Privacy Policy

TunnelGPT (“we”, “us”) respects your privacy. This policy explains what we collect when you use tunnelgpt.net and why.

What we collect

• Account information — your name and email address when you create an account.
• Credentials — your password, stored only as a salted one-way hash. Nobody at TunnelGPT can read it.
• Session data — one strictly necessary cookie that keeps you logged in.
• Content — once chat is enabled for your workspace, the messages and files you submit, processed to provide answers.

What we don’t do

• We don’t sell your data.
• We don’t use your conversations to train models.
• We don’t use advertising or cross-site tracking cookies.

Model providers

To answer a message, we send the relevant content to the model provider you (or Auto) selected. Providers process it only to generate the response.

Retention and deletion

We keep account data while your account is active. You can ask us to delete your account and all associated data at any time; we complete deletion within 30 days.

Security

Traffic is encrypted in transit. Passwords are hashed with scrypt and a unique salt. Session tokens are stored only as hashes.

Contact

Questions about privacy? Write to privacy@tunnelgpt.net.