Privacy policy
This policy explains which personal data IAToolkit processes, why, who we share it with and what rights you have. It applies to the website www.iatoolkit.com, to the IAToolkit platform in its hosted form and to the IAToolkit connector for assistants such as Claude and ChatGPT (the MCP server at mcp.iatoolkit.com).
1. Who is responsible
Fernando Libedinsky, tax ID 8424195-4, registered at Paderewsky 5150, Santiago, Chile ("IAToolkit"). For any privacy question, write to fernando.libedinsky@gmail.com.
When a company uses IAToolkit to connect its own data (databases, documents, internal systems), that company is the controller of that data and IAToolkit processes it on the company's behalf and under its instructions, as a processor.
2. What data we process
- Account: name, email, the company you belong to and your role. If you sign in with a password we only store a hash; if you sign in with Google we receive your verified email and an account identifier, never your Google password.
- Your company's data: the information your company connects to IAToolkit and that tools read to answer (database records, documents, search results).
- Queries and results: the questions and parameters you send, directly or through an assistant, and the answers we produce.
- Technical and audit logs: date and time, tool used, outcome, duration, IP address and a browser hash, for security, support and usage control.
- Billing: contact and billing details of the customer company. Card payments are processed by Stripe; IAToolkit does not store card numbers.
3. The connector for Claude and ChatGPT
When you add IAToolkit as a connector in an assistant:
- You sign in to IAToolkit, choose the company and authorize the assistant. The assistant receives an access token that expires in 1 hour and a refresh token valid for 30 days. You can revoke access at any time by disconnecting the connector in the assistant.
- IAToolkit only receives the assistant's calls to its tools: the tool name and its parameters. We do not access your conversation history, the assistant's memory or other connectors.
- The results returned by the tools are processed by the assistant under its provider's privacy policy (Anthropic for Claude, OpenAI for ChatGPT).
- The connector acts with your own permissions within the chosen company: it cannot see anything you cannot see in IAToolkit.
4. Why we use it
- To provide the service: authenticate you, run tools and return results.
- Security, abuse prevention and error diagnosis.
- Support and service communications.
- Billing and legal obligations.
We do not sell personal data or use it for advertising. We do not use your company's data to train AI models.
5. Who we share it with
We use providers that process data on our behalf and only to provide their service to us:
| Provider | Purpose |
|---|---|
| Render | Hosting of the platform, database and cache |
| Amazon Web Services | File storage |
| Cloudflare | Content delivery and site protection |
| Sign in with Google | |
| Brevo | Service emails |
| Stripe | Payment processing |
| OpenAI, Anthropic, Google (Gemini) and OpenRouter | AI models that process queries, depending on the model your company configures |
AI models are used through their business APIs. Under those providers' terms, data sent through the API is not used to train their models. We only share data with authorities when the law requires it.
6. International transfers
Several of these providers process data outside Chile, mainly in the United States. We choose providers with contractual security and confidentiality commitments.
7. How long we keep it
- Account and company data, while the service is active.
- When the service ends, we delete it within 60 days, except data we must keep by law (for example, tax records).
- Technical and audit logs, for as long as needed for security and usage control.
8. Security
We isolate data per company, protect credentials as secrets, encrypt communications and log access. More detail on the security page.
9. Your rights
You can request access, rectification, deletion, objection and portability of your personal data, under Chilean data protection law and, where applicable, other laws. Write to fernando.libedinsky@gmail.com. If IAToolkit processes your data on behalf of your company, you can also contact your company.
10. Minors
IAToolkit is a business service and is not directed to people under 18.
11. Changes
If we change this policy, we will update the date above and, for relevant changes, notify each company's administrators.