Privacy notice

Who operates Lightpass

Lightpass is operated by Oz Golan as an individual. For privacy questions or account-data requests, contact hello@lightpass.ai. This notice covers the hosted model-recommendation connector and its separately linked connector widget. Separate legacy desktop conversation-reading features and the marketing website contact form are outside this notice.

Information you choose to share

The connector receives your task summary, your choice of ChatGPT Chat or Work, task hints, and any task-specific user and AI excerpts selected for the request. It does not automatically read your full chat history. Input checks do not automatically remove passwords or personal information. Share only information you are permitted to provide and omit credentials and unnecessary personal data.

Why and how the task is processed

We process the supplied task information to classify the work and recommend a model and reasoning setting. The task information is sent to the Lightpass recommendation service and its configured AI providers: OpenAI, including a recovery path, and potentially Anthropic as a backup. These providers process data under their own terms and retention policies. This notice does not promise that those providers retain no input.

Account and widget information

The identity service stores account information such as a username, name and email address. The connector stores an account mapping and active status, temporary sign-in state and encrypted browser sign-in tokens. If you link a widget, it also stores the device name, a hashed device credential, expiry, connection time and the last acknowledged recommendation identifier. These records keep accounts separate and allow guidance to reach your own linked device.

For account verification and password recovery, Lightpass sends your email address and a time-limited action link through Google Workspace using the Gmail API. This mail connection permits sending messages; it does not grant Lightpass access to read your inbox. Google processes the email under its own service terms and data practices. A password reset does not disconnect a separately linked widget; use Disconnect widget to revoke that device credential.

Task and guidance storage

The hosted connector and its advisory handler do not write the raw task transcript to a transcript archive. A recommendation explanation may describe or quote your task. When a widget is linked, bounded model guidance is queued temporarily for delivery. Lightpass learning is disabled for this flow. This does not change the AI providers' own data practices or erase content already present in ChatGPT.

Connection record retention

Pending browser sign-in state expires after up to 15 minutes. Browser setup sessions expire with their sign-in token and accept a maximum lifetime of one hour. One-use widget pairing codes expire after five minutes or use. Widget credentials expire after up to 24 hours, or earlier on replacement or disconnection. Queued guidance expires after five minutes and is removed on acknowledgement, replacement or disconnection. Expiry blocks use; periodic maintenance removes expired records. Account and identity records persist until an account deletion is completed. The OpenAI connection is configured to limit renewed access to at most one hour including its last access token; inactivity may end access earlier.

Hosting and operational records

Railway hosts the connector, identity service and databases. Operational metadata may include request time, route, status, user agent and source IP address. The hosting account currently provides seven days of visible log history; that is not a guarantee that every underlying provider copy is permanently deleted after seven days. When checked on 9 November 2026, no Railway volume backups or backup schedules were listed for the application database or recommendation-service volume. This check does not establish the absence of database recovery records, external exports or provider-held recovery copies. Identity user-event and administrator-event persistence were disabled when checked on the same date; infrastructure and service operational logs are separate. Provider retention and recovery practices remain applicable.

Your controls and requests

You can disconnect Lightpass in ChatGPT. A separately linked widget must also be disconnected to revoke its device credential; signing out of the setup page alone does not disconnect it. Contact hello@lightpass.ai to request access, correction or deletion of your account data. Requests are handled manually after ownership is verified. For deletion, we first block the account and revoke sign-in and refresh access. We retain the inactive account mapping until previously issued access tokens can no longer be accepted, then remove the account records. Server-side account deletion does not delete your ChatGPT history, AI-provider records or existing local copies of guidance.

Changes

Effective date: 12 November 2026. Material updates will be published on this page.