Security

1. Data Protection

We implement administrative, technical, and organizational measures to protect your data against unauthorized access, loss, or misuse.

• We store minimal account information (such as your name and email address) needed to operate the service, and process it using industry-standard security controls
• Access to production systems and data is restricted and audited
• We do not use your personal information or user content to train AI models

Conversation & Chat Storage

Your conversations are saved locally on your own device. They are not uploaded to our servers under normal operation and do not sync across devices, giving you full control and privacy over your chat history.

In limited circumstances — such as when content is flagged by our automated moderation (see Section 5) or when a server error requires short-term debugging — the associated message content may be stored on our servers to maintain platform safety and reliability.

Logging & Your Content

We follow a zero-logging approach for prompts and completions under normal operation. Your content remains private and is never stored or reviewed unless an error requires short-term debugging.

We only record minimal, non-personal technical metadata such as features used, the selected model, token usage, request timestamps, and general performance metrics. Your prompts and responses are not logged by default and remain private.

As part of our content moderation (see Section 5), we do log conversations when a violation of our usage policies is detected, in order to maintain a safe and responsible experience.

2. Encryption

Data is protected in transit and at rest where applicable.

• In transit: All traffic between your browser and our Services uses TLS (HTTPS)
• At rest: Sensitive data is stored using encryption where supported by our infrastructure and providers

3. Authentication & Access Control

We use secure authentication and access controls to protect your account.

• We offer email-based authentication and sign-in with Google OAuth; user accounts are managed by AWS Cognito
• Session and token handling follow secure practices to reduce risk of unauthorized access

4. Infrastructure & Third-Party Providers

Our Services run on trusted infrastructure and we work with providers that maintain strong security and compliance postures.

• Hosting & delivery: Vercel and related CDN for deployment and content delivery
• Authentication: Amazon Web Services (AWS) Cognito
• AI inference: OpenAI, Google (Gemini), OpenRouter, and other model providers; data is sent only as needed to fulfill your requests
• Payments: All payments are securely processed through Stripe, a trusted, industry-leading payment provider that uses advanced encryption and compliance standards to protect your payment information

We select providers that align with our security expectations and applicable data protection requirements.

5. Content Moderation

Our system includes automated moderation that may flag certain conversations and display a warning if content appears to violate our usage policies. This helps maintain a safe and responsible experience while respecting user privacy.

6. Monitoring & Incident Response

We monitor our systems and have processes to respond to security events.

• Logging and monitoring help us detect and investigate suspicious or malicious activity
• We respond to identified security issues in a timely manner
• Where appropriate, we will notify affected users or authorities as required by law

7. Your Role

You can help keep your account and data secure by:

• Using a strong, unique password and not sharing it
• Keeping your email and device access secure
• Reporting any suspected security issue to us at support@gotrygpt.com

8. Reporting Security Issues

If you believe you have found a security vulnerability in our Services, please report it to us responsibly. We have a Vulnerability Disclosure Policy that describes scope, how to report, and what to expect. You can also contact us directly at support@gotrygpt.com with a clear description and steps to reproduce. We will acknowledge and work to address valid issues.

9. Changes to This Page

We may update this Security page from time to time to reflect changes in our practices or infrastructure. Material changes will be posted here with an updated date.

10. Contact

For security-related questions or concerns, contact us at support@gotrygpt.com.