DIN Remote Control Privacy Policy

DIN Remote Control connects an authenticated ChatGPT/OpenAI plugin client to one owner-authorized Windows computer. The service processes only data needed to execute the selected MCP tool. Depending on the requested tool, this can include local window titles, process metadata, text file contents from explicitly allowed roots, screenshots saved locally, and text written to allowed files.

OAuth credentials, owner PINs, local gateway secrets, and refresh tokens are not intentionally returned in MCP tool output. The public gateway does not expose arbitrary shell execution. File access remains restricted by the local DIN MCP allowlist and writes use backup behavior by default.

DIN Remote Control does not sell user data. Transport and app-level logging performed by OpenAI, Tailscale, Cloudflare, or another configured tunnel provider is governed by those providers' policies. Local DIN logs are used for diagnostics and security auditing.

The owner can disable the gateway or tunnel at any time and can revoke OAuth access by clearing the local OAuth state or rolling back the gateway deployment.