Projekly Connector for Claude: Privacy Policy
Effective date: 13 November 2026 Operator: Projekly Solutions, Kuala Lumpur, Malaysia, the operator of Projekly ("we", "us") Contact: contact@projekly.com
This policy covers the Projekly connector for Claude ("the connector"), the service at https://mcp.projekly.com
that lets you use your Projekly account from Claude, Anthropic's AI assistant. It explains what the connector
collects, how it is used and stored, who it is shared with, how long it is kept, and how to reach us.
Your use of Projekly itself is covered by the Projekly privacy policy at https://projekly.com/page/privacy-policy.
1. What the connector does
When you connect Projekly to Claude, you sign in to your Projekly account on a page we host, either with your Projekly email and password or with Continue with Google. After that, when you ask Claude to do something in Projekly, such as list your projects, read a ticket, create a task or mark a task done, Claude calls the connector, and the connector calls Projekly's own API as you, with your Projekly permissions. The connector cannot see or do anything in Projekly that your account cannot.
2. What we collect and store
| Data | Why | How it is handled |
|---|---|---|
| Projekly email and password, if you sign in that way, entered on our sign-in page | To sign you in to Projekly | Sent once, over HTTPS, to Projekly's sign-in API. Never stored by the connector and never written to our logs |
| Google sign-in handoff, if you choose Continue with Google: a one-time code that Projekly gives the connector after you sign in with Google | To obtain your Projekly session token without a password | The code is valid for 2 minutes and works once. The connector receives no Google password and no Google access tokens |
Two short-lived security cookies (pm_csrf, pm_g) set on the sign-in page |
To protect the sign-in step from forgery and from a sign-in link being used by someone else | Expire after 15 minutes. No analytics, advertising or tracking cookies are used |
| Projekly session token returned by Projekly after sign-in | To act on your behalf when you use tools | Stored encrypted (AES-256-GCM). Used only to call Projekly for you |
| Basic profile from sign-in: your Projekly user ID, name, email and role names | To tell Claude who is connected | Stored in the connector's database |
| Connector access and refresh tokens that Claude receives | To let Claude call the connector without your password | Only a one-way hash (SHA-256) of each token is stored |
| Claude's connection details (client registration: name and callback addresses) | To complete the sign-in flow | Stored in the connector's database |
| Technical logs: IP address, request time, request path, response status, user-agent | Security, reliability and abuse prevention | Standard web-server logs. Request bodies are not logged |
3. Data from Projekly that passes through the connector
When you use a tool, the connector fetches the relevant projects, tasks, tickets or user names from Projekly and returns them to Claude so it can answer you. When you ask Claude to create or change something, the connector sends that change to Projekly. The connector does not store this content. It is processed in memory for the request and then discarded.
The connector does not read your Claude conversations, Claude's memory, or your files. It only receives the specific inputs Claude sends to a tool (for example a task title or a project ID) when you ask for that action.
4. How we use data
Only to provide the connector: sign you in, keep you connected, run the actions you ask for, keep the service secure and working, and answer support requests. We do not sell your data, use it for advertising, or use it to train AI models.
5. Who we share data with
- Anthropic (Claude). Data returned by tools is sent to Claude so it can respond to you. Anthropic handles it under its own terms and privacy policy (https://www.anthropic.com/legal/privacy).
- Projekly. The connector calls Projekly's API on your behalf. This is the service you are already using.
- Google, only if you choose Continue with Google. The Google sign-in itself happens between you, the Projekly website and Google, under Google's own terms and privacy policy (https://policies.google.com/privacy). The connector does not receive your Google password or tokens, and does not send Google any of your Projekly data.
- Infrastructure providers that host or protect the connector: Google Cloud (hosting) and Cloudflare (network and security), which process traffic for us.
We do not share your data with anyone else, except where the law requires it.
6. Retention
| Data | Kept for |
|---|---|
| Sign-in handoff records (pending sign-in, one-time sign-in code, Google one-time code, security cookies) | Minutes (15 min, 5 min and 2 min at most), then deleted |
| Access token | 1 hour |
| Refresh token and your encrypted Projekly session token | Up to 30 days from the last renewal, then deleted. Deleted immediately if you disconnect or the connection is revoked |
| Technical logs | 30 days, then deleted |
7. Your choices and rights
- Disconnect any time in Claude (Settings, then Connectors). The connector deletes the stored tokens and signs out the Projekly session it created.
- Control what Claude can change. Write actions (create project, create task, update task) are marked as modifying data, so Claude asks for your permission each time. The connector has no delete actions.
- Access, correction or deletion. Contact us at contact@projekly.com and we will respond within 30 days. Depending on where you live you may have additional rights under local data-protection law.
- Your Projekly data itself is managed in Projekly. You can edit or delete it there.
8. Security
Traffic uses HTTPS. Projekly session tokens are encrypted at rest, our own tokens are stored only as hashes, passwords are not stored, the service runs under its own restricted system account, and sign-in attempts are rate-limited. No system is perfectly secure. If we learn of a breach affecting you we will tell you as the law requires.
9. Children
The connector is for business use and is not directed at children under 16.
10. Changes
We will post changes on this page and update the effective date. For material changes we will give notice where we can.
11. Contact
Projekly Solutions, Kuala Lumpur, Malaysia. Email: contact@projekly.com.