Skip to content
Busymate AI

Legal

Privacy policy for the ChatGPT, Codex and Claude apps

Last updated

Who we are

The Busymate AI apps for ChatGPT, Codex and Claude (together, "the apps") are published by EFIRITY PTE. LTD., a company registered in Singapore (UEN 202402844G), 68 Circular Road #02-01, Singapore 049422 ("EFIRITY", "we", "us"). EFIRITY PTE. LTD. is the developer listed for the apps in the OpenAI and Anthropic directories. This policy explains what data moves when you use the apps, and what we keep.

The apps connect ChatGPT, Codex or Claude to the Busymate AI MCP server at busymate.ai (https://busymate.ai/mcp/openai for ChatGPT and Codex, https://busymate.ai/mcp/claude for Claude). Everything stored in your Busymate AI account and workspaces — conversations, contacts, knowledge and everything else — is covered by the Busymate AI privacy policy and handled by the operator it names. This policy covers only what is specific to the apps.

What flows when you use an app

  • Requests from the AI provider. When you ask ChatGPT, Codex or Claude to do something with Busymate AI, the provider (OpenAI or Anthropic) sends a request to the MCP server. The request names a tool and carries the arguments the AI assistant chose from your prompt — for example a search phrase, a conversation to open, or the text of a reply. Your full chat with the AI assistant is not sent to us; only those tool arguments are.
  • Results returned to the AI provider. The server answers with the result of the tool. Depending on what you asked, a result can include data from your workspace, such as your end customers' names, email addresses, and the content of their chat conversations and handoff requests. Once returned, that result is part of your conversation with the AI provider and is handled under OpenAI's or Anthropic's own terms and privacy policy, not this one.
  • Sign-in. You sign in to Busymate AI through the standard OAuth flow on busymate.ai; the AI provider never sees your Busymate AI password. The provider receives an access token, and a refresh token to renew it, that let it call the server as you. Where the provider asks for it during sign-in, it may also receive the email address of your Busymate AI account.

OAuth tokens

An access token is valid for one hour. A refresh token is valid for up to 30 days and is replaced every time it is used; reusing an old one revokes the whole chain. We store tokens and authorization codes as one-way hashes, not as readable values, except that during a short changeover window after a token is renewed, the newly issued pair is held so a retried request can receive it again. Tokens only reach what your Busymate AI account can reach.

What the MCP server records

For every tool call made through the apps, the server writes an audit record containing:

  • your Busymate AI user ID, the OAuth client ID of the app, and the ID of the access token used;
  • the tool's name, and the names (not the values) of the arguments it was called with;
  • whether the call succeeded, failed or was refused, how long it took, and an error message with secrets removed if it failed;
  • the IP address the request was forwarded from, the user-agent header, a request ID and the time.

The server does not store the arguments' values or the results it returned. It also records sign-in events (app registration, authorization, token issue and renewal) and rejected access tokens, with the IP address, user agent, client ID and, where known, user ID — never the token itself. Our hosting providers' servers also write standard request logs (IP address, user agent, time).

We use these records to keep the apps secure, prevent abuse, and investigate problems you report. We keep them only as long as we need them for those purposes, and you can ask us to delete the records about you.

What we do not do

  • We do not sell data from the apps, and we do not share it for advertising.
  • We do not show advertising in or through the apps.
  • EFIRITY PTE. LTD. does not use the requests, results or records described here to train AI models.
  • We do not use the apps to read anything your Busymate AI account cannot already reach.

Revoking access and deleting data

  • Disconnect the app. In ChatGPT or Codex, open Settings, then Apps (or Connectors), and disconnect Busymate AI. In Claude, open Settings, then Connectors, and disconnect Busymate AI. The provider stops calling the server for you; any access token it still holds expires within an hour.
  • Revoke from our side. Email hi@busymate.ai from your account's email address and we will revoke the apps' tokens for your account.
  • Delete your Busymate AI account. Deleting the account from inside Busymate AI (account menu, then Settings, then Account) removes the account and its access tokens. See the Busymate AI privacy policy for what else it removes.
  • Ask for deletion or a copy. Email hi@busymate.ai with "Privacy" in the subject to ask for a copy of the records described here, or for their deletion. We answer within 30 days.

Data already returned to ChatGPT, Codex or Claude is held by OpenAI or Anthropic; delete it there under their own controls.

Children

The apps are business tools and are not directed at children. You must be at least 18 to use them, and we do not knowingly collect data from anyone under 18. If you believe a child's data has reached us through the apps, tell us and we will remove it.

Changes to this policy

If what the apps send or record changes, we update this page first, with the date at the top of this page showing the latest version.

Contact

EFIRITY PTE. LTD., 68 Circular Road #02-01, Singapore 049422. Email hi@busymate.ai with "Privacy" in the subject. For help with the apps, see the support page; the terms of use are at /apps/terms.