Privacy Policy
Effective September 14, 2026. AudiophileGPT is run by Tomasetti Tech LLC, Longmont, Colorado, United States.
This page says what happens to what you type. It is short on purpose and it is written to be true, which means one part of it is unwelcome news. That part is section 4 and you should read it before you ask anything.
1. Who we are
AudiophileGPT is operated by Tomasetti Tech LLC, a Colorado limited liability company, at Longmont, Colorado, United States. The contact for everything on this page is privacy@audiophilegpt.com. A person reads that inbox.
2. What this service does
You ask a question about audio gear. AudiophileGPT finds the closest matching passages in a repair knowledge base, hands them to a language model, and writes the answer out as it arrives. Three questions are free without an account, 10 questions in any 24 hours are free with an account, and Pro at $9 a month (Studio $19) buys 150 or 300 questions in any 24 hours.
3. What we collect
Your questions and the answers
We do not store your questions or the answers on our server. The conversation lives in your own browser, on your own device, and is sent to us one question at a time. Clear your browser data and every conversation is gone, because we never had a copy. You can close the tab and come back to a thread you were in the middle of for the same reason: it is still in your browser.
There is one exception, and it is the honest one. When a question is refused as off topic, or when the model comes back with nothing at all, the first 120 characters of that question are written to a log file on our own machine, along with the time and what went wrong. We keep that log so we can tell a genuine outage apart from a filter that is too strict, which is a thing that has actually happened here. The log is a file on the operator's own computer. It is not a cloud logging service, and it is not sold or shared.
Your account, if you make one
- Email address. Required, and never shown to anyone else. It is how your questions are counted and how we reach you about billing.
- Password. We never store it. We store a PBKDF2-SHA256 hash at 390,000 rounds with a random 16-byte salt. We cannot read your password back, and neither can anyone who steals the database file.
- A sign-in session. The database holds a SHA-256 hash of the session token, not the token itself, so a copy of the database cannot be replayed as a login. Sessions last 30 days or until you sign out, and signing out deletes the row.
- The genres you pick. Optional, up to eight, chosen from a fixed list on the page. They are kept with the account so the answers fit the music you play, and they are the only taste we hold: there is no listening history and no question history behind them. Clearing the chips in the sidebar clears them here too.
An anonymous trial cookie, if you ask without an account
A random identifier, signed so it cannot be forged, kept for 180 days. It holds no name, no email, and nothing about you. Its only job is to stop your three free questions from being spent by whoever else shares your network.
Your IP address
We count anonymous questions against the address as well as the cookie,
so one address cannot drain the free tier. That means the address is
stored, as a metering bucket named ip:203.0.113.9 or
whatever yours is, for the length of the counting window and no longer.
The counter prunes itself. The web server also writes ordinary access
logs, which include IP addresses.
Answers you share
Pressing Share on an answer stores that one question and its answer and publishes them at a link. Anyone who has the link can read the pair; the page is kept out of search engines, but it is not a secret. No account and no name is attached to a share link, and deleting the link on your request deletes the pair.
Payment details, if you subscribe
Card numbers never reach us. Stripe takes the card on its own pages. What comes back to us is your email address, a Stripe customer identifier, and the type and identifier of each billing event so we can tell a renewal from a cancellation.
What we do not collect
- No name. No phone number. No postal address.
- No advertising identifiers, and no tracking of you across other websites.
- No advertising cookies, ever, and nothing sold or rented to anybody.
- No camera, file, or contact access, and no access to your microphone except while you are dictating a question with the voice button: the audio goes from your browser to the browser maker's speech service and the words land in your question box, never on our servers.
- No device fingerprinting.
4. Where your questions are processed
Read this before you ask anything
AudiophileGPT does not run its own language model. Every answer, including the answers in the free three-question trial, is written by DeepSeek, a service operated by Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd. in the People's Republic of China. Your question and the knowledge base passages matched to it are sent to DeepSeek's API and processed there.
DeepSeek's own privacy policy states that it uses personal data to train and improve its technology and its machine learning models, holds data for as long as it needs to provide the service, and collects, processes, and stores personal data inside the People's Republic of China. There is no API tier that exempts you from that and no switch on our side that turns it off. We have no data processing agreement with DeepSeek and no standard contractual clauses in place.
We are telling you this in a box instead of writing a reassuring sentence about privacy, because it is the most important fact on this page. Do not type anything into AudiophileGPT that you would not be willing to see processed, retained, and stored in China. That means no names, addresses, phone numbers, order numbers, serial numbers tied to a person, or anything else that identifies somebody. The questions this service is built for, what a receiver does when it hums, what a replacement capacitor should be, identify nobody.
One thing does stay home. Finding the matching passages in the knowledge base is a separate step that runs on our own machine, so the search does not leave. The question itself leaves our machine when it goes to DeepSeek.
DeepSeek publishes its own privacy policy at cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html, and it governs what DeepSeek does with what it receives. If you want DeepSeek to stop holding something, their opt-out address is privacy@deepseek.com. We cannot do it for you, because the data is on their side of the wire.
5. Answers are generated, and can be wrong
The answer is written by a language model from a knowledge base, not by a person and not by a technician looking at your equipment. It is probabilistic, which is the technical way of saying it can be confidently wrong. Verify anything before you act on it. If an answer says to open a tube amplifier, read section 8 of the Terms of Service first.
6. Cookies
Two, both ours, both for running the service rather than for following you. There are no third-party cookies on this site.
| Cookie | What it is for | How long |
|---|---|---|
| agpt_id | Ties your three free questions to you rather than to everyone on your network. A random signed identifier. Nothing about you is in it. | 180 days |
| agpt_session | Keeps you signed in after you make an account. The value is a random token; the database holds only its hash. | 30 days, or until you sign out |
How to refuse them.
