. We will not discriminate against you for exercising an applicable privacy right.

Privacy questions and requests may be submitted through: gpt2link-privacy@usecanal.dev

Additional business or legal contact information may be made available at: gpt2link-legal@usecanal.dev

We may update this Privacy Policy as the Service and legal requirements change. The “Last updated” date shows when it was revised, and we will provide any additional notice or obtain consent where required by law.