What Mo Ghaly GPT collects — and for how long.
This notice covers the public chat on this site, lead forms submitted through it, and the admin tooling used to review those leads. Portfolio pages themselves do not require an account and do not store personal messages.
What is collected and why
Chat messages are stored so a conversation can continue across refreshes and so Mohamed can review a lead in context. The same messages are sent to OpenAI to generate replies. Browser sessionStorage may also cache a display copy of the transcript for this tab.
When you submit a lead form, the site stores your contact details (encrypted), a conversation summary, and consent metadata so Mohamed can follow up. Admin notes on a lead are also encrypted.
Aggregated, non-identifying operational metrics may be kept longer than any individual transcript.
How long data is kept
| Data | Retention |
|---|---|
| Anonymous session | 30 days (after last activity) |
| Non-lead chat transcript | 90 days |
| Failed request diagnostics | 14 days (redacted) |
| Lead and consent record | 12 months (after closure or last contact, then contact details are erased) |
| Admin audit log | 12 months (no message bodies) |
Rate-limit counters and related IP hashes are kept for 24 hours or less.
Where this applies
This notice applies to every visitor, regardless of location. The site treats GDPR as the baseline for everyone — there is no separate geo-detection path — so the same retention and deletion promises hold worldwide.
Who processes the data
- Mohamed Ghaly — site owner; reviews leads and operates the admin dashboard.
- OpenAI — generates chat replies through the Responses API with
store: false. Conversations are not used for training. - Resend — delivers lead-notification email to Mohamed only. It is not used for marketing.
Request earlier deletion
You can ask Mohamed to delete a conversation or erase a lead's contact details before the scheduled retention window. Contact him at mohamedghaly.dev@gmail.com or use the contact page. On request, he can immediately erase a lead's stored contact details while keeping a non-identifying opportunity snapshot for review history.
Last updated · notice version 2026-08-15