Privacy Policy

Effective date: November 12, 2026

Take Care Of My AI Security ("we," "us," or "our") uses a member access portal, hosted by Take Care Of My AI Security, that verifies access to our password-protected AI tools: Custom GPTs on OpenAI's ChatGPT, and Skills you use through AI apps such as Claude, ChatGPT, Perplexity, Gemini and Grok. This Privacy Policy describes what information we collect when you use the portal, how we use it, and your rights regarding that information.

1. Information We Collect

When you register, sign in, or use our AI tools through this portal, we collect and store the following:

• Email address - used as your unique account identifier
• Password - stored as a one-way bcrypt hash and cannot be recovered. A temporary password we create for you is held only until your welcome email is sent, and is deleted after 7 days if that email has not been sent.
• AI tool names - the names of the GPTs and Skills you are authorized to access
• IP address - recorded with each sign-in and Skill request, and used for security, rate limits, and the usage reports described below. We also derive your country from it.
• Login timestamps - date and time of each authentication attempt
• Device and app details - the name of the app or browser you connect from, and a connection record for each device you sign in on
• Skill usage records - when you used a Skill, which Skill, whether it worked, how long the answer was, and the credits it used. Not the text you send or the text it returns, except for a request that fails or is blocked (see below).
• Profile details your creator adds - for example name, company or phone, if your creator enters them

We do not collect payment information or browsing history, or any other personal information beyond what is listed above.

2. How We Use Your Information

Your information is used to:

• Verify your identity and grant or deny access to the AI tool you are attempting to use
• Maintain a security log of authentication activity
• Enforce rate limits to protect against unauthorized access attempts
• Send account-related emails such as login credentials and password reset links
• Run the Skills you ask for and return their results
• Show us and our hosting provider, Take Care Of My AI Security, usage reports (which tools you used, when, your country, and response length) and count the credits your use consumes
• Alert us when a request looks like an attempt to copy a Skill's protected method. The alert names your account, not what you wrote.

What we keep from your Skill requests. We do not keep what you ask an IP-protected Skill or what it answers. We keep a record that the request happened: when, which Skill, whether it worked, how long the answer was, and the credits it used. If a request fails or is blocked, we keep that one request and any answer for up to 30 days, only so we can find and fix the problem, and then delete it. It is never shown on any page. For a Skill that runs scripts, your request and its result are held until your AI app collects the result, and deleted within two days after the Skill finishes. The creator whose Skill you use never sees your requests.

We do not use your information for marketing or advertising, and we do not sell it. We use it only for the purposes listed above.

3. Data Sharing and Disclosure

We do not sell or rent your personal information. We share it only with the service providers below and in the following limited circumstances:

• Take Care Of My AI Security, which hosts this portal
• Google Cloud, which hosts the portal and keeps server logs (including IP addresses and page addresses) for about 90 days
• Our email delivery provider, which sends account emails
• Anthropic, OpenAI, Google, xAI and Meta, which produce the results of IP-protected Skills, each only for the Skills whose creator picked its model
• Google Fonts, which supplies the lettering on some portal pages. Your browser asks Google for it, so Google receives your IP address.
• Legal compliance: If required by applicable law or a valid legal process
• Security: To investigate suspected fraud or unauthorized access to the portal

When you use a Skill, your request and its results pass through the AI app you choose (for example Claude, ChatGPT, Perplexity, Gemini or Grok), under that app's own privacy policy. For IP-protected Skills, our server sends your message, and any files or web pages it points to, to the AI company whose model the Skill's creator picked, to produce the result. Your email address and IP address are not sent with it. “Which AI companies can see your request”, below, names those companies.

Which AI companies can see your request

The creator who built an IP-protected Skill picks the AI model it runs on; you do not. If the creator has not picked one, a Claude model from Anthropic runs it. Each run goes to one company only:

• Anthropic (Claude models): Anthropic’s commercial terms
• OpenAI (GPT models): OpenAI’s data controls
• Google (Gemini models): Google’s Gemini API terms
• xAI (Grok models): xAI’s API security and data page
• Meta (Muse models): Meta’s Model API policies

What we send: your request and the Skill’s instructions, plus, for a Skill that runs code, its script files and any files or web pages your request points to. We do not add your name, email address or IP address.

How we send it:

• Anthropic and OpenAI are the only companies that run a Skill’s code. When the run ends, our servers ask the company to delete the files it was given for that run.
• OpenAI: we never use its file storage, the code runs in a temporary workspace with internet access turned off, and we turn off its option to keep responses (“store”).
• Google, xAI and Meta: text only, with no tools and no file uploads.
• If the company a creator picked is not available on our servers, a Claude model from Anthropic runs the Skill instead.

Each company may keep what it receives for a time (for example, to check for abuse). We do not use your questions and answers to train AI.

4. Data Retention

Your account details are kept while you have active access. Sign-in logs, Skill usage records (which hold no request text) and email logs are deleted after 12 months. A failed or blocked Skill request is deleted after 30 days. Connection records are deleted 12 months after the connection expires. When you use TCOM GPT Backup in the portal, your GPT's instructions and the text of its knowledge files are sent to Anthropic to audit and convert it (a file whose name looks like logins or passwords is never sent), and we keep the GPT files you import and the audit and draft Skill we make for you until you delete them. You may request deletion of your account and associated data at any time by contacting us at the address below.

5. Data Security

Your password is hashed using bcrypt before storage and cannot be reversed or recovered. All data is transmitted over HTTPS. Database access is restricted to the portal's own services and to authorized Take Care Of My AI Security administrators.

6. Your Rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal data. To exercise any of these rights, please contact us at the address below. We will respond within a reasonable timeframe.

7. Children's Privacy

This service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the effective date at the top of this page will be updated. Continued use of this service after any changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact: