Privacy policy

What we store

• Your GitHub account, if you sign in: your GitHub user id, name, avatar URL and email (when GitHub shares one). Sessions live in an encrypted cookie; there is no password.
• Chats. When you are signed in, browser chats are saved to your account until you delete them. Chats made without signing in are not saved. Chats through the skill API are saved under their chatId so the conversation can continue.
• Published chats and custom agents are public: anyone with the link can read them.
• Deployments. For each contract deployed through Web3GPT we record the chain, contract name, address, deployer address and transaction hash, and list them publicly on the contracts page. Sources, ABI and bytecode are uploaded to the public IPFS network and submitted to block explorers for verification.
• Product updates. If you subscribe, we keep your email address until you unsubscribe.
• IP addresses are used for rate limiting. The counters expire when their window ends, after at most a day.

Who processes it

• OpenAI generates the agent's replies, so your messages are sent to it.
• Upstash stores chats, accounts, deployment records and rate-limit counters.
• Pinata pins contract artifacts to public IPFS.
• Etherscan and Blockscout receive contract sources for verification.
• Vercel hosts the app and provides Vercel Web Analytics (aggregate page views, no cookies).
• WalletConnect (Reown) relays connections when you connect a wallet.
• GitHub handles sign-in.

We do not sell data or use it for advertising.

Cookies and local storage

A session cookie keeps you signed in, and a cookie remembers your wallet connection. Your theme and a few UI preferences are kept in your browser's local storage.

Deleting your data

Delete or clear chats from the sidebar and user menu, and unsubscribe from updates in the user menu. To delete your account record, custom agents or skill API chats, contact us. Data written to a blockchain, IPFS or a block explorer cannot be deleted by anyone.