Unifyr privacy statement

Draft dated 18 September 2026. Not yet approved for publication. Retention periods, processor agreements and international transfers must be confirmed before approval. English translation of the Dutch draft.

Who is responsible?

Unifyr is a service of Aivantage B.V., Gallasplein 1, 3221 AB Hellevoetsluis, the Netherlands, Chamber of Commerce number 42042914. Contact sales@aivantage.nl for questions, support and privacy requests. These contact details are taken from Aivantage’s public website and terms.

The stated contact address for the data protection officer is sales@aivantage.nl.

Unifyr serves consumers and business customers. This statement covers your account, the website and the connection used to access services through ChatGPT or another MCP client. For customer content processed by an organization through Unifyr, that organization generally determines the purposes of processing. Aivantage processes that content on the organization’s instructions, under arrangements that must be recorded in a data processing agreement. We act as controller for our own account administration, security, support and billing.

What data do we use?

• Account and workspace data: name, email address, membership, roles and access rights.
• Connection data: selected workspace, connected services, permissions, connection status and information needed to authenticate the connection. Unifyr MCP OAuth codes and tokens are stored as hashes.
• Instructions and results: your query, filters and data returned by the selected service. Depending on the task, this may include business contacts, company profiles, email content, senders and recipients, calendar events, files and CRM records. Messages and attachments may contain other people’s data.
• Write instructions: the recipient, message or record change you ask us to prepare and execute. A prepared action is temporarily stored to bind execution to your account, workspace and permission.
• AI research: the research question and relevant results from selected services are processed by the activated AI model. Ordinary direct service calls do not start separate Unifyr AI research.
• Usage and billing data: service and function, time, status, duration, user and workspace attribution, costs, balance and, where applicable, model and token usage. These records help prevent errors and duplicate charges.
• Support and technical data: information shared with support, session data and technical information processed to provide and secure the website.

We receive this data from you, your workspace administrator and connected services. KVK and web search results may come from public or commercially accessible sources. Connect only sources you are authorized to use and limit tasks to necessary data.

Why do we use this data?

Account management, access and task execution are necessary to provide the agreed service. When you act for an organization, necessary business account data is also processed under our legitimate interest in securely serving that organization. Security, investigation of errors, prevention of abuse and duplicate charges rely on legitimate interests in necessary technical and usage data. Financial administration is subject to legal obligations.

Where processing relies on consent, you may withdraw it. OAuth permission controls technical access to your services; it does not automatically replace the legal basis your organization needs for other people’s personal data. For customer content, we follow the organization’s documented instructions and processing agreements.

Who receives data?

When using ChatGPT, OpenAI receives the results Unifyr returns to ChatGPT. For another MCP client, its provider or administrator receives the results. Their terms and your account settings also affect their processing.

The relevant integration provider receives the instruction needed to execute the selected function. The code supports services including KVK, Exa, Composio and connected email, calendar, storage, Arius and VDE services. Composio may act as a technical intermediary. Message recipients chosen by you receive the content and any attachments.

Unifyr uses hosting and database services, including Vercel and Supabase. For research, questions and relevant observations pass through OpenRouter to the selected model and its provider. Other activated infrastructure and payment providers may be involved in other functions. A definitive list of legal entities, locations and processing agreements must be established before publication.

This statement does not promise that all processing takes place exclusively in the EU or that every external provider never uses data for training. Actual providers, settings and contracts must be checked separately. For transfers outside the EEA, applicable safeguards, such as a valid adequacy decision or standard contractual clauses and supplementary measures, must be established and specified here.

How long is data retained?

The MCP code limits authorization codes to two minutes, consent requests and prepared write actions to ten minutes, access tokens to one hour and refresh tokens to thirty days. Revoking a connection blocks further use of that authorization. These validity periods do not mean all stored data is automatically deleted when they expire.

Definitive retention periods and deletion procedures for accounts, customer content, prepared actions, usage records, technical logs, support data and backups must be established and technically verified before publication. Any statutory financial retention obligation must be applied separately from operational logs. This draft is not yet a complete description of the retention policy.

Security and control

MCP uses HTTPS, OAuth with PKCE, workspace-bound authorization and checks of current access rights. Read functions must not execute write instructions. Writing requires additional permissions. Prepared actions are bound to the user and workspace and can be executed only once. These measures reduce risks but cannot make a system infallible.

You can revoke an MCP connection under External connections in Unifyr. This stops further access under that authorization. It does not delete messages already sent, data held by a receiving service or earlier ChatGPT conversations. Use the relevant service’s controls or submit a specific request for those actions.

Cookies and browser storage

Unifyr uses session cookies for sign-in and workspace selection. The website also stores functional preferences such as language and, if you choose, your email address to simplify your next sign-in. The definitive cookie inventory must be compared with the production configuration. Non-essential tracking may be added only with the required information and consent.

Your rights and contact

Where applicable, you may request access, correction, deletion, restriction or portability of personal data, object to processing and withdraw consent. You have protection against solely automated decisions with legal or similarly significant effects. Unifyr provides search, research and execution functions; do not use AI output as an independent decision about people without the necessary review and safeguards.

Send requests to sales@aivantage.nl. Include enough context to locate the account or processing, but no password, API key or complete identity document. If your organization controls the customer content, we coordinate with it. We normally inform you of the handling within one month; if a lawful extension is necessary, we explain it within that month.

You may complain directly to the Dutch Data Protection Authority. This statement will be updated when the service or processing changes. Material changes require appropriate notice to users.