- agpt_id: clear site data for audiophilegpt.com in your browser settings, or use a private window. If you block it, you fall back to being counted by IP address, which usually still works.
- agpt_session: sign out, or clear site data. If you block it you cannot stay signed in, and the paid tier needs a signed-in account.
There is no cookie consent banner on this site because there is nothing to consent to. Both cookies are strictly functional: one counts your questions, one remembers you signed in. Neither is used for advertising or analytics, and neither follows you to another website.
7. Page counting
Page views are counted by Plausible Analytics, which runs on our own server rather than on somebody else's. Plausible is cookieless. It sets no cookie, does not fingerprint your device, does not follow you to other sites, and does not store personal data. It counts visits and shows which pages were read. That is the whole of it. Because it sets no cookie there is nothing to consent to and no banner to click.
If you would rather not be counted at all, Plausible honors an opt-out
flag that lives in your own browser. Open the developer console on any
page here and run localStorage.plausible_ignore = "true".
The counter skips you from then on, and clearing that flag counts you
again. A content blocker will also stop it without breaking anything.
8. Who else handles your data
| Who | What they get | What for |
|---|---|---|
| DeepSeek Hangzhou, China |
Your question and the knowledge base passages matched to it | Writing the answer. Their privacy policy. See section 4. |
| Stripe United States |
Your email address, and your card details if you subscribe | Taking the payment and handling the subscription. Their privacy policy. |
| Our hosting providers | Ordinary web server traffic, including IP addresses | Serving the site and keeping it reachable. |
That is the list. We do not sell your information. We do not share it for advertising. We will hand it over if a court order requires it, and if we are allowed to tell you, we will.
9. How long we keep things
| What | How long |
|---|---|
| Questions and answers | Not on our server at all. They sit in your browser until you clear them. |
| The counter rows | 24 hours, then deleted automatically. The longest window in play is 24 hours, so nothing older than that can still be counted by any tier, and the row is dropped rather than kept. |
| Account: email, password hash, tier | Until you ask us to delete it. |
| Sign-in sessions | 30 days, or until you sign out. |
| The server log, including the 120-character excerpts | Emptied each time the service restarts, so it holds the current run and nothing older, and no archive of past runs is kept. It is read to tell an outage apart from a filter that is too strict, and for nothing else. |
| Billing records | As long as tax and accounting rules require, which in the United States is generally 7 years. Stripe holds the card side. |
10. What you can ask for
- Delete your account and everything attached to it. Email privacy@audiophilegpt.com. We will do it and confirm by reply.
- A copy of what we hold. In practice that is your email address, your tier, your billing history, and a list of timestamps with no question text attached to them, because we never stored any.
- Correct your email address. Email us and we will change it.
- Stop using it. Clearing your browser data removes every conversation from your device immediately. Nothing further is needed.
11. Where your data goes
Our servers are in the United States. The transfer that matters is DeepSeek, in the People's Republic of China, described in section 4.
If you are in the European Economic Area, the United Kingdom, or Switzerland: we do not currently have standard contractual clauses or a transfer impact assessment in place for that transfer. So there is no lawful transfer mechanism we can point you at. That is a limitation of this service as it stands, not a detail. If you need one before your data can leave, do not send personal data through AudiophileGPT.
12. Children
AudiophileGPT is not aimed at children and we do not knowingly collect anything from a child under 13. You need to be 13 or older to use it and 18 or older to pay for it. If a child has made an account, email us and we will delete it.
13. Security
- Traffic is encrypted with TLS at the edge.
- Passwords use 390,000 rounds of PBKDF2-SHA256 with a random salt.
- Session tokens are stored hashed, never in the clear.
- Cookies are HttpOnly, Secure, and SameSite, so they cannot ride a plain HTTP request or be read by a script.
- Sign-up and sign-in are rate limited to slow down password guessing.
No system is perfect. If there is ever a breach that affects your account, we will tell you what happened and what to do.
14. Changes to this policy
If this policy changes, the effective date at the top changes with it, and a material change gets a note on the page saying what changed. This service has no mailing list, so the page itself is the notice. If you have a paid account and a change here materially reduces what you get for your $9, we will email you about it as well.
15. Your rights in specific places
European Economic Area, United Kingdom, and Switzerland
- Legal bases. Performance of a contract, for answering your question and running your account. Legitimate interests, for counting usage so the free tier stays free and for stopping abuse. Consent, where you have given it.
- Your rights. Access, rectification, erasure, restriction, objection, portability, and withdrawing consent. Email privacy@audiophilegpt.com to use any of them. We answer within 30 days.
- Transfers. See section 11. DeepSeek processes data in the People's Republic of China and we have no SCCs in place.
- Complaints. You can complain to your national data protection authority.
- We do not make automated decisions that have a legal effect on you, and we do not profile you for advertising.
California
- Categories collected in the last 12 months. Identifiers: email address, IP address, and a random trial cookie. Commercial information: subscription status and billing events. Internet activity: page views, counted without cookies. We do not collect sensitive personal information as the CCPA defines it.
- We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA.
- You can ask to know, delete, or correct, and you can use an authorized agent to ask for you. We will not treat you differently for exercising a right.
Colorado
The Colorado Privacy Act gives you the right to access, correct, delete, and get a portable copy of your data, and to opt out of targeted advertising and profiling. We do no targeted advertising and no profiling, so there is nothing to opt out of on that front. Email us to use any of the other rights.
16. Contact
privacy@audiophilegpt.com. A person reads it. We answer within 5 business days, usually sooner. There is no phone line for this service.
Tomasetti Tech LLC, Longmont, Colorado, United States.