techat Connector Privacy Notice.

What this covers

This notice explains which data is processed when you connect your techat account to Claude by Anthropic or another AI assistant through the techat connector (Model Context Protocol, MCP). It summarizes section 6.10 of our privacy policy. The full German privacy policy is the authoritative version; it also names the controller, your rights and all processors.

What data we collect

• Connection: the name of the connection, the permissions you chose (level and areas), the time of last use and the access keys, which we store only as hash values.
• Tool calls: for every call made through the connection we log the connection, tool, inputs, result and time.
• Content of your account: a tool only reads or changes data from the areas you released (e.g. contacts, email, calendar, files, website). Beyond that, the connector does not collect new content data.

How we use and store the data

We run the tool calls on your instruction to perform the user agreement (Art. 6(1)(b) GDPR). The log keeps calls traceable and helps us detect errors and abuse (Art. 6(1)(b) and (f) GDPR). Where a call concerns personal data of third parties, such as your contacts, you as the controller decide on the disclosure; we act as your processor. Data is stored on servers of Hetzner Online GmbH in Germany, files in Cloudflare's object storage.

Sharing with third parties

• The connected AI assistant: data only goes to the assistant when you give it a task and it calls a techat tool for it. What is transmitted is the result of that call. techat sends nothing on its own initiative. The provider of the assistant (for Claude: Anthropic PBC, USA) is not our processor but your own provider. It processes the data under its own responsibility according to its own terms, including whether data is processed outside the EU.
• Connected services (Asana, Slack, Digistore24): tools for these services only call their APIs if you have connected the service in techat and released it for the connection under “Advanced”. The terms of that service apply as well.
• techat's processors: hosting and infrastructure as described in the privacy policy.

How long we keep data

• Log entries of tool calls: 30 days.
• Access tokens: one hour. Refresh tokens: at most 30 days from their last use; after that a new sign-in is required.
• The connection itself (name, permissions, last use): until you disconnect it or delete your account.
• Data the assistant received stays with the assistant's provider and is subject to its terms.

Withdrawal

You can disconnect a connection at any time in techat under Business › Connections. From then on all access keys of this connection are invalid. Your other rights (access, rectification, erasure, objection, complaint) are set out in the privacy policy.

Contact

Questions about this processing: privacy@techat.ai.