Privacy Policy

Last updated: March 19, 2026

Grinfi MCP Connector ("Service") provides integration between Claude AI and the Grinfi CRM platform. This policy describes how data is handled when you use this Service.

1. What We Collect

When you connect via OAuth, we create and store:

• An API key scoped to the Grinfi team you select during authorization
• OAuth tokens (access and refresh) linked to your API key
• Your email address and team ID from the Grinfi login session

We do not collect, store, or have access to your Grinfi password. Authentication is handled directly by the Grinfi platform.

2. How We Use Your Data

Your API key and OAuth tokens are used solely to authenticate requests from Claude to the Grinfi API on your behalf. We do not use your data for any other purpose.

3. Data Storage & Security

• OAuth tokens and API keys are stored on a secured server with encrypted disk
• All communication uses HTTPS/TLS
• Tokens are scoped to the specific team you authorize
• Access tokens expire after 1 hour; refresh tokens after 30 days

4. Data Sharing

We do not sell, share, or transfer your data to third parties. Your data flows only between Claude (Anthropic) and Grinfi's API through this connector.

5. Data Retention & Deletion

You can disconnect the connector at any time from Claude Settings. When disconnected:

• OAuth tokens are revoked and deleted from our server
• The API key created during authorization remains in your Grinfi account — you can delete it from Settings → API Keys

6. Your Rights

You can request deletion of all your data by contacting us. You can also revoke access at any time by disconnecting the connector in Claude or deleting the API key in Grinfi.

7. Contact

For privacy questions, contact: support@grinfi.io

← Back to Grinfi MCP