Privacy Policy
Effective: 2026-07-08
WishlistGPT is a personal wishlist tool. You use it inside ChatGPT (and on the web), and it collects and processes only what's needed to run the service:
- Account data: an account identifier, your email address (if you sign in with email), a nickname, and any profile photo you upload.
- Wishlist data: the products you save — the link, the details you or the assistant provide (title, price, merchant, size/color), a saved copy of the cover image, and any notes you add.
- Sharing data: share links you create to show a read-only list to others.
- Minimal diagnostics: basic request/log identifiers to troubleshoot issues and prevent abuse.
- Early-access interest: if you tap “Buy with AI” or “Gift with AI,” we record that interest (including the product link) to gauge demand for the feature.
Using WishlistGPT inside ChatGPT
When you use WishlistGPT through ChatGPT, the ChatGPT assistant sends us the product details you choose to save (such as the link, title, image, and price). We receive and store only what is needed to add the item to your list. Your ChatGPT conversation itself stays with OpenAI and is governed by OpenAI's privacy policy; we do not receive your full chat history.
How we use data
We use this data to save and display your wishlist, enable sharing, operate the service, and keep it secure. We do not sell your personal information and we do not use it for targeted advertising.
Third-party infrastructure
We use third-party cloud infrastructure providers to operate WishlistGPT (e.g., Vercel for hosting and Supabase for database/auth). They process data on our behalf to provide the service.
Cookies
We use essential cookies for authentication/session. No advertising cookies.
Public sharing
If you create a share link, anyone with the link may view the shared list. Avoid including sensitive personal information in notes.
Your controls
You can delete individual items and revoke or rotate a share link at any time from the app. To delete your account and associated data, contact us using the address below.
Data retention & deletion
We keep your wishlist and account data while your account is active. When you request account deletion, we remove your personal data within 30 days (backup copies are purged on our normal backup cycle). Minimal diagnostic logs are retained for roughly 90 days and then deleted.
Children
WishlistGPT is not directed to children. You must be at least 13 years old (or the minimum age required in your country) to use it.
Contact
Questions or deletion requests: support@wishlistgpt.com