Privacy Policy
Last updated: October 2, 2026
This Privacy Policy describes the developer-side data practices for plugins published through the HLP Plugin Hub, including Skills-only plugins such as Healthcare Mgmt Assistant. It should be read together with OpenAI's privacy terms and product controls for ChatGPT.
1. Scope
This policy applies to plugins developed and published by Hoang Le Phuc under the HLP Plugin Hub. Many are Skills-only: they provide instructions, educational workflows, and packaged reference material without a developer-operated MCP server, external database, OAuth connection, or separate developer backend.
2. Categories of personal data collected
For Skills-only plugins without external tools or a developer-operated backend, the developer does not independently receive or store ordinary ChatGPT conversation content, uploaded files, account credentials, patient records, or other user data through a separate developer system.
If a user voluntarily contacts support, the developer may receive only the information the user chooses to provide, such as name or email address, plugin name, message content, screenshots, and technical details needed to understand the reported issue.
Users should not send protected health information, patient identifiers, government identifiers, payment-card information, passwords, authentication tokens, API keys, MFA/OTP codes, or other credentials.
3. Purposes of use
Support information is used only to respond to the request, troubleshoot plugin behavior, investigate safety or policy concerns, improve reliability and documentation, and maintain a limited record of resolved issues when necessary.
4. Categories of recipients
Support information is handled by the developer and, where technically necessary to deliver email or host this website, by the relevant infrastructure or communications service providers acting for those purposes. The developer does not sell personal information and does not share support information with advertisers or data brokers.
ChatGPT itself is operated by OpenAI. Information processed within ChatGPT is governed by OpenAI's applicable terms, privacy policies, and product controls rather than by this developer-side policy.
5. Retention
Skills-only plugins do not create a separate developer-side copy of ordinary ChatGPT conversations or uploaded files. Support communications are normally retained for no more than 12 months after the support request is resolved, then deleted unless a longer period is reasonably required for security, abuse prevention, dispute handling, or applicable legal obligations.
6. User controls and requests
Users may choose not to provide optional personal information through support channels. A user may request access to, correction of, or deletion of personal information previously provided directly to the developer through support by contacting bacsiphuc@gmail.com. Requests will be handled subject to applicable legal and security requirements.
7. External tools and MCP-enabled plugins
If a plugin later uses an MCP server, external service, account connection, analytics service, or other tool that materially changes its data practices, the plugin will provide additional or updated disclosure describing the data categories involved, purpose of processing, recipients, retention, user controls, and any required authorization before that functionality is offered.
8. Website and technical data
The HLP Plugin Hub is a static informational website. The developer does not intentionally use advertising trackers or behavioral-profiling scripts on these pages. The hosting provider may process standard connection and security information as part of operating the hosting service under its own terms and privacy practices.
9. Children and sensitive information
The plugins are not designed to collect personal data from children through a developer-operated service. Medical education and healthcare-management plugins must not be used to submit identifiable patient information or other restricted data.
10. Changes
This policy may be updated if plugin capabilities, support practices, or data flows materially change. The updated date at the top of this page will reflect revisions.
11. Contact
Privacy and data-practice questions may be sent to bacsiphuc@gmail.com.