Pensions

1) Scope

This policy explains how we process data through the Pensions App when it is used inside ChatGPT. The App provides an interactive retirement-income calculator. It does not connect to your real pension providers, employers, or government pension accounts. Instead, the current code uses values you or ChatGPT provide, fixed growth-rate options, a fixed withdrawal assumption, and widget-side calculations to estimate retirement income.

This policy covers Spheric Admin Ltd's processing through the App, its MCP server, widget, hosting, and operational diagnostics. It does not replace OpenAI's policies for ChatGPT platform processing.

Important: The current App returns a full retirement-planning profile in tool outputs, including age and pension-related financial fields. The current tool response also includes an assistant-visible JSON string copy of that profile, and the widget derives additional forecast values in-session. Depending on deployment path, operational logs and server-side analytics may also capture tool request parameters as described in section 3.3.

2) Current tool contract and app behavior covered by this policy

• Tool name: pension-income-calculator.
• Tool input fields: targetAnnualIncome, currentAge, retirementAge, monthlyContribution, increaseContributionWithInflation, currentSavings, growthRate, annualFinalSalaryPension, includeFinalSalaryPension, annualStatePension, and includeStatePension. All are optional on input because defaults may be applied.
• Structured tool output fields: the same categories listed above, returned as a complete retirement-planning profile after defaults are applied.
• Tool response metadata: the current response metadata object is empty: {}.
• Additional tool content payloads: the current server returns a text status message and an assistant-only text payload containing a JSON string copy of the structured tool output.
• In-widget derived data and behavior: the widget uses the returned profile to calculate and display temporary in-session values including estimatedAnnualIncome, estimatedPensionPot, the gap or surplus against targetAnnualIncome, and an income breakdown across personal pension, final salary pension, and state pension. The widget also stores temporary session state indicating whether the user pressed the "Discuss these results" button.
• Current scope limits: the current App does not require sign-in, account creation, email address, phone number, bank details, pension account numbers, employer names, government identifiers, file uploads, camera, microphone, or browser/device geolocation.

3) Data categories, purposes, recipients, retention, and controls

3.1 Retirement-planning inputs and returned profile

What: The retirement-planning values you or ChatGPT provide to the tool, namely desired retirement income, current age, retirement age, monthly pension contribution, whether contributions rise with inflation, current pension savings, selected growth-rate band, annual final salary pension amount and inclusion flag, and annual state pension amount and inclusion flag. The current tool also returns these same categories in the structured output and in an assistant-visible JSON string copy of the output.
Why: To prefill and render the calculator widget, return the pension-planning profile to the ChatGPT conversation, and let the widget calculate a retirement forecast.
Recipients: Our MCP server, OpenAI/ChatGPT as part of the tool invocation flow, and our hosting/infrastructure providers acting on our behalf.
Retention by us: We do not use a separate application database to store pension plans, user accounts, or a persistent retirement-profile history for this App. The values are processed to generate the tool response and may also appear in operational logs or analytics telemetry as described in section 3.3.
Your controls: You decide whether to use the App, what values to provide, whether to use rounded/approximate figures, and whether to include optional final salary and state pension values.

3.2 In-session widget state and derived forecast data

What: Temporary widget state containing the returned retirement-planning profile and derived forecast fields such as estimatedAnnualIncome, estimatedPensionPot, the target shortfall or surplus, the income-source breakdown, and a temporary flag recording whether the "Discuss these results" follow-up action has been used. The widget also reads runtime presentation data such as locale, theme, and device-platform information exposed by the ChatGPT widget runtime for display adaptation.
Why: To render the forecast consistently during your session, show the calculated retirement estimate, and support the in-widget follow-up action.
Recipients: OpenAI/ChatGPT and its widget runtime. Our MCP server receives the initial tool input/output data when generating the tool response, but the derived forecast is calculated in the widget.
Retention by us: We do not intentionally store this widget state in a separate application database. It is intended to exist mainly within the active ChatGPT session and is otherwise governed by OpenAI's platform controls unless it later becomes part of a support request or another tool call.
Your controls: You can stop using the widget at any time, change or clear values during the session, choose whether to use the follow-up action, and manage ChatGPT conversation data through OpenAI controls.

