Privacy policy

Connection and selected documents

When you connect Pricemirror AI to ChatGPT, you sign in through our authentication portal and authorize access to your account. To identify and validate the connection, we process your internal user identifier, email address, email verification status and technical authorization and session data. The connection remains subject to your existing account permissions and usage limits.

At your request, we import selected chat attachments as original files into your account. We process files, file names, types and sizes, and their contents, which may include businesses, contact persons, project details, work descriptions, prices and commercial terms. These may include scans, offer photos and handwritten amendments. Provide only documents needed for your comparison that you are entitled to use for this purpose.

Comparison generation and ChatGPT

Pricemirror AI creates new comparisons using the same infrastructure as its website. The OCR and AI services described in this policy process the selected documents and your instructions. Offer photos are read by a visual AI model; unreadable details remain marked as such. The result is saved in your account. Existing ChatGPT tasks prepared before this change may still be completed by ChatGPT, which receives originals through temporary file links and submits the generated table. Your account's EU setting applies to our own processing steps, but does not control processing or retention within ChatGPT. Those are governed by the terms and account settings of your OpenAI service.

Depending on the requested action, ChatGPT also receives offer and comparison names, document and operation identifiers, processing status, timestamps, available allowances, a text preview of the comparison table and temporary export links. The embedded interface receives the account, offer and table data needed for display and editing, including account settings and an optional company logo. Full tables and interface data are transmitted separately from the shortened response to the model. Document contents may themselves contain personal data.

Purposes and recipients

We use this data for authentication, import, comparison, storage, editing and export, and to check permissions, prevent duplicate operations and record actual usage. This includes operation records, hashes, status and error information, and comparison instructions and submitted results in generation logs. Technical request information, including IP addresses and timestamps, is processed for operation and abuse prevention. Recipients include Vercel and Supabase for hosting, authentication and storage, and OpenAI for use within ChatGPT.

Your controls

Disconnecting the plugin in ChatGPT does not delete your Pricemirror AI account. Deletion within Pricemirror AI does not remove conversation content already sent to ChatGPT or files you have downloaded. Section 9 describes retention and deletion at Pricemirror AI. For ChatGPT data, also use that service's data controls. For access or deletion requests, contact info@pricemirror.ai.

Additional retention information for the ChatGPT connection

• Originals and saved comparisons: remain available through your account until you remove them using the provided deletion functions. Deleting an individual offer or comparison does not automatically remove all technical operation records or generation logs.
• Temporary exports: can be retrieved through the same plugin export operation for up to 24 hours after that operation is created. Each download link is valid for no more than five minutes and never beyond that period. Expiry limits retrieval; it does not confirm simultaneous physical deletion of the file or copies already delivered.
• Prepared comparisons: can be submitted within 30 minutes. This submission window is not a deletion deadline. An operator-initiated cleanup process can remove expired exports and preparation copies at least 24 hours old; preparations for running generations are excluded from redaction. A recurring cleanup run is not currently enabled.
• Operation records and generation logs: additional instruction copies and submitted results in generation logs, and operation and usage records, are not removed by that artifact cleanup. No general automatic deletion based solely on elapsed time is currently configured for these records. They are included in the full account-deletion process. General 90- or 180-day statements for other log categories are not retention commitments for these records or for separate OAuth connection records held by the authentication portal.
• Account deletion: removes associated product data, original files, temporary exports, preparation copies and generation logs through our deletion process. A minimal technical deletion marker with the internal user identifier (UUID), deletion status and timestamps remains without automatic expiry. It prevents operations still in progress from recreating deleted data and contains no offer contents. Downloaded files, cache copies already delivered and content held by ChatGPT are not recalled by this process.