ByDomuDevelopers
Create key

AI connector privacy and support

What data ByDomu’s MCP connector reads, what it does not do, where the data lives, how to remove access and whom to contact.

PrivacyRead-onlySupport
In one sentence. The ByDomu connector lets an AI assistant (Claude, ChatGPT or another) read, with the agency’s permission and unable to change anything, the data you authorize; ByDomu keeps no copy of what the assistant reads.

What data it reads

Only the data of the agency that connected the app, never another one’s. When connecting, ByDomu shows the app name, the agency and these read permissions, and it connects only if a person with access to API keys taps Allow:

DataPermission
Published listingsportal:read
Contacts and their recent historycontacts:read
Calendar and appointmentsappointments:read
A contact’s messages, only when requestedconversations:read
Pipelines and dealsdeals:read
Pending taskstasks:read

It includes personal data of the agency’s contacts (name, phone, email, history) because they are part of its CRM; the assistant sees them only when the person asks for something that needs them.

What it does not do

  • It does not create, edit or delete anything: all nine tools are read-only.
  • It does not send messages or emails to your customers, and does not move money.
  • It never asks for or receives your password: sign-in happens on ByDomu, and the app gets its own access that only works for this connector.
  • It does not read the assistant’s chat history or files: it only answers the tools the assistant calls.

Where the data lives

  • Your data stays in ByDomu. The connector (mcp.bydomu.com) queries the public API with the connection’s access and hands the result to the assistant in the same request; it does not store it.
  • What the connector does store, encrypted: each app’s authorization (which app, which agency, which permissions) and its tokens. Access lasts 1 hour and renews while the app is used; after 30 days unused you must allow again.
  • Server logs do not include tool data, keys or tokens.
  • Each connection has the limits of a secret key (60 requests per minute) and is recorded in the API audit log.
  • What the assistant receives is then handled by its provider (Anthropic, OpenAI or another) under their own terms and privacy policy, which you accept by using it. ByDomu does not control that processing.

ByDomu’s general privacy policy, with your data rights, retention and processors, is at www.bydomu.com/en/privacy and the terms at www.bydomu.com/en/terms.

Removing access

In ByDomu, Settings › API and webhooks › Connected apps, tap Remove access next to the app. It stops working immediately: the next call gets a 401 and the app has to ask for permission again. You can also disconnect the connector from Claude or ChatGPT. The server address is https://mcp.bydomu.com/mcp.

Support and contact