Privacy Policy

Effective date: October 20, 2026

This policy explains what data the Bridgerator service (“the Service”, “we”) processes when you connect your computer to ChatGPT through it. Contact: info@recondeck.com.

What the Service does

The Service is a relay. ChatGPT sends tool requests (for example “read this file” or “run this command”) to the relay over HTTPS; the relay forwards them to the bridge running on your own computer and returns the result to ChatGPT.

Data we store

• Account: your e-mail address (it is your username), a one-way (bcrypt) hash of your password, and the account creation date. If you sign in with Google, we get your e-mail address from Google (and no password is stored).
• Payments: the date your paid period ends, the payment or subscription IDs and, for Stripe, your Stripe customer ID. Card details are entered on the payment provider's page (Stripe or YooKassa) and never reach us; the provider processes them under its own privacy policy.
• Devices: the device name (by default the computer's name; you can rename it), a one-way (SHA-256) hash of the device key, creation and last-seen timestamps, and the list of tool names and descriptions your device offers.
• Usage: your plan (Free/Pro) and a counter of tool calls per month — only the number, not which tools or what they did. The monthly totals are kept for 12 months.
• Activity log: the names of the tools called on your devices and the times of the calls — no paths, commands, arguments or results. Shown on your account page, kept for 30 days; you can turn it off on the account page.
• Telegram notifications (only if you connect them): your Telegram chat id and the language for the messages, kept until you disconnect (Disconnect on the account page or /stop in the bot) and deleted then, or together with your account. The messages from our bot @BridgeratorBot carry only the computer name, counts and statuses — never task text, paths, files or command output. Telegram delivers them under its own privacy policy.
• Access tokens: signed tokens issued to ChatGPT are not stored by us; they are validated by signature and expire (access token 1 hour, refresh token 30 days).

Data we do not store

The contents of tool requests and results — file contents, file paths, search results, command text and command output — pass through the relay in memory and are not written to disk, logged or retained after the response is delivered. We do not use this data for analytics, advertising or model training. The bridge's built-in tools never send their own usage data; the bridge's own minimal usage data is described below.

On your PC

Stored only on this PC, never sent to the server: the task queue (%APPDATA%\Bridgerator\queue.json) and the list of recent actions with their command or path. That list is kept in memory; it is written to recent.jsonl only if “Keep a local history” is on, and kept for 7 days. Both live in the settings folder, which the assistant's file tools can never reach. Also only on this PC: the copies of files made before ChatGPT changes them (for “Undo AI changes”, in %LOCALAPPDATA%\Bridgerator\snapshots, 7 days by default) and the scheduled jobs (recipes and automations) with their run log. The activity log in your account still holds only tool names and times.

Data collection

The bridge on your computer sends a small amount of usage data to us at https://bridgerator.recondeck.com/t, sent over HTTPS (TLS): an event when it is installed, updated or uninstalled, and a daily heartbeat. Only these fields are sent:

• a random install id (created on your computer and stored in its local config);
• the bridge version, the Windows version, the OS language and the Node.js version;
• in the daily heartbeat: how many times each tool was called and how many of those calls ended with an error, for the last 24 hours.

Never sent: paths, file names, command text, tool arguments, outputs, your account e-mail or anything derived from your IP address. If the request fails (no network), nothing is retried or shown.

To turn it off, run bridgerator.cmd telemetry off in PowerShell (turn it on again with bridgerator.cmd telemetry on), or set "telemetryEnabled": false in %APPDATA%\Bridgerator\config.json, or install with the -NoTelemetry switch.

Technical logs

Request (access) logging is turned off on our web server. The relay's error log records only the name of an error, never request contents. Failed sign-in attempts and sign-ups are counted per IP address in memory only, to block password guessing and spam.

Contact form

When you write to us through the contact form we keep your name (if given), e-mail and message so we can answer. We do not keep your IP address. Messages are deleted once handled; at most the last 500 are kept.

Third parties

Requests originate from ChatGPT, which is operated by OpenAI under its own privacy policy. What you type in ChatGPT and the tool results returned to it are processed by OpenAI according to OpenAI’s Privacy Policy. We do not sell or share your data with anyone else.

Security

All traffic uses TLS. Sign-in uses OAuth 2.1 with PKCE. Each account can only reach its own devices. Changing your password revokes every token previously issued to ChatGPT. What the assistant may access on your computer is limited by the bridge configuration on that computer (allowed and excluded folders, read-only folders, disabled tools; by default only Bridgerator's own folders are excluded); with the terminal on, a command runs with your Windows user's rights.

Retention and deletion

Account and device records are kept while your account exists. Server backups are kept for up to 14 days, so deleted records disappear from them within 14 days. You can delete your account yourself on the account page (account and all device records are removed at once), or email info@recondeck.com. You can disconnect at any time by stopping the bridge and removing the connector in ChatGPT.

Children

The Service is not intended for anyone under 18.

Changes

We will post any changes on this page and update the effective date.