Optifeed connector privacy policy

Last updated: October 7, 2026

This policy explains what happens to your data when you use the Optifeed connector: the hosted Model Context Protocol (MCP) server at https://mcp.optifeed.com/mcp. You add it to an AI assistant, such as Claude, ChatGPT, or Meta's Muse, and the assistant can then work with your Optifeed account.

This policy adds to the Optifeed privacy policy, which still applies to everything else you do in Optifeed. The connector terms describe the rules of use.

How a connection works

• You add the connector in your AI assistant. The assistant opens an Optifeed page on dash.optifeed.com in your browser.
• You sign in with a one-time code that we email to you, or you create a new account there.
• You choose one company and approve the connection. Read access is always included. Changes are allowed only if you tick Allow changes; the box is unticked by default.
• The assistant receives an access token for that one company. It never receives your email code, and it cannot read another company.

What the connector reads

When the assistant calls a tool, Optifeed returns data from the company you chose:

• Account overview: the company name and country, the trial or plan state, and summary figures from the Autopilot page.
• Catalog: the import state of your product sources, and product data such as SKU, title, description, price, availability, images, and other attributes from your feed.
• Feeds: your exports, their channel, status, hosted file URL, product count, and the issues that a channel would reject.
• AI proposals: the state and cost of AI proposal runs, and the proposed values that wait for your approval.
• Advertising: Ad Intelligence recommendations and totals for the last 14 days (impressions, clicks, spend, revenue).
• Customer segments: the number of customers in each segment only. The connector never returns customer names, email addresses, phone numbers, orders, or revenue per customer.
• AI Visibility and site audits: the results of AI Visibility runs and of site audits that your company ran.

What the connector can create

Only a connection with Allow changes can create these records, and each one belongs to the company you chose:

• AI proposals. Optifeed sends the product data of the selected products to its AI model provider and stores the suggested text as a proposal. A proposal changes nothing until a person approves it in the Optifeed web app. This spends your company's AI budget.
• Catalog connections. You give a public feed URL. Optifeed downloads the file and imports the products. After the import, Optifeed creates up to three exports: ChatGPT Ads (active) and Google and Meta (paused).
• Hosted feeds. An export writes a feed file to a hosted URL. Anyone who has that URL can download the file. The file holds the product data of that feed and no customer data.
• Site audits. You give a domain. Optifeed reads its public robots.txt, sitemap, llms.txt, and a few public pages, with the user agent OptifeedSiteAudit/1.0.

What the connector never does

• It never approves a proposal. A person approves each change in the Optifeed web app.
• It never publishes to a live sales or advertising channel. It does not push to Google, Meta, TikTok, OpenAI, or any other channel API, and it does not change your ad campaigns or budgets.
• It never overwrites your source catalog data. Approved AI values are stored separately, so you can undo them.
• It never changes your plan, billing, or payment details, and it never adds or removes users.
• It never deletes your data.
• It never reads customer personal data.

What we receive from the AI assistant

• The name of each tool that the assistant calls and the values it sends, for example a SKU, a search text, a feed URL, or a domain.
• The name that the assistant platform registers for itself, for example "Claude".
• The IP address of the request, which is usually an address of the assistant platform, not your own.

We do not receive your conversation with the assistant, your chat history, your files, or your account details at the assistant platform. The assistant platform receives the tool results and handles them under its own privacy policy.

How we use the data

• To answer the tool calls and to run the actions you allowed.
• To enforce the AI budget, rate limits, and security checks.
• To find and fix errors.

We do not sell connector data, and we do not use it for advertising.

Who receives data

• The AI assistant platform you connect (for example Anthropic, OpenAI, or Meta) receives the tool results.
• Anthropic processes product data when you ask for AI proposals. It is our AI model provider.
• Our infrastructure providers host the service and store hosted feed files (cloud hosting and Cloudflare R2).
• Sentry and Scout APM receive error and performance data. Error reports leave out the access token.

How long we keep data

• An access token works for 1 hour. The assistant can renew it for up to 90 days after you approved the connection. A connection that the assistant does not use for 30 days ends sooner. You then sign in again.
• Expired token records are deleted after 90 days. Email sign-in codes expire after 10 minutes and are deleted after 1 day.
• Each request writes a log line with the route, the company, the connection, the time, and the result. The token itself is never logged.
• Catalog data, proposals, feeds, and site audits stay with your company account while the account is active, as the Optifeed privacy policy describes.
• A company created from the connector starts a 30-day free trial. If no plan is chosen by day 30, the connector and the API stop for that company; hosted feed files keep their last version. If the company still has not paid 14 days later, we delete its imported catalog and performance data, its AI proposals, and its hosted feed files (the feed URLs then stop working), and we revoke all its connections and tokens. We email a warning 3 days before the deletion. The company account, its users, and its billing records stay, so you can choose a plan and import again.

Your controls

• Revoke a connection: in Optifeed, open Account, then Access tokens. Under Connected agents, click Revoke. The connection stops at once. A user manager can revoke the connections of other users.
• Read only: leave Allow changes unticked when you connect.
• Remove the connector in your AI assistant's settings at any time.
• Access or deletion: email [email protected]. We act on a deletion request within 30 days.

Security

Connections use OAuth with PKCE over HTTPS. We store only a hash of each token. Each token works for one company only, and every tool call goes through the same permission and tenant checks as the Optifeed web app.

Changes and contact

We will update this page when the connector changes, and we will change the date at the top. Questions: [email protected]. Support: [email protected].