Effective date: 30 September 2026.
The relay may process OAuth client metadata, authorization scopes and account subject, hashed token identifiers, MCP tool names, tool arguments and returned results, device health metadata, rate-limit/security metadata, and sanitized audit events. Depending on an owner request, tool data can include file paths, file contents, commands, command output, process information, or other data from the authorized device.
The support form stores the contact email and message supplied by the requester. OpenAI reviewer accounts use a separate isolated review sandbox and do not access the owner computer.
Current device status is replaced by newer agent state. OAuth client-registration metadata remains until administrative deletion.
The relay and its database are hosted on a dedicated Bogahost VPS. ChatGPT/OpenAI is the client through which users invoke the service. Data is transmitted over HTTPS between ChatGPT and the relay and between the linked device agent and the relay.
The service uses OAuth authorization with PKCE, short-lived access tokens, refresh tokens, hashed token identifiers, signed and replay-protected agent messages, and an outbound-agent architecture.
My Remote Commander does not sell relay data or use it for advertising, and the relay does not train machine-learning models on that data. Data processed by ChatGPT/OpenAI is governed by the applicable OpenAI terms and account settings.
Use the support form for privacy or deletion requests. Provide enough information to identify the relevant account or request without sending passwords or tokens.