DPDP Planner and Organizer: privacy

1. What the planner receives

Each tool call carries a short set of company facts. ChatGPT sends the full set again on every call:

• Your industry, your company name and your role.
• A short description of your business.
• Your answers about the kinds of data you hold, the tools you use and the outside companies you share data with.
• Whether you confirmed your profile and your data map.
• Your changes to the data map, such as systems you confirm, remove, rename or give an owner.
• Any extra gaps ChatGPT adds, each linked to a source from your note.

The server builds every plan part again from these facts on each call.

Categories of personal data

• The planner is built for business facts. It asks you to leave out names and records of real people, and it works on categories of data.
• The server refuses a call that carries an email address, a phone number or a long ID number. Its tools ask ChatGPT for the data categories and the systems that hold them.
• The planner never asks for your chat history or broad context.

2. What it keeps

• The server stores no tool input and no tool output.
• It keeps no state between calls.
• Each completed call writes one log line with the tool name, the industry and the date in UTC. The line carries none of your answers and no identifier.
• There is no account, no payment and no lead form.
• The screens load nothing from outside the planner's own origin.

3. Purposes of use

• To build the plan parts you ask for.
• To see which tools and industries the planner serves.

4. Categories of recipients

• Vercel, the hosting provider that runs the server. The planner's log line sits in its logs. Vercel also keeps its own request logs, such as the time and network address of a request, under its own terms.
• OpenAI handles the ChatGPT conversation under its own terms.

The planner sells nothing to anyone and shares nothing with advertisers.

5. Retention

• Tool inputs and outputs end with the response.
• The planner's log line, with the tool name, industry and UTC day, sits in Vercel's runtime logs. Those logs stay accessible for 30 days.
• Vercel's own request and security logs follow Vercel's policies.

6. Your controls

• You choose what to type at every step.
• You can stop the journey at any step.
• You keep the pack. The planner's server holds no copy of it.
• Your ChatGPT conversation sits in your own ChatGPT account, under OpenAI's controls.

7. Privacy questions and grievances

Write to that address with any question about this page or about a planner session.

8. The MBS website

This page covers the planner. For the website itself, read the MBS privacy policy. The planner information page explains what the planner does.