Current information
ChatGPT sign-in supplies a user identifier, email and, where available, name. The organisation record stores the owner identifier, organisation name, domain, selected AI clients and declared planning count.
D1 also stores DNS verification state, challenge and expiry, creation timestamps, and associated Stripe test customer, checkout and price identifiers. Billing receipts store event identifier, organisation, type and timestamp; they do not store the full webhook payload.
The preview does not collect device reports, prompts or conversations. Do not enter patient information, credentials or other sensitive content in organisation names or setup fields. Hosting and payment providers also handle requests under their own applicable terms.
Purposes and responsibilities
The application uses these records to associate a saved plan with its owner, verify a domain, export the plan and exercise test billing. DNS verification sends the organisation domain to Cloudflare’s resolver.
The operator must confirm legal bases for account administration, security and future billing before launch. For future employee/device evidence processed under customer instructions, the customer would ordinarily be controller and Alethrai processor. That allocation needs a binding agreement.
Retention, transfers and rights
No general retention schedule or automatic account-deletion service is implemented. The setup export is not a complete personal-data access export. Challenge expiry and the proposed 24-hour recipe validity do not delete account or billing records.
Provider locations, transfer safeguards, retention periods and backup deletion must be confirmed. No EU-only processing commitment is made. Depending on the applicable basis, rights include access, correction, erasure, restriction, portability and objection; consent may be withdrawn where used.
Individuals may complain to the competent supervisory authority. A verified rights-request contact, response procedure and any required representative or DPO details must be published before launch.
Official references
These sources inform the draft. They do not endorse Alethrai.