Turnqey Crypto Intelligence
Custom GPT

Turnqey Crypto Intelligence is a Custom GPT built on OpenAI's ChatGPT platform that connects to the Turnqey Asset Intelligence Platform (TAIP) API. It enables licensed financial advisers to access their clients' cryptocurrency portfolio data through natural language queries within ChatGPT.

This privacy policy describes how Turnqey Labs, Inc. ("Turnqey," "we," "us," or "our") collects, uses, and protects information when you use the Turnqey Crypto Intelligence GPT ("the Service"). This policy applies specifically to the Custom GPT integration and should be read alongside Turnqey's general privacy policy.

Authentication Data

• OAuth 2.0 tokens (access tokens and refresh tokens) used to authenticate your session
• Your TAIP user ID and email address, embedded in the access token for authorization purposes
• We do not receive, store, or have access to your TAIP password through this integration

API Request Data

• The API endpoints called by the GPT on your behalf (e.g., client list, holdings, tax reports)
• Request parameters such as client IDs, tax years, and filter options
• Timestamps, IP addresses, and HTTP metadata in standard server logs

Portfolio Data Returned

• Client names, identifiers, and connection status
• Cryptocurrency holdings, balances, and market values
• Cost basis calculations and tax lot details
• Transaction history (buys, sells, swaps, rewards)
• Tax reporting data including realized gains/losses and Form 8949 entries
• Portfolio performance metrics (MWRR)

This data is retrieved in real-time from the TAIP API and passed to ChatGPT for display in your conversation. Turnqey does not create additional copies or databases of this data for the GPT integration.

We use the information described above solely for the following purposes:

• Service delivery — To authenticate your identity, authorize API access, and return the portfolio data you request through the GPT
• Security and fraud prevention — To detect unauthorized access, monitor for abuse, and protect the integrity of our platform
• Debugging and reliability — To diagnose errors, track API performance, and maintain service uptime
• Compliance — To meet regulatory and legal obligations applicable to financial technology services

We do not use your data to train, fine-tune, or improve any machine learning or AI models. Turnqey does not sell, rent, or share your portfolio data with any third parties for marketing, advertising, or analytics purposes.

OpenAI (ChatGPT)

When you use this GPT, your queries and the API responses are processed by OpenAI's ChatGPT platform. This means:

• The natural language questions you type are processed by OpenAI's language model
• The portfolio data returned by the TAIP API is displayed within the ChatGPT interface and processed by OpenAI's systems
• OpenAI's own privacy policy and data retention policies apply to conversation content

Important for ChatGPT Plus users: By default, OpenAI may use conversations to improve their models. You can opt out by going to ChatGPT Settings → Data Controls → disable "Improve the model for everyone." We recommend all advisers using this GPT opt out of model training.

ChatGPT Team and Enterprise users: OpenAI does not train on conversations from Team and Enterprise workspaces. Your data is not used for model improvement.

For details, see OpenAI's Privacy Policy.

Microsoft Azure

The TAIP platform and API are hosted on Microsoft Azure infrastructure (East US 2 region). Azure provides the compute, storage, and database services that power the API. Microsoft Azure maintains SOC 2 Type II certification and complies with industry security standards.

• Access tokens expire after 1 hour and are not stored by Turnqey after issuance
• Refresh tokens expire after 30 days and are stored as secure hashes in our database. They are deleted upon expiry or revocation
• Portfolio data is retrieved in real-time and is not cached or stored by the GPT integration. No additional copies are created beyond what already exists in the TAIP platform
• Server logs (API request logs including endpoints called, timestamps, and IP addresses) are retained for 90 days for security monitoring and debugging, then automatically purged
• ChatGPT conversation history is managed by OpenAI per their data retention policies. Turnqey does not have access to your ChatGPT conversation history

We implement industry-standard security measures to protect your data:

• Encryption in transit — All API communication uses HTTPS with TLS 1.2 or higher
• OAuth 2.0 authentication — The GPT authenticates using the OAuth 2.0 Authorization Code flow with confidential client credentials. Your password is never exposed to or stored by ChatGPT
• Read-only access — All API actions are strictly read-only. The GPT cannot modify, delete, or write any data in your TAIP account
• Scoped permissions — Access tokens are scoped to specific permissions (read:portfolio, read:tax, read:analytics) and cannot perform actions outside these scopes
• Token expiry — Access tokens automatically expire after 1 hour, limiting the window of exposure
• Azure infrastructure — All data is hosted on Microsoft Azure with SOC 2 Type II certified infrastructure, encrypted storage, and network-level security controls

• Access — You can view all data accessible through this GPT by querying it directly. The GPT only accesses data already available in your TAIP account
• Revocation — You can disconnect this GPT from your TAIP account at any time through your TAIP account settings. This immediately invalidates all tokens
• Deletion — You can request deletion of your TAIP account data by contacting support@turnqey.xyz. Upon account deletion, all associated OAuth tokens and server logs will be removed
• Opt out of ChatGPT training — In ChatGPT Settings → Data Controls, disable "Improve the model for everyone" to prevent OpenAI from using your conversations for model training
• Conversation deletion — You can delete individual ChatGPT conversations containing portfolio data at any time through ChatGPT's interface

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know — You may request that we disclose what personal information we have collected, the sources, the purpose, and the categories of third parties with whom we share it
• Right to Delete — You may request deletion of your personal information, subject to certain exceptions required by law
• Right to Opt-Out — Turnqey does not sell personal information. We do not share personal information for cross-context behavioral advertising
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights

To exercise any of these rights, contact us at support@turnqey.xyz. We will respond to verifiable consumer requests within 45 days.

This Service is designed exclusively for licensed financial professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately at support@turnqey.xyz and we will take steps to delete such information.

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have any questions about this privacy policy, your data, or your rights, please contact us: