Privacy Policy
Last updated: September 30, 2026
1. Data we receive
If you register, we receive your email, optional profile details, password hash if applicable, and account, billing and usage records. Our ChatGPT product-card tool receives the product name, optional benefits, brand, price, design choices and public photo URL that you submit. We do not request your full ChatGPT conversation.
2. Anonymous ChatGPT previews
For the 50-preview lifetime allowance, ChatGPT supplies an account-specific subject value. We apply a server-side keyed hash and store only the hash, preview count and record timestamps; the raw subject is not stored in this quota record. Short-lived attempt timestamps enforce rate limits. Anonymous product-card inputs and JPEG results are processed for the request and returned to ChatGPT; this tool does not save a template or image file in your ogCover account. The quota record has no scheduled expiry. Attempt records older than one minute are removed by best-effort cleanup and may remain longer if cleanup has not run.
3. Connected accounts and stored content
If you connect an ogCover account, we store granted OAuth permissions and hashes of access and refresh tokens. The integration can list saved template names, descriptions and variable names, create a private editable template, and render a template with values you provide. We store your saved templates, uploads, cached previews and usage counts to operate the service. A public photo or image URL you provide may be fetched by our renderer, disclosing the request to that URL's host. Avoid sensitive personal information in product fields, templates and URLs.
4. Recipients
The providers needed to run ogCover may receive relevant data: hosting and database providers, Cloudflare R2 for uploaded assets and cached previews, Resend for service email, YooKassa for payments, and Hawk for error monitoring. We do not store full payment card numbers. OpenAI receives tool inputs and results, including JPEGs, when you use ogCover in ChatGPT, under its own privacy terms. A public photo host receives a request when its URL is fetched. If you separately use our AI design features, the submitted information is sent to the configured AI provider. We do not sell private content or use private images to train AI models.
5. Retention
Account details, saved templates, uploads and usage records remain while your account is active unless you remove individual content or request deletion. The anonymous subject hash and count remain for the lifetime of the service unless a valid deletion request can be fulfilled; the allowance does not reset. OAuth codes expire after five minutes, access tokens after one hour, and refresh tokens after 30 days from issue or renewal. Expiry makes tokens unusable but does not itself erase their stored hashes or grant records. Revoked grants and operational records can remain until record or account deletion. Payment records may be kept longer where law requires. Technical logs and monitoring events follow the infrastructure and provider retention settings; contact us for the current schedule.
6. Your controls and requests
You may use an anonymous preview without connecting an account, omit a photo, delete individual saved templates and uploaded assets, and disconnect ChatGPT to stop future account access. Disconnecting does not erase historical usage or the anonymous quota record. There is currently no self-service account deletion control. For access, correction or deletion requests, or questions about an anonymous quota record, email support@ogcover.io. We may need to verify the request; an email address alone cannot reliably identify a ChatGPT subject hash.
7. Cookies, security and contact
The website uses essential sign-in and language cookies and consent-based analytics as described in our cookie notice. We use HTTPS, hashed credentials and access controls, although no internet service can guarantee absolute security. For privacy questions contact support@ogcover.io. This policy covers ogCover; OpenAI handles your ChatGPT account and conversations under its own policies.