Last updated October 2, 2026. This policy covers ClientReport, Scanquill, QuickInvoice, SignatureKit, StatementSheet (the “plugins”), operated by Bartok Tools.
When you use a plugin in ChatGPT, ChatGPT sends us only the information needed for that request, such as the details for your QR code, invoice or report, or a file you attached. We also receive an anonymized ChatGPT user identifier, used to apply fair-use limits and measure usage. It does not identify you. For abuse prevention (for example blocking repeated wrong passwords) we keep a one-way hashed code derived from your network address, never the address itself, for up to 24 hours. We record when each tool is used (time, tool name, success) to measure usage.
If you create an account we store your email address, a securely hashed password (never the password itself), whether you opted in to product emails, and the things you choose to save: business details, clients, invoices, signatures, QR codes and scan counts, report history, category rules.
Files you attach (for example a bank statement) are processed in memory to produce your result and are not stored. Generated files (PDFs, spreadsheets, images) are stored temporarily so you can download them, and expire automatically, between 2 and 30 days after creation depending on the plugin, or up to 12 months for invoices and reports saved to an account. Headshots you choose to host for an email signature are kept until you delete your account.
When someone scans a dynamic QR code we record the time, an approximate country, and device type (iOS/Android/other) to show scan counts. We do not store IP addresses in our database.
Only to provide the plugins, keep them secure, fix problems, and understand aggregate usage. If you opted in, we may email you occasional product updates; every email has an unsubscribe link. We do not sell personal data or use it for advertising.
We host on Vercel (application) and Turso (database). If you buy a paid plan on our website, payments are processed by Stripe; we never see or store your card details, only a Stripe customer reference and your plan status. These providers process data on our behalf under their data processing terms.
Account data is kept until you delete your account. Email chatgptplugins.support@gmail.com to access, export or delete your data. We respond within 30 days.
The plugins are not directed at children under 13.
We'll update this page and the date above if this policy changes.