Data and Privacy
GPT Workspace prioritizes your privacy with GDPR and SOC-2 compliance, ensuring robust data protection through stringent security measures and responsible data handling. Trust that your information is safe and treated with the confidentiality it deserves. Please check our privacy policies and GDPR compliance pages.
Do you store my data?
Section titled “Do you store my data?”Designed to respect your privacy. GPT Workspace has no access to your data and Google Drive files.
By design, your data stays at all times on Google’s servers. Here’s all the data we need in order to make GPT Workspace work:
-
Your email address to identify your account
-
If you are a paying customer, your name to identify the payment
-
Metadata (number of prompts, date of sending, doc’s name)
GPT Workspace complies with the European General Data Protection Regulation 2016/679 (GDPR). You have a right to access, correct, and remove your personal data which you may exercise by emailing us at contact@gpt.space. The steps are on Delete your account and data.
Is my data used to train AI models?
Section titled “Is my data used to train AI models?”No. Your prompts, documents and emails are sent to the AI provider that answers the request, in real time, under terms that forbid training on them, and are not stored by GPT Workspace. The security page lists the providers and the certifications (SOC 2, CASA Tier 3, GDPR).
How long is my data kept?
Section titled “How long is my data kept?”Account data is kept for 18 months after your last activity and deleted on request within 24 hours, as described in the privacy policy. Invoices are kept for the duration required by tax law.
Which providers process my requests, and where?
Section titled “Which providers process my requests, and where?”The Trust Center lists every model provider and subprocessor, what each one receives, the hosting region and the retention period, and is kept in sync with the code.
Can I restrict what GPT Workspace can reach?
Section titled “Can I restrict what GPT Workspace can reach?”The agent only reads what the signed-in Google account can access: it works with your own Google token, so a file, folder or mailbox you cannot open yourself is out of its reach. Files are read in real time at the moment of a request and are not copied or stored by GPT Workspace. To narrow what the agent can reach, sign in with an account whose Google sharing settings match what you want it to see.
Can I get a data processing agreement?
Section titled “Can I get a data processing agreement?”Yes. The DPA template (GDPR Article 28, with the subprocessor list) shows what we sign. For the pre-filled copy, a security questionnaire or questions about regulated data (health, legal, financial), write to contact@gpt.space with your company name. See also Questions before you subscribe.