Privacy
Your work does not pass through our servers
TunnelGPT runs your project connections and local MCPs on your computer. Project files, connection credentials and MCP request and response content are not sent to TunnelGPT's commercial servers during normal operation.
Local execution. Direct connections.
Your local MCP connects directly to the platform you choose. TunnelGPT does not route its API requests through a TunnelGPT-hosted proxy. Your computer must be running for its local connections to remain available.
The AI client you use receives the tool results you request. With ChatGPT, those results travel through your tunnel to OpenAI. The platform and AI provider handle that information under their own terms; TunnelGPT's commercial service is outside that operational data path.
Credentials and project data stay under your control
OpenAI API credentials and local MCP connection credentials saved by TunnelGPT stay in operating-system secure storage. Tunnel identifiers, runtime aliases, project paths, project content and local runtime state are excluded from customer synchronization.
A local MCP supplied by another developer has its own permissions and data practices. Running it locally does not prevent it from sending data to external services. Review the MCP you install and approve only the tools you want to use.
Seller and controller
E-Clients Consulting LP · 2967 Dundas St W, No. 878, Toronto, Ontario, M6P 1Z2, Canada operates TunnelGPT. Privacy requests can be sent to privacy@tunnelgpt.com.
TunnelGPT is independent software and is not affiliated with, sponsored by, or endorsed by OpenAI.
Windows availability notices
If you reserve the Windows launch price, we store your name, email, language, consent date and reserved offer in our commercial database to maintain the reservation and send the availability notice. Joining does not create an account or a purchase. We do not use the list for unrelated marketing. Request removal at privacy@tunnelgpt.com. New reservations are kept until the availability notice and for up to 12 months afterwards to honor the reserved price, unless you cancel earlier. Registrations made under the earlier availability-only notice retain their original 12-month expiry. Expired entries are excluded from notices and removed during cleanup on new registrations. Abuse prevention uses a keyed network identifier used for 24-hour abuse limits, not a raw IP address in the waitlist. Old identifiers are purged when the service receives new registrations.
Account and purchase data
The website and account service process the information needed for sign-in, purchases, licenses, the trial, downloads and support. This is separate from the content handled by your local tools.
- Email, account identifier and preferred language
- Order, payment-provider reference, refund and license state
- Opaque device alias and profile display metadata
- Trial dates, access authorization and commercial event aliases
Analytics and support
Optional analytics require your consent and do not include project files, tool arguments, tool results or credentials. Essential account and security events are processed to provide the service.
Local diagnostics are not an automatic upload of your work. If you choose to send an email or export a report to support, we receive what you share. Review the report first and do not include passwords, API keys or customer content that is not needed to resolve the issue.
Infrastructure and rights
The website, account authority and promoted downloads use contracted hosting and distribution providers. Retention, access, correction and deletion requests are handled subject to applicable legal and accounting obligations.