Privacy Policy
for Custom GPT Users

Date:
25 November 2024

Introduction

ADS4GPTs ("we," "our," or "us") is an advertising platform designed to connect with Custom GPTs to deliver ads to their users. This Privacy Policy explains how we collect, use, and protect information when providing our services.

By using our services, Custom GPT owners and their end-users ("you" or "your") agree to the terms of this Privacy Policy. If you do not agree, please discontinue using our services.

1. Information We Collect

a. Information from Custom GPT Owners

  • Contextual Data: We process non-personally identifiable context provided by the Custom GPT owner to deliver relevant ads.
  • Technical Information: Includes data like API calls, response times, and server logs to monitor and improve our services.

b. Information from End-Users of Custom GPTs

  • We do not collect personal identifiable information (PII) from end-users directly.
  • Technical Data: We may collect anonymized technical data (e.g., browser type, device information, and interaction metrics) to optimize ad delivery and performance.
  • Contextual Data: Any context provided by the Custom GPT, managed by its owner, is processed for ad-serving purposes.

2. How We Use Collected Information

  • Ad Delivery: To serve relevant and non-intrusive ads to users.
  • Service Optimization: To monitor, improve, and secure our platform.
  • Compliance: To ensure adherence to applicable laws, OpenAI’s terms of service, and user consent requirements.

3. Data Ownership and Responsibility

  • Custom GPT Owners: Own and are responsible for managing the data they share with ADS4GPTs, including ensuring compliance with OpenAI's Usage Policies and applicable laws.
  • End-User Data Protection: It is the Custom GPT owner's responsibility to ensure any context shared with ADS4GPTs complies with relevant privacy laws and user consent requirements.

4. Data Sharing and Third Parties

We do not sell or share end-user data. Information may be shared only in the following circumstances:

  • Service Providers: With trusted vendors who adhere to this Privacy Policy and assist in ad-serving operations.
  • All third-party providers adhere to strict data protection and security standards and are limited to essential service functions.
  • Legal Requirements: If required to comply with applicable laws or legal processes.
  • Safety and Security: To protect against potential fraud or security threats.

5. Your Privacy Rights

If you are a Custom GPT owner or user under a jurisdiction with specific privacy laws (e.g., GDPR, CCPA), you may have rights including:

  • The right to access or request deletion of any data processed by ADS4GPTs.
  • The right to know how your data is used and shared.
  • For end-users: Please contact the Custom GPT owner directly to exercise your rights.

6. Data Security

We implement robust technical and organizational measures to secure information, including:

  • Encrypted communication channels (e.g., HTTPS).
  • Regular security audits and monitoring.
  • Restriction of access to data to authorized personnel only.

Custom GPT owners are responsible for ensuring that data shared with ADS4GPTs adheres to security best practices.

7. Transparency and User Consent

  • Ad Disclosure: All ads delivered via ADS4GPTs are labeled or disclosed to end-users.
  • Consent Management: Custom GPT owners must inform their users about the use of ADS4GPTs for ad delivery and obtain explicit consent if required under applicable laws. This should happen automatically when the Custom GPT invokes the Adversing Action.

8. Compliance with OpenAI Policies

ADS4GPTs complies with OpenAI’s Usage Policies and ensures that:

  • Ads are non-deceptive, non-intrusive, and free from harmful or prohibited content.
  • All data processing aligns with OpenAI’s Service Terms and applicable laws.

9. Children's Privacy

Our services are not intended for individuals under 13 years of age or the applicable age of digital consent in your jurisdiction. We do not knowingly collect information from children.

If you believe a child has provided information through our services, please contact us at [Insert Email], and we will take immediate action to delete such data.

10. International Data Transfers

Data processed through our services may be hosted on servers located outside your country of residence. These servers are operated by trusted providers adhering to stringent data protection regulations.

11. California Consumer Privacy Act (CCPA) Compliance

ADS4GPTs is committed to complying with the California Consumer Privacy Act (CCPA) and ensuring transparency, accountability, and respect for the privacy rights of California residents. This section outlines how we address the rights of California consumers under the CCPA.

a. Data Collection and Use

Under the CCPA, ADS4GPTs is considered a "service provider." We process only non-personal technical data to deliver advertisements. Specifically:

  • What We Collect:
    • Anonymized User IDs.
    • Conversation context (limited to data necessary for ad delivery).
    • Technical information (e.g., device type, interaction metrics).
  • How We Use It:
    • To provide and display relevant advertisements within the Custom GPT interface.
    • To improve service performance and reliability.

We do not sell personal information or share it for purposes beyond service delivery.

b. Consumer Rights under CCPA

California residents have the following rights regarding their data:

  1. Right to Know:
    You have the right to request details through the Custom GPT Owner about:
    • The categories of information we collect.
    • The purposes for which information is processed.
    • The categories of third parties to whom data may be disclosed.
  2. Right to Delete:
    You can request that any data shared with ADS4GPTs be deleted through the Custom GPT Owner, subject to exceptions where data is required for operational or legal obligations.
  3. Right to Opt-Out of Sale:
    ADS4GPTs does not sell personal information. This right does not apply as we do not engage in data sales.
  4. Right to Non-Discrimination:
    Exercising your CCPA rights will not result in any discrimination, such as denial of services or changes to the quality or pricing of our offerings.

c. How to Exercise Your Rights

If you are a California resident and wish to exercise your rights, you can do so by contacting the Custom GPT owner, who acts as the primary data controller. Alternatively, you may contact us directly at:

Email: contact@ads4gpts.com

Upon receiving a verifiable consumer request, we will work with the Custom GPT owner to address your inquiry promptly.

12. GDPR Compliance

As a data processor operating under the EU General Data Protection Regulation (GDPR), ADS4GPTs ensures compliance with GDPR principles. This section outlines our practices to align with the requirements for data protection and user privacy.

a. Lawful Basis for Processing

We process non-personal technical data based on:

  • Consent: End-users grant implicit consent by using Custom GPTs that integrate our advertising services, as managed by the GPT owner.
  • Legitimate Interests: Data processing is necessary for delivering relevant advertisements, optimizing operations, and enhancing user experience.

b. Rights of Data Subjects

Under GDPR, end-users of Custom GPTs have specific rights regarding their personal data. While we do not process PII, users can exercise the following rights through the Custom GPT owner:

  • Right to Access: Obtain details about the data processed within the Custom GPT context.
  • Right to Rectification: Request corrections to any inaccuracies in shared contextual data.
  • Right to Erasure (Right to Be Forgotten): Request deletion of shared contextual data if applicable.
  • Right to Restrict Processing: Limit the scope of data processed for advertising purposes.
  • Right to Object: Opt-out of receiving advertisements by disabling ad features in the Custom GPT settings.
  • Right to Data Portability: Receive a copy of the shared contextual data in a structured, machine-readable format.

c. Data Minimization

We process only the minimum necessary contextual information required to deliver relevant advertisements. No PII is collected, stored, or processed.

d. Data Security and Storage

All data is stored on secure servers hosted by trusted infrastructure providers adhering to GDPR standards. Data retention policies are configured to store information only as long as necessary to fulfill service requirements.

e. Data Transfers

For users within the EU or EEA, data may be transferred to servers located outside these regions. In such cases, we ensure:

  • Transfers occur only to countries with adequate data protection levels as determined by the European Commission.
  • Use of data processing agreements incorporating Standard Contractual Clauses (SCCs) or equivalent safeguards.

f. Processor and Controller Responsibilities

  • ADS4GPTs: Acts as a data processor, handling technical and contextual data provided by the Custom GPT owner solely for ad-serving purposes.
  • Custom GPT Owners: Act as data controllers responsible for managing user consent, ensuring compliance with GDPR, and overseeing data shared with ADS4GPTs.

g. Data Breaches

In the unlikely event of a data breach involving non-personal technical data, ADS4GPTs will notify affected Custom GPT owners promptly and take all necessary measures to address the breach. For breaches involving PII (if shared inadvertently), we will comply with GDPR breach notification requirements.

h. Contact for GDPR Inquiries

For GDPR-related questions, complaints, or requests, please contact our Data Protection Officer (DPO):

Email: contact@ads4gpts.com

13. Updates to the Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on our website with the "Last Updated" date revised. Continued use of our services constitutes acceptance of the updated terms.

14. Contact Information

For questions or concerns regarding this Privacy Policy, please contact us at:

Email: contact@ads4gpts.com