Roam connector privacy notice
How the Roam connector at mcp.roamstay.com handles your information when you connect an AI app, such as Claude, to Roam. It adds to Roam's Privacy Policy, which applies to everything else.
What the connector is
The Roam connector lets an AI app you choose call Roam on your behalf, using the Model Context Protocol (MCP). You start every connection yourself: you sign in to Roam and choose Allow. The AI app can then only do what your Roam login can do, limited further by your organisation's AI access settings.
What we receive and keep
- Your Roam address. The part you type on the sign-in page, to find your Roam. Your browser keeps it in a cookie on this site for up to 180 days, so you do not have to type it again; we do not store it on our side.
- A connection token. Allowing a connection creates a personal access token in your Roam account, