Privacy policy

Last updated: 6 October 2026 · Controller: Brightstep Tech Inc., Resi-Huber-Platz 1, 81371 München, Germany · Contact: [email protected]

Summary: we do not store the PINs or addresses you look up. They are used once to query the county's public data and are then discarded. We keep only an anonymous usage count for 90 days.

What we process

• Property identifiers: the PIN, street address and township that the assistant (Claude or ChatGPT) sends. We send them to the Cook County Open Data portal (datacatalog.cookcountyil.gov) to read public assessment records. Query results are held in the server's memory for up to 30 minutes so repeated questions are fast, then dropped. They are not written to disk or logged.
• No owner data: the tools do not ask for your name and do not return owner or mailing names from the county data.
• Usage statistics: for each tool call we record the hour, the tool name, whether it worked, which assistant made the call (Claude, ChatGPT or other, from the request's technical headers), the country and language reported by ChatGPT, and a one-way hash of the anonymous user identifier from OpenAI. This is used only to count usage and fix errors, and is deleted after 90 days. It contains no PINs or addresses.

Why we process it (legal bases)

• Looking up the records and computing the comps you ask for: Art. 6(1)(b) GDPR (providing the service you request).
• Anonymous usage statistics: Art. 6(1)(f) GDPR; our legitimate interest is to run the service, count usage and fix errors.
• Security and delivery through Cloudflare: Art. 6(1)(f) GDPR; our legitimate interest is to keep the service secure and available.

What we do not collect

We do not collect names, email addresses, phone numbers, accounts, chat history, cookies or advertising identifiers, and we do not log IP addresses (Cloudflare processes them in transit, see below). We do not sell or share data, and we do not use it to train models.

Processors and location

The server runs on Amazon Web Services (Frankfurt, EU) (AWS privacy notice). Requests to this service pass through Cloudflare, Inc. (content delivery network and TLS proxy), which processes the connecting IP address and the request data in transit to deliver them to our server; Cloudflare may process this data outside the EU (Cloudflare privacy policy). Lookups are sent to the Cook County Open Data portal, which is run for Cook County on the Socrata platform (Tyler Technologies) in the USA, because that is where the records are. The server is in the EU (AWS, Frankfurt). Cloudflare operates a global network, so request data in transit may be processed outside the EU/EEA, including in the USA; such transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or on the EU Standard Contractual Clauses. What you share with ChatGPT itself is covered by OpenAI's privacy policy.

Your rights

Because we keep no lookup data, there is nothing to access or delete beyond the anonymous usage count. Under the GDPR you have the right to access, rectification, erasure, restriction of processing, objection (to processing based on legitimate interests) and data portability. Write to [email protected]. You can also complain to a supervisory authority, in particular in your country of residence; our lead authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany (lda.bayern.de).