Privacy policy

Panther for ChatGPT · Updated 15 October 2026

Panther for ChatGPT is operated by RcrutAI. This policy covers the read-only connection between your approved Panther account and ChatGPT. It supplements the Panther platform privacy policy for account records and projects held in the main website.

Information processed

• Sign-in: you enter your email and password on Panther's own authorization page. The service verifies them against your existing account. The MCP tools do not ask ChatGPT to collect your password; the authorization store does not keep a new copy of your entered password.
• Connection records: OAuth client metadata, callback URLs, account and opaque owner identifiers, consent time, requested permissions, authorization state, hashed credentials and expiry/revocation records let us identify and validate your approved read-only connection.
• Requests and results: the service processes the tool arguments ChatGPT sends, such as project identifiers, regions, products, dates, filters and your saved deal identifier. It returns relevant market aggregates or Land Intelligence for a deal owned by your linked account. Deal results can include its name, location context and authorized competitor evidence.
• Security and operation: login protection uses hashed IP-address and IP/email keys with attempt times. Application audit messages can contain the tool name, an opaque account identifier and result status. Our tool audit statements do not include passwords, bearer tokens, complete tool arguments or result payloads. The hosting provider also processes network and operational information needed to serve requests.
• Support: if you email us, we receive your email address, message and any attachments you choose to send.

Why we use it

We use this information to authenticate approved accounts, enforce deal ownership and the read-only permission, answer requested market questions, prevent login abuse, diagnose availability problems and respond to support and privacy requests. This integration does not use advertising trackers or perform advertising profiling.

Who receives information

• OpenAI: authorized tool results are sent to ChatGPT to answer your question and display Panther's result component. The connection does not grant Panther access to your complete ChatGPT conversation history. The information actually sent in tool requests is processed by this service.
• Hosting: Railway provides hosting and storage for the connection and the database it reads. Hosting and email service providers may process information in countries other than yours.
• Support providers: our email provider processes messages you send to RcrutAI. Authorized personnel use them to handle your request.

OpenAI's handling of content in ChatGPT depends on its terms, your account or workspace plan and your data controls. Linking Panther does not replace those settings or provide a guarantee about training, retention or confidentiality across all ChatGPT account types. Review the controls for the account you use.

Retention and expiry

• The MCP service does not persist full conversations or tool-result bodies in its authorization store. Existing Panther account and deal records remain subject to the main platform's retention and deletion arrangements.
• Access credentials are valid for at most 15 minutes. A connection and its refresh permission expire after 30 days from connection creation; refreshing does not extend that boundary. Consent requests and the temporary browser security cookie last 10 minutes; authorization codes last two minutes.
• These are validity limits, not guaranteed physical-deletion deadlines. Expired authorization and login-attempt records are cleared during relevant authorization/login operations. Revoked grants can remain until cleanup, and OAuth client registration metadata remains until administrative removal. There is no scheduled purge that guarantees deletion at the moment of expiry.
• Hosting logs, backups and support correspondence have separate operational retention arrangements. The MCP application does not impose a fixed deletion period on those systems. Contact RcrutAI for the current arrangements and to request deletion; we do not promise that uninstalling removes these copies.

Your controls and requests

You can remove the Panther connection in ChatGPT and contact us to revoke linked access. Revoking a connection blocks further use of that grant; it does not delete your Panther projects or material already returned in ChatGPT. Manage ChatGPT conversations and content through your OpenAI account controls.

Email contact@rcrutai-mena.com from your registered address to request access to, correction of, or deletion of your personal information, or help revoking a connection. We verify account ownership before acting and explain any information that must be retained for security or legal reasons. Do not send passwords, tokens or sensitive documents with your request.

Scope and changes

Market counts are aggregates; raw listing records and other users' deals are not exposed by the tools. HTTPS, permission checks and read-only database access reduce risk but do not make a zero-risk guarantee. We update this page and its date when the integration's practices change.