Privacy Policy

Last updated: October 30, 2026

This policy explains what data Connect accesses, how it is used, stored and protected, and what rights you have. Connect is an MCP (Model Context Protocol) server that lets AI assistants read business data from Google Analytics, Google Search Console, Google Ads, WooCommerce and WordPress.

1. Who we are

Connect is operated by Hontryke SRL, tax identification number (CUI) 36387294, str. Liliacului 33, Strejnicu, Prahova, Romania ("we", "us"). We are the data controller for the personal data described in this policy. Contact: contact@hontryke.com.

2. Google user data we access

When you sign in with Google, Connect requests the following permissions:

• Basic profile (openid, email, profile): your Google account ID, email address and name, used to identify your account.
• Google Analytics (analytics.readonly): read-only access to the Analytics properties you can access, to generate traffic reports.
• Google Search Console (webmasters.readonly): read-only access to the Search Console properties you can access, to generate search performance reports.
• Google Ads (adwords), only when this feature is enabled: access to the Google Ads accounts you can access. Connect uses it only to read reports and never creates, changes or deletes campaigns, ads, budgets or any other data.

3. How we use Google user data

Connect uses Google user data only to provide the feature you request: when your AI assistant asks for a report, Connect retrieves the requested data from the relevant Google API and returns it to that assistant. Data is retrieved on demand, for each request.

We do not use Google user data for any other purpose. In particular, we do not:

• sell Google user data or transfer it to data brokers or information resellers;
• use it for advertising, including personalized, retargeted or interest-based advertising;
• use it to determine creditworthiness or for lending purposes;
• use it to develop, improve or train generalized artificial intelligence or machine learning models;
• allow humans to read it, except with your explicit consent, when necessary for security purposes (such as investigating abuse), to comply with applicable law, or when the data has been aggregated and anonymized for internal operations.

4. Limited Use

Connect's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data sharing

Report data is sent only to the AI assistant you connected to Connect (for example, Claude by Anthropic or ChatGPT by OpenAI), at your request. The provider of that assistant processes the data under its own terms and privacy policy, which you accepted when you started using it.

Connect runs on a server rented from a hosting provider, which processes data only on our behalf. We do not share Google user data with anyone else, except when required by law.

6. Data we store

• Account data: your Google account ID, email address, name and the permissions you granted.
• Google refresh token: stored encrypted (AES-256-GCM), so Connect can retrieve reports without asking you to sign in for every request.
• Connect access tokens: issued to your AI assistant and stored only as cryptographic hashes. Access tokens expire after 1 hour, refresh tokens after 90 days.
• AI assistant registrations: technical data about the applications connected to Connect (name, redirect address).

Report data is not stored. The list of Google Analytics, Search Console and Google Ads accounts you can access is kept in server memory for up to 10 minutes, to avoid repeated requests, and is never written to disk. The conversation with your AI assistant does not reach Connect; Connect receives only the report requests.

7. Security

All traffic uses HTTPS. Google refresh tokens are encrypted, Connect tokens are stored as hashes, and the server is accessible only through an HTTPS reverse proxy. Access to Google data is read-only.

8. Retention and deletion

Account data and the encrypted refresh token are kept for as long as your account is connected. Expired tokens and authorizations are deleted automatically.

• You can revoke Connect's access to your Google account at any time from your Google account permissions. After revocation, Connect can no longer retrieve any data.
• To delete all data stored about you, email contact@hontryke.com from the address of the connected account. We delete the data within 30 days and confirm by email.

9. Legal basis and your rights

We process personal data to provide the service you request (Article 6(1)(b) of the GDPR) and based on the consent you give when you sign in with Google (Article 6(1)(a)), which you can withdraw at any time by revoking access.

You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. To exercise these rights, contact contact@hontryke.com. You also have the right to lodge a complaint with the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).

10. Children

Connect is a business tool and is not intended for people under 16.

11. Changes to this policy

We may update this policy. The current version is always available at this address, with the date of the last update. If the changes affect how we use Google user data, we will ask for your consent again before applying them.

12. Contact

For questions about this policy or your data: contact@hontryke.com.