Your data contact
ALPNAI is a service of Frederic Madureira Rodrigues, an independent operator trading as SWISS International. Rue Jean-Jacques-De-Sellon 6, 1201 Geneva, Switzerland. Contact: frederic@alpnor.com. The trading name is not a separate corporation.
Spend Proof in your browser
Records pasted into the tool are processed in the page's memory. The analysis button does not send them to our API and the application does not save them to its database. The Clear button removes the records from the current interface state; a downloaded file remains on your device.
This does not mean a visit involves no network traffic: page loading, hosting and optional journey measurement are separate from the contents of your records.
Free analysis APIs
Calls to the free analysis APIs send records to the server to calculate the response. These routes do not save records or reports to the database. Authentication checks the key hash and account status. Voluntarily saving a report in Projects is described separately below.
The absence of application storage does not guarantee the absence of technical logs held by the host or your own API client. Their retention settings have not been verified. Do not submit secrets, sensitive data or third-party records without the right to process them.
Accounts, tests and applications
ChatGPT sign-in provides an identifier and email address, and a name when available. Pilot accounts retain the identifier, email, agent name, use case, language, terms version and date. Keys are stored as hashes; simulated budgets and test receipts are recorded to manage access and prevent duplicate simulated debits.
Partner applications retain the identifier, email, professional name, optional website, described audience, language, date and status. These details are used to assess the application; they do not create a marketing subscription. The operator can access the data to manage the service and respond to requests.
Projects: private reports and Stripe billing
When you save a Projects report, measurements are sent to the server for calculation. The database stores aggregate results, project and version names, the date, account identifier and technical identifiers needed to track requests and quotas. Raw attempts and prompts are not stored in the database. Do not include secrets or personal identifiers in measurements or labels.
The authenticated account holder can view and download their reports, including after a subscription ends. Deleting a report removes its content and labels; its technical fingerprint, identifiers and consumed quota remain. Deletion does not remove billing documents. No general automatic purge of reports or accounting records is currently promised.
When Projects payment is offered and used, Stripe processes the information needed for billing, including email, name, billing address and payment method. The application retains customer, subscription and invoice references, status and paid period, plus technical data needed to check access rights and prevent duplicate requests. Measurements and reports are not sent to Stripe. Billing documents remain subject to applicable retention periods and obligations independently of report deletion.
Optional billing profile
You can save a private billing profile in your customer workspace: declared personal or business use, legal name, address, country and an optional business tax identifier. These details prepare future documents; they do not verify your identity or tax status. No profile is required to use the free tools.
The current profile is stored with your account identifier, a version and its modification date. You can view, correct or delete it in your account. Deletion removes the current application database row; it does not promise immediate removal from provider backups or logs. There is no automatic inactivity purge.
This form does not send your details to the blockchain, payment facilitator or journey analytics. It authorizes neither purchases nor marketing. If a quotation is prepared after billing review, it saves a dated copy of the details used. Editing or deleting the current profile does not rewrite that copy.
If you request business verification, your VAT number is sent to Stripe in a technical record separate from your Projects subscription. With your business-use and VAT-territory confirmation, ALPNAI compares the registry name and address with your saved profile. The system retains your declaration, technical references, dated result, registry data needed for the comparison and applied rule. Evidence expires no later than 24 hours after verification started; with your consent, a new generation is requested on a later purchase using the unchanged profile. Reading an old response does not renew evidence. These data are not published or sent to the blockchain. Deleting or editing the profile prevents new purchases under its previous version without rewriting retained evidence or documents. Access or deletion can be requested subject to applicable rights and retention obligations; these verification records currently have no automatic purge.
USDC mandates and orders
The payment flow retains the account and agent identifiers, public payer address, network, limit, reserved and spent amounts, dates and mandate text. The mandate signature is verified without being stored in the application database.
The ledger retains the order, product, prepared result, payment requirements, status, receipt and transaction reference. Hashes, a nonce and reconciliation events are retained to prevent duplicate payments. The prepared result remains private until confirmation.
When a USDC payment is submitted, its authorization and required parameters are sent to the PayAI facilitator. Addresses and confirmed blockchain transfers are public. USDC payment requests remain disabled in the currently available version.
Details retained in a USDC quotation
The prepared commercial flow requires a billing review tied to the account, profile version and terms. The review records the selected tax treatment, supporting references and validity dates. Automatic tax verification and review creation by customers or agents are not currently available.
During preparation, the quotation saves the seller, a copy of the customer profile, terms, applicable review, product and amounts. This copy remains attached to the order if the current profile is edited or deleted. The detailed document is restricted to the signed-in account holder; the agent and facilitator receive neither customer details nor the review’s supporting references.
Viewing or downloading a quotation makes no payment. The profile form does not delete order copies; deletion requests are assessed against applicable obligations. USDC payments remain disabled.
Preferences and optional measurement
Your browser may remember your language and measurement choice. With your permission, journey measurement records a session identifier, selected pages or clicks, a source channel, a filtered campaign and a date. It does not receive the contents of Spend Proof records.
Use the “Journey measurement” button to change your choice. Declining stops future sends by this mechanism and removes its session identifiers from the browser; it does not automatically delete events already received. This application measurement has no integrated third-party advertising tool.
Retention and providers
Journey cleanup removes events older than 90 days when the designated review runs. This does not guarantee deletion precisely on day 90. Automatic deletion periods for accounts, receipts and applications are not currently defined.
Sign-in uses ChatGPT; the site and database use Sites / Cloudflare infrastructure. Stripe handles Projects billing when that flow is used. These providers may process data needed for their services. Contracting entities, processing countries, transfer safeguards and technical-log retention still need verification and clarification. We do not claim exclusive storage in Switzerland.
Access, correction and deletion
Contact frederic@alpnor.com to request access, correction or deletion of your data or withdraw a permission. Proportionate identity verification may be needed. Requests are assessed under applicable rights and obligations; instant deletion from every copy is not promised.
Never include a recovery phrase or private key in a request. If our response does not resolve the issue, you can contact the Swiss Federal Data Protection and Information Commissioner.