Your information, explained.
Integration privacy notice · October 2026
This notice explains the PersProtect ChatGPT integration, operated by NEXPANSE CORP., 8 The Green, STE A #14063, Dover, DE 19901, USA. It supplements our Privacy Policy. Our Terms of Service apply to the integration.
A free email check
When you request an email check, ChatGPT sends the email address you supplied to PersProtect. We use Have I Been Pwned to check known breaches and return breach names, dates, exposed data categories, and guidance. For this integration, we cache results for no more than seven days under a keyed, one-way digest of the address. The cache does not store the entered address, and expired entries cannot be returned. The integration does not create a website account or subscribe you to a paid plan.
A free check does not verify ownership of the entered email. Only request checks for your own information or information you are authorized to protect. Reports contain breach metadata, not leaked passwords or raw breach records.
Connecting an existing PersProtect account
If you choose to connect, you sign in on PersProtect and authorize read access. We store authorization and token records to identify the connected account, check the access granted, and support expiration and revocation. ChatGPT does not receive your PersProtect password.
The integration can return the account owner’s protection summary, breach report, and real data-broker removal progress. It does not expose other people on your plan, full identity profiles, raw broker listings, billing details, mailbox contents, or stored passwords. It cannot buy a plan, change settings, start a scan, or submit a removal request.
What ChatGPT receives
The requested report is returned to ChatGPT so it can display and explain the findings in your conversation. Reports include a masked email, known breach information, and, for a connected account, your protection status and broker progress. The email you enter in a ChatGPT conversation is already visible to ChatGPT; masking our report does not remove it from that conversation. Information handled by ChatGPT is subject to your ChatGPT account’s privacy settings and OpenAI’s policies. Do not enter passwords, card details, Social Security numbers, or verification codes in a conversation with this integration.
Operational data and analytics
We use limited operational records to secure the integration, enforce request limits, and diagnose errors. Feature analytics may include the tool used, connection state, interface actions, timing, theme, and errors. We do not include entered emails, breach or removal results or counts, message text, identity profiles, authentication tokens, or raw report values in integration analytics. The integration does not keep a separate copy of your ChatGPT conversation.
Retention and your choices
Existing website-account records follow the retention practices described in our Privacy Policy. The integration’s anonymous breach cache expires within seven days. Connection grants and refresh credentials last for up to 30 days, access credentials expire after 15 minutes, and one-time authorization codes expire after 60 seconds. Access stops when a grant is revoked or expires. Disconnecting the integration does not delete your PersProtect website account or ChatGPT conversations.
You can disconnect PersProtect in ChatGPT’s app settings. To revoke a remaining PersProtect authorization, or request access, correction, or deletion of information held by us, contact legal@persprotect.com. We verify account-related requests before acting. For information retained by ChatGPT, use OpenAI’s account and privacy controls.
Contact
Privacy questions: legal@persprotect.com. Product help: PersProtect support.