Privacy Policy

GPT Market ("we", "us", or "our") operates this platform to help users connect, configure, and enhance Custom GPT integrations. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data. By using GPT Market you agree to the practices described below.

We collect the following categories of information:

• Account information — name and email address obtained through Manus OAuth when you sign in.
• Configuration data — OAuth credentials, API keys, Hugging Face model links, agent definitions, trained-data records, agent chains, and GPT pipeline steps that you create within the platform.
• Usage data — pages visited, features used, and timestamps of actions, collected to improve the service.
• Technical data — IP address, browser type, and device information transmitted automatically with every request.

We use collected information to:

• Provide, operate, and maintain the GPT Market service.
• Authenticate your identity and manage your session securely.
• Generate and store OpenAPI schemas on your behalf for use with OpenAI Custom GPT Actions.
• Improve platform features and fix bugs based on aggregated usage patterns.
• Send important service notifications (e.g., security alerts).

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Your data is stored in a managed relational database and, where applicable, in cloud object storage (S3-compatible). We apply industry-standard security measures including TLS encryption in transit, hashed session tokens, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take reasonable precautions.

API keys and OAuth client secrets you store are held encrypted at rest. We recommend rotating credentials periodically and revoking any keys you no longer use.

We use a single HTTP-only session cookie to maintain your authenticated session. This cookie is strictly necessary for the service to function and is not used for advertising or cross-site tracking. You can clear it at any time by logging out or clearing your browser cookies.

GPT Market integrates with the following third-party services. Each has its own privacy policy:

• Manus OAuth — used for authentication. See manus.im/privacy.
• Hugging Face — model metadata is fetched from the public Hugging Face API. See huggingface.co/privacy.
• OpenAI — schemas generated by this platform are intended for use with OpenAI Custom GPT Actions. See openai.com/policies/privacy-policy.

We retain your account and configuration data for as long as your account is active. You may delete individual records at any time from within the platform. To request full account deletion, contact us at the address below and we will remove your data within 30 days.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, please contact us using the details in Section 10.

GPT Market is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

If you have questions or concerns about this Privacy Policy or your data, please reach out via the support channel on the GPT Market platform or through the Manus help portal at help.manus.im.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the revised policy.