Privacy notice: MCP integration

This notice describes the data processed when you connect your Hoplix account to an AI assistant, such as Claude or ChatGPT, through the Hoplix MCP server (api.hoplix.com/mcp). It supplements the general Hoplix privacy policy.

What data we process

• Connection data: name of the connecting application (for example Claude or ChatGPT), the application's redirect addresses, IP address, connection date and date of last use. Access codes (tokens) are stored only in a non-reversible hashed form.
• Request data: what the assistant sends to carry out what you ask, for example product codes, texts and images of a campaign, products, quantities, shipping address and reference of an order.
• Images uploaded through the upload link the assistant gives you: the file, its name and its size, linked to your account.
• Data returned to the assistant: catalogue and prices, your campaigns, your orders with status and tracking, quotes. Only data of your own account.
• We do not receive the content of your conversations with the assistant, and the assistant never sees your password: you log in on the Hoplix page.

Why we process them

• To carry out the operations you request through the assistant (performance of the contract) and for the security of the service and abuse prevention (legitimate interest).
• We do not sell the data, we do not use it for advertising and we do not use it to train artificial intelligence models.

How long we keep them

• Connections: as long as the application stays connected. The access code lasts one hour, the refresh code 90 days from last use. Disconnected or expired connections are deleted after 12 months.
• Technical call log: date, account, tool used and outcome, without the content of the requests. It is deleted after 12 months.
• Test orders: deleted after 30 days.
• Images uploaded through the link: deleted 7 days after the link was requested. Those used in a campaign remain as the campaign's design.
• Real campaigns and orders created through the assistant: they are Hoplix campaigns and orders like any other and follow the general privacy policy, including tax obligations.

Who we share them with

• The data the assistant receives from Hoplix is processed by the assistant's provider (for example Anthropic for Claude, OpenAI for ChatGPT) under its own privacy policy.
• Orders are shared with production and shipping partners as for every Hoplix order, under the general privacy policy.

Your controls

• You can disconnect the assistant at any time from your account, under Integrations > MCP Integration, or from the assistant's settings: from then on it can no longer access your data.
• You can exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to [email protected], and you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Last update: 26/10/2026