Exit Mode for ChatGPT: Privacy Notice

1. Who we are

Exit Mode Ltd publishes the app and is the controller of the limited data it processes. Contact ea@adamjgraham.com with any privacy question or request.

2. Free tools

The four free tools (valuation estimate, buyer-readiness check, 90-day plan and public deal comparisons) do not need an Exit Mode account. The business figures and answers you give are used to calculate the result you asked for. The app does not save them as a business profile or report. Please use rounded or anonymised figures where you can, and do not share customer lists, bank or card details, identity documents or confidential deal documents in the chat.

3. Connecting your Exit Mode account

Connecting your account is optional and only needed for the two member tools. You log in on Exit Mode's secure login page, never in the conversation. The app then stores only the minimum needed to run the connection: an account identifier and encrypted connection data, used to authenticate requests, apply usage limits and let you revoke access. It checks whether your account includes the relevant access using our existing account rules. Your email address, purchases and payment details are not included in the results sent to ChatGPT.

• Access tokens expire after 10 minutes.
• A connection lasts at most 30 days before you need to reconnect. Refresh tokens change on each use, and reuse of an old one ends the connection.
• Unfinished login requests expire after 10 minutes, and one-time login codes after 90 seconds.
• Disconnecting the app in ChatGPT revokes the connection and deletes its connection data. It does not delete your Exit Mode account.

4. What the app does not do

• It does not sign you up to emails or newsletters.
• It does not use advertising pixels or tracking on its login and consent pages.
• It does not store the content of your requests or its responses in its logs.
• It does not sell your data.

5. Usage limits

To keep the service fair and protect it from misuse, the app keeps short-lived usage counters. These expire after no more than two days. Counters for connected accounts use a pseudonymous identifier and are not used for marketing.

6. Service providers and where data is held

• Vercel hosts the app. The app runs in London. Like any web host, Vercel processes request details such as IP address, browser type and the address requested, and keeps request logs for up to 30 days. The app writes no logs of its own and request contents are not logged. Vercel may process data in the US under standard contractual clauses and the UK International Data Transfer Addendum.
• Upstash stores the usage counters, the encrypted connection data and copies of our published deal data, in London. Connection data is encrypted by the app before it is stored. Deleted data can remain in Upstash backups for up to four weeks.
• Supabase runs our existing Exit Mode account login, in Frankfurt. Its security logs, which include IP address, are kept for 7 days.
• OpenAIprocesses your conversations and the app's results under its own terms and privacy policy. Results the app returns become part of your ChatGPT conversation and follow your ChatGPT data settings.

The Exit Mode login page you use to connect your account is part of our website and uses Umami, a privacy-respecting analytics tool, as described in our main Privacy Policy. The consent page itself has no analytics.

7. Your rights

You can ask to access, correct or delete your data, or object to how we use it, by emailing ea@adamjgraham.com. You can also complain to the UK Information Commissioner's Office. Our main Privacy Policy explains these rights in full.

8. Changes

We will update this notice if the app changes how it handles data, and change the date above.