3.3 Technical delivery data, request logs, and analytics telemetry

What: Technical data generated when the App is delivered or invoked, such as IP address, user agent, URL path, timestamp, HTTP status, and response time. The current codebase also includes an Express MCP hosting path that logs full MCP request bodies and sends server-side HTTP/MCP telemetry to Mixpanel's EU endpoint. Where that path is used, logged or tracked data can include JSON-RPC request IDs, MCP method names, request params (including pension tool fields listed in section 2), IP address, user agent, URL, response status, duration, and an OpenAI subject identifier if one is supplied with the tool call.
Why: Security, abuse prevention, service reliability, performance monitoring, debugging, and incident response.
Recipients: Our hosting, CDN, and infrastructure providers, personnel who need access for operations or security, and Mixpanel when the telemetry-enabled hosting path is in use.
Retention: We aim to minimize operational logs and generally retain them for no longer than 30 days unless a longer period is reasonably necessary for a security investigation, abuse prevention, or legal obligation. Mixpanel telemetry is retained in our analytics workspace until deleted by us or removed by applicable workspace retention settings.
Your controls: You can avoid including unnecessary detail in values you submit, choose not to use the App, and contact us with rights requests or questions.

3.4 Contact data if you email us

What: Your email address and the contents of your message.
Why: To respond to privacy, support, or legal requests and maintain a record of the request.
Recipients: Spheric Admin Ltd and our email/service providers acting on our behalf.
Retention: Up to 24 months after final resolution unless a longer period is required by law or reasonably needed to establish, exercise, or defend legal claims.

4) What we do not do

• No account creation or sign-in through the current App.
• No collection of your name, email address, phone number, mailing address, bank details, pension account numbers, or government ID through the current tool fields.
• No retrieval of live pension balances or pension records from employers, pension providers, or government systems; the current App calculates estimates from supplied/default values only.
• No sale of personal information.
• No camera, microphone, contacts, or precise device geolocation access by the current widget.
• No client-side advertising SDKs or cross-site tracking scripts embedded in the current widget.

5) Cookies and similar technologies

We do not intentionally set advertising or cross-site analytics cookies through the Pensions widget. ChatGPT/OpenAI, your browser, and our hosting providers may use their own operational cookies or similar technologies for platform operation, security, or content delivery under their own policies.

6) Sharing and disclosure

We do not sell personal information. We may disclose data only as necessary to:

• Operate, host, monitor, and secure the App through service providers such as hosting, CDN, infrastructure, logging, analytics, and email providers.
• Provide the App's calculator functionality and return the current tool outputs inside ChatGPT.
• Comply with law, regulation, legal process, or enforceable government request.
• Protect the rights, safety, and security of users, us, and the service.

7) User rights and controls

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to processing of personal data we hold.

To exercise rights or ask questions, contact privacy.widgets@olutely.com. We may need to verify your identity before fulfilling a request.

Because the App runs inside ChatGPT, you can also manage conversation and account data through OpenAI controls. OpenAI's privacy policy: https://openai.com/policies/privacy-policy.

8) International processing

The App may be accessed globally, and data may be processed in countries where we or our service providers operate. Where required, we use appropriate safeguards for international data transfers.

9) Security

We implement reasonable technical and organizational safeguards designed to protect data processed through the App. No system can guarantee absolute security.

10) Children's privacy

The App is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

11) ChatGPT / OpenAI platform notice

ChatGPT/OpenAI independently processes chat content, account data, platform telemetry, widget state, and follow-up messages under OpenAI's own terms and privacy practices. This policy describes Spheric Admin Ltd's processing through the Pensions App only.

12) Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date above and ensure this policy continues to reflect the App's current tool inputs, outputs, and disclosed data uses.

13) Contact

Questions about this policy or App privacy practices: privacy.widgets@olutely.com (Spheric Admin Ltd).