Privacy

Controller and publisher

Helo Site Editor is published and operated by Carlo Zanella, Switzerland. Privacy and data-protection requests can be sent to support@cld9.ch.

Data we process

We store the selected client website, the website account's stable ID and display label (which may fall back to its username), encrypted delegated login tokens, OAuth client metadata, and content-free security audit records. A username or email address may transit the service in website identity or site-overview responses, but is not retained except when a username is used as that display label. Website content is relayed between ChatGPT and the selected website and is not retained by this service.

Purpose

We process this data only to authenticate the editor, route requested website operations, prevent abuse, and investigate failures.

Recipients and subprocessors

Data is sent to the selected client website to perform the requested action and to OpenAI when the user chooses to use this service from ChatGPT or Codex. Our infrastructure and encrypted backups are hosted by contracted infrastructure and storage providers in Europe. We do not sell personal data or use website content for advertising.

Retention

Pending login requests and one-time authorization codes are deleted after they expire. Revoked access tokens become eligible for deletion after 24 hours and are removed by the next daily cleanup. Spent refresh-token replay markers are retained until their original expiry, up to 30 days; expired tokens are removed by the next daily cleanup. Delegated website credentials are erased when the connection is revoked or when no live authorization flow or central token remains. The stable account ID and display label are retained while the connection is active. After the connection ends, they may remain while referenced by authorization or security records; linked content-free audit records are retained for up to 90 days after the last recorded operation. The identity fields are then removed by the next daily cleanup. New OAuth client registrations expire after at most 180 days; the next daily cleanup deactivates expired registrations and removes them when no authorization record still references them. Content-free security audit records are retained for 90 days and then removed by the next daily cleanup. Encrypted backups may retain deleted database records for up to 30 additional days before automatic expiry. Website content passes through the service for the requested operation and is not retained.

Control

Access remains governed by the connected website's own account and permissions. Contact support@cld9.ch to request access, disconnection, correction, or deletion.