Privacy Policy

1. Introduction

This Privacy Policy explains how **PHub Dashboard** and its integrated **AI Assistants (e.g. ChatGPT Custom GPT Actions)** collect, process, and protect your data. We respect your privacy and are committed to keeping your personal information secure.

2. Data Collection & Ownership

All your transaction ledger, subscriptions, libraries, notes, and investment data are stored directly inside your personal **Firebase Firestore database**.

• **No Third-Party Access:** We do not own, sell, or inspect your data. It remains strictly under your control.
• **User-Scoped Storage:** Every database read and write is authenticated and strictly limited to your individual Firebase user account.

3. AI Assistant Integration (OAuth & APIs)

When you connect the official Custom GPT or any custom AI Agents:

• **Authentication:** We use standard OAuth 2.0. By authorizing the integration, ChatGPT is granted a secure Firebase Refresh Token to act on your behalf.
• **Read/Write Operations:** The Assistant only accesses the specific data fields you ask it to (e.g., adding a movie to your watchlist, logging an expense, checking notes).
• **Revocability:** You can disconnect the assistant or revoke its tokens at any time, instantly cutting off all API access.

4. Third-Party Integrations

The dashboard queries external public APIs to enrich your lists and valuations:

• **Media Lookup:** AniList (anime), Trakt & TVMaze (shows/movies), OMDb (plots), and OpenLibrary (books). No personal identifying details are ever shared with these APIs.
• **Market Valuation:** Real-time asset close prices are resolved anonymously from Binance and Yahoo Finance.

5. Cookies & Analytics

We optionally collect anonymous diagnostic metrics using **Google Analytics** to understand user counts and platform stability. No personally identifiable information (PII) is captured.

6. Security Measures

Communication between your browser, the AI Assistant, and our Next.js backend endpoints is fully encrypted using Transport Layer Security (HTTPS/SSL). All Firebase credentials and access secrets are securely handled on the server boundary.