AI-HIVE Remote Bridge processes only information needed for a user's requested server-administration action: server status, selected file or directory data, process commands and their output, OAuth account/profile metadata, and security/audit metadata needed to operate the service.
Data is used only to authenticate the user, execute the requested tool action, return its result, prevent abuse, diagnose failures, and provide support.
Requested MCP tool inputs and results are exchanged with OpenAI as necessary to fulfill the user's request. Tailscale provides the HTTPS transport for the public MCP endpoint. When the owner explicitly uses the optional OpenAI Browser Assist tools, BrowserAct processes the browser-session page content and interaction data needed to perform that browser task. Browser Assist is restricted to OpenAI and ChatGPT HTTPS domains and refuses password, MFA, API-key, payment-card, and human-verification input. Data is not sold or used for advertising.
OAuth authorization codes, access tokens, refresh tokens, and pairing codes are persisted only as keyed hashes/HMACs. Plaintext OAuth tokens are not stored in the plugin state. Bridge audit/process records remain on the owner's self-hosted server until the owner deletes them. Support requests are retained for up to 90 days. Expired OAuth state is removed during normal state maintenance.
The owner can revoke or rotate bridge credentials, disconnect the plugin from ChatGPT, delete local audit/process/support data, or stop the plugin service and public endpoint at any time.
Public forms may store the submitted message, request type, an optional reply contact (required for Beta access requests), an optional 1-5 feedback rating, creation/status times, and a keyed hash of the network source used only for rate limiting. These records are retained for up to 90 days. Submitting a Beta request does not create an account or allocate server resources.
Invited Free Beta users receive a persistent per-profile workspace stored on the self-hosted server. Beta workspaces cannot access owner files, owner process execution, or external network resources. Beta access can be revoked by the owner.
The OpenAI reviewer profile uses only synthetic in-memory demo data and cannot access owner files or real process execution.