This page describes the current privacy design of the ChatGPT apps published by Aleff, including OSS Trust and EU Tender Scout.

Request processing: when an app is used from ChatGPT, information needed to execute the selected tool can be sent to the app backend. The current backends run as stateless Cloudflare Workers and do not implement user accounts, an application database, or deliberate persistent storage of chat content.

External data services: OSS Trust can send repository, package name, version, and related lookup data to public GitHub endpoints, OSV, the npm registry, and the PyPI JSON API as required by the requested analysis. EU Tender Scout sends the generated procurement search query and requested result fields to the official TED Search API.

Infrastructure logs: the application code does not implement its own analytics or request-history database. Infrastructure and upstream providers may still generate operational, security, or access logs under their own policies. For that reason, this site does not claim that no technical logs exist anywhere in the request path.

Website tracking: these app landing pages do not add analytics scripts, advertising trackers, or application-specific cookies.

Sensitive information: the current app versions are intended for public repository, package, vulnerability, and procurement data. Do not submit passwords, access tokens, private keys, or other secrets through app requests.

Changes: this page may be updated as the apps gain new data sources, authentication methods, or persistence features. Material changes should be reflected here before those features are presented as part of the public service.

Contact: for questions about these apps or this privacy notice, use the contact methods published on the main website.