AIapps in ChatGPT.
Privacy, explained.
This policy covers our separate, read-only AIapps service for ChatGPT. The website privacy policy covers visits to aiapps.com. OpenAI's policies cover your ChatGPT account and conversations.
We process tool-search requests in memory. Our application does not save search text or conversation history in a database or log request bodies. Our hosting provider, Railway, does keep connection metadata. The integration does not require an AIapps account or handle payments.
What we receive and why
When ChatGPT calls an AIapps tool, it sends the search text and parameters needed for that request. These may include search terms, categories, product-pricing filters, page numbers and tool identifiers. We use them to search, retrieve or compare active, published, non-adult directory listings. We do not request your full conversation history, account credentials or payment details. Search text can contain personal information if you include it, so do not include confidential or sensitive information in a tool-search request.
Network requests also carry connection information. Railway's HTTP logs include source IP address, user agent, host, request path, method, timestamp, response status, request identifiers, duration, byte counts and connection or error metadata. The source IP may belong to OpenAI's infrastructure rather than your device. We use operational information to keep the service available, investigate failures and prevent abuse. Do not put personal information into URL paths or query strings.
Processing and retention
Search text is processed in working memory for the request, not deliberately kept as a search history. Memory reclamation is managed by the runtime, not an immediate secure-erasure guarantee. The service retrieves public listing fields from Supabase using a fixed catalog query; it does not send your search text to that catalog query.
Our catalog cache contains public listings, not user searches. It becomes eligible for refresh after 60 seconds and is replaced on a subsequent refresh or process restart. Abuse-prevention counters use the client network address and a 60-second request window. Expired entries are removed on the next request, and all counters disappear on process restart. Neither cache is a persistent user profile.
Railway's documentation distinguishes the Pro plan's 30-day searchable log window from underlying storage. Its published guidance describes storage for up to 90 days, and its published HTTP-log support response describes a 90-day underlying lifetime. We cannot promise that logs are deleted after 30 days. Railway does not provide us with selective HTTP-log deletion or redaction controls, according to that response. Requests concerning these records may require Railway's assistance; we cannot guarantee immediate deletion. Other provider account, security or legally required records are governed by the provider's applicable policies.
See Railway's log documentation, its service-log storage guidance and its published HTTP-log support response. The support response is provider guidance, not a service-specific contractual deletion guarantee.
Who processes information
Railway hosts this service and processes network requests and infrastructure logs. Supabase supplies public directory records and tool-logo images. AIapps branding loads from aiapps.com. Image requests expose normal connection information to the image host, but the integration does not include your tool-search text in those image URLs. Railway's published HTTP-log guidance identifies US West as the storage region; provider processing can involve countries outside your own.
OpenAI sends tool requests and receives the results as part of your ChatGPT interaction. Its handling of ChatGPT data is described in OpenAI's privacy policy. Supabase and Railway also publish their own privacy policy and privacy policy, respectively. Opening an AIapps review link is a separate website visit governed by our website's privacy and cookie policy.
No advertising profiles or transactions
The integration does not use search text to build advertising profiles, sell personal information or rank results by listing payments or affiliate commission. It does not accept purchases, subscriptions, submissions or edits to tools. AIapps website review pages may contain disclosed commercial links. This policy does not claim those website visits are free of analytics or cookies.
Your controls and privacy requests
You can stop using or disconnect AIapps in ChatGPT. Use OpenAI's account controls for your ChatGPT history. Disconnecting does not automatically remove hosting logs already created.
For questions or applicable access, correction, objection or deletion requests, email nis@reflectiveapps.com. You can also use the AIapps contact page. We will assess requests under applicable law and explain any technical or legal limits, including when we need assistance from a provider. Depending on your jurisdiction, you may have the right to complain to your data-protection authority. Please describe your request without sending passwords, API keys or sensitive documents.
Changes to this policy
We will update this page when the integration's data handling changes and show the revision date above.