Privacy policy — RCM Centric LLC connector
How the RCM Centric LLC connector for Claude, ChatGPT and other AI apps handles your data.
Who we are
The RCM Centric LLC connector (the MCP server at https://agentic.rcmcentric.com/mcp) is operated by RCM Centric LLC, info@rcmcentric.com. Contact: support@rcmcentric.com.
This policy covers the connector only: what happens when you connect an AI app to your RCM Centric LLC workspace. The AI apps themselves (for example Claude by Anthropic or ChatGPT by OpenAI) are run by their own providers under their own terms and privacy policies.
What the connector accesses
- Your account: to connect, you sign in with your RCM Centric LLC account. The connector knows who you are, your role and your workspace.
- CRM data, on request: when the AI app calls a tool — because you asked it something — the connector reads the CRM data needed to answer: leads, companies, deals, campaigns, proposals, meetings, tasks, agent briefs, files, knowledge or emails. It reads only what your role may see, and only emails in the mailboxes you see in the Inbox.
- Mailbox actions, if you allow them: creating or changing drafts, and moving or marking emails. Drafts are saved in the CRM and are not sent by the mailbox actions.
- Changes, if you give full access: creating and changing the records your role may change (for example leads, deals, tasks, events, invoices, payments, tickets). Sending to people outside the CRM, deleting, voiding and posting happen only after you confirm in the chat.
- The connector does not receive your password for the AI app, your conversations with it, or anything else the AI app does — only the tool requests it sends (the tool name and its inputs).
What we store about connector use
- The connection: the AI app's name and the address it returns to after sign-in, the person who connected, the access chosen (full access, read and mailbox actions, or read only), when it was connected and last used, and how many tools it has used.
- Access keys: stored only as one-way hashes. Access keys expire after one hour; refresh keys after 30 days without use.
- An activity log: for each tool call, the tool's name, whether it worked, how long it took, the time, and a one-line summary of the result (which can include a name or email address). The results themselves are not copied into the log.
- Records created or changed through the connector are stored like any change made in the app, under your name. Drafts and changes made by mailbox actions are stored in the CRM like any other draft or email change, and are visible to you in the Inbox.
How the data is used and shared
- Data is used only to answer the tool requests you make through your AI app, and to show you and your administrators which apps are connected and what they did.
- Results go to the AI app you connected. The tool results are returned to that app, and its provider processes them under its own terms and privacy policy — for example Anthropic's or OpenAI's. Connect only AI apps your organisation allows.
- We do not sell data, do not use it for advertising, and do not share it with anyone else, except where the law requires it.
- We do not use connector data to train AI models.
Health information
RCM Centric LLC is a business CRM for managing companies, contacts and business email. The connector tells AI apps not to include patients' health information in drafts. Do not use the connector to process protected health information unless your organisation has the agreements and approvals in place that the law requires for the AI app you use.
Security
- Sign-in uses OAuth 2.1 with PKCE over HTTPS; the AI app never sees your RCM Centric LLC password.
- Each tool runs with your own permissions. No tool can change settings, users or roles. Tools that send, delete, void or post need your confirmation in the chat.
- Keys work only for the connector, are stored hashed, and stop working immediately when you disconnect or your account is deactivated. Each connection is limited to 120 calls a minute.
How long we keep it
- The activity log: 90 days.
- A connection that has ended (disconnected, or unused for 30 days): deleted 30 days after it ended.
- Unfinished sign-in requests and sign-in codes: deleted once they expire (15 and 5 minutes).
- Drafts: until you send or delete them. Other CRM data follows your workspace's own settings.
Your choices
- Disconnect an AI app at any time on the AI connectors page in RCM Centric LLC, or remove the connector in the AI app. Access stops at once.
- Choose Read only when you connect (or switch to it later) if you do not want any changes made.
- Administrators can turn the connector, full access or mailbox actions off for the whole workspace, or switch off single tools.
- To ask about, correct or delete data held about you, contact support@rcmcentric.com.
Changes
If this policy changes, the new version is published on this page with a new date.
Contact
RCM Centric LLC — support@rcmcentric.com.