Business Health Trust · ChatGPT and Codex plugin

Plugin privacy policy

Last updated October 20, 2026.

Who provides this service

Business Health Trust (BHT) provides this plugin to help Washington State businesses with 50 or fewer total employees compare public filed-rate estimates and prepare questions for their broker. BHT is not an insurance broker. This notice covers the BHT plugin tools and optional continuation into the BHT calculator. OpenAI and other linked services have their own privacy terms.

Information BHT receives

When you request a calculation, ChatGPT or Codex sends the structured facts needed by the tools: anonymous covered-person ages, confirmed enrolled-employee count when supplied, business county, coverage month, supported plan filters, industry or current-plan context when supplied, and structured premium figures you ask to compare. Plan selections and public source identifiers identify the requested comparison.

The tools have no fields for names, dates of birth, employee home ZIPs, contact information, diagnoses, claims, prescription histories, raw broker documents or conversation text. Do not provide these details to BHT tools. If you upload material to ChatGPT or Codex, OpenAI handles that material under its own terms; BHT does not receive the upload through this integration. Use anonymous ages rather than identifying employee records.

For a website continuation that you specifically request or accept, BHT also receives your principal business ZIP to restore the calculator’s location controls and explain local service availability. That ZIP is not an insurance rating input.

Why this information is used and who receives it

BHT processes the accepted facts temporarily in its Cloudflare-hosted service to calculate requested estimates, explain source-backed benefits and create requested calculator links. Tool results return to ChatGPT or Codex. The BHT tools do not send broker messages, enroll people, bind coverage, or forward source documents to carriers.

Cloudflare processes service requests and network information needed for hosting and abuse prevention. OpenAI receives the tool results and manages your conversation under your account’s settings and its policies. BHT’s application does not send these tool inputs to advertising or model-training services.

Retention and encrypted continuation links

The BHT application does not save tool inputs, calculated quotes, source documents or request bodies in a visitor database, application logs, analytics, or a retry queue. Only public source data is cached. Hosting security controls use an IP address as a temporary rate-limit key for one-minute counting windows; counters are separate from quote inputs.

A requested continuation places an encrypted, allowlisted input payload in the link’s fragment. The link expires after 24 hours and can be reused before expiry. Anyone holding the complete link can open it. Keep it private. Individual links cannot be revoked; BHT can invalidate all outstanding links by rotating its dedicated encryption secret.

The calculator removes the fragment before enabling analytics, sends the encrypted token to BHT to validate it, then recomputes the comparison. Inputs and results stay in the open calculator page’s memory; refreshing or closing the page clears that session. It does not erase the original link or conversation in ChatGPT or Codex, or copies held by another person. OpenAI’s retention settings govern its records. PDFs you download remain under your control.

Website analytics and browser preferences

The plugin tools do not send quote inputs to Google Analytics. If you continue to the website and analytics is permitted, its existing controls may measure screens, searches, filters, aggregate headcount, public plan identities and whether continuation, Document view or PDF download actions occurred. Analytics excludes individual ages, ZIPs, names, contact details, exact premiums, files, reports and continuation tokens.

The calculator’s Privacy controls describe the permitted business-context fields and let you decline or change analytics. Global Privacy Control and Do Not Track are honored. Outside the U.S., or when location is unknown, analytics waits for your choice. Where enabled, analytics cookies last up to 60 days and Google’s user/event retention setting is 14 months; aggregate reports may remain longer.

Your analytics choice and an internal-browser flag after successful Admin access may remain in browser storage until site data is cleared. Explicitly saved color profiles contain only names and presentation colors. They do not contain employee, plan or report data. Admin sign-in has a separate eight-hour secure session cookie. Ordinary calculator state is not saved in browser storage.

Your choices and privacy questions

You may use supported comparisons without a BHT account, email address or lead submission. Website continuation and PDF download are optional. Avoid sharing continuation links, manage conversations through your OpenAI account, delete downloaded files when no longer needed, and use the calculator’s Privacy controls for analytics preferences. Clearing the web page does not revoke a link.

For questions about this plugin or a privacy request, contact Business Health Trust. Do not include employee records or a continuation link in a support message unless BHT provides an appropriate separate process. This notice does not set retention for a separate support request.