Flushnet Privacy Policy

Effective date: 24 July 2026   |   Operator: Luciano Marchese, trading under the Flushnet name.

This policy explains how Flushnet processes information when you use the Flushnet website, Flushnet AI Runner, the ChatGPT app/plugin, connected browser extensions, connected desktop agents, and the Flushnet Gateway.

1. Information we process

Depending on the features you use, Flushnet may process:

• Account information: email address, account identifier, subscription or entitlement status, and authentication/session records.
• Connected-node information: node identifier, node type, runtime type, declared capabilities, connection/online status, and security credentials used to authenticate a node. Node credentials are treated as secrets and are not returned to ChatGPT.
• Automation requests: the specific module, action, and parameters you explicitly ask Flushnet to execute, such as a URL to open, a file path to read, or a workflow parameter.
• Execution information: execution identifier, status, progress, requested result, and sanitized error information needed to complete and troubleshoot an automation request.
• User-requested content: files, document text, browser-page information, screenshots, command output, or other content only when you explicitly request an action that accesses or returns that content.
• Security and operational information: limited technical logs, correlation identifiers, authentication failures, and service errors used for security, abuse prevention, reliability, and troubleshooting.
• Support information: the name, email address, company/team, subject, message, and page URL you submit through the support form.

2. How we use information

• Authenticate you and map requests to your Flushnet account.
• Show only the connected nodes and actions you are authorized to use.
• Route your requested automation through the Flushnet Gateway to the connected node you select.
• Return the result you requested and provide execution status or sanitized errors.
• Enforce permissions, confirmations, tenant isolation, rate limits, and security controls.
• Maintain service reliability, investigate failures, prevent abuse, and respond to support requests.

Flushnet does not use authentication tokens, passwords, cookies, or node secrets as ChatGPT-visible result data.

3. ChatGPT app and OAuth

When you connect Flushnet AI Runner to ChatGPT, ChatGPT is redirected to Flushnet for authentication and consent. Flushnet issues OAuth credentials scoped to the app. The app uses those credentials to identify your Flushnet account and enforce your permissions. The MCP adapter may create a short-lived internal compatibility credential to call the existing Flushnet Gateway; that credential is not shown to ChatGPT and is deleted after the internal request.

Information that a Flushnet tool returns to ChatGPT becomes part of your ChatGPT interaction and is then handled by OpenAI according to your relationship with OpenAI and OpenAI's applicable terms and privacy policies.

4. Browser and desktop access

Flushnet AI Runner operates only through connected nodes that have been linked to your account. Browser automation may use the authenticated browser profile on your connected device. Desktop actions may access local files, processes, or commands only when the requested action and your permissions allow it. Sensitive, destructive, or externally visible actions may require explicit confirmation.

Flushnet does not continuously copy the contents of your computer or browser to the Flushnet service. Content is processed when necessary to perform a user-requested action and return its result.

5. Sharing and service providers

Flushnet does not sell personal information. Information may be transmitted to infrastructure providers that are necessary to host and operate the service and, when you invoke Flushnet from ChatGPT, to OpenAI as needed to process the tool request and display the requested result. Information may also be disclosed when legally required or necessary to protect users, Flushnet, or others from fraud, abuse, or security threats.

6. Data retention

• OAuth authorization codes and internal compatibility credentials: short-lived and deleted or invalidated after use or expiration.
• OAuth access tokens: expire after approximately one hour unless revoked earlier. Refresh tokens are rotated and may remain valid for up to 30 days unless revoked.
• Execution tracking records and results: retained for account history, troubleshooting, security, and audit purposes until they are purged through available account controls, the account is deleted, or they are no longer operationally required. Backup copies may persist for a limited additional period until backup rotation completes.
• Node registration and account records: retained while the node or account remains active and as needed for security, legal, or dispute-resolution obligations.
• Support messages: retained as reasonably necessary to resolve the request and maintain support records.
• Security logs: retained only as long as reasonably necessary for security, abuse prevention, reliability, and investigation.

7. Your choices and rights

You can disconnect nodes, revoke app access, cancel supported running executions, and stop using Flushnet at any time. You may request access, correction, export, or deletion of personal information associated with your account, subject to applicable legal requirements and information that must be retained for security or legal reasons.

To make a privacy request, use the Flushnet support form or contact support@flushnet.com.

8. Security

Flushnet uses account-scoped authorization, node authentication, tenant isolation, short-lived OAuth credentials, permission checks, confirmation requirements, secret redaction, and audit/execution tracking. No system can guarantee absolute security, so users should connect only devices and accounts they are authorized to control.

9. Children

Flushnet is not designed for children under the age required to consent to online services in their jurisdiction.

10. Changes to this policy

We may update this policy when the service, legal requirements, or data practices change. The effective date at the top of this page will be updated when material changes are published.

11. Contact

Operator: Luciano Marchese, Flushnet
Website: https://www.flushnet.net/
Support: https://www.flushnet.net/api/support.php
Email: support@flushnet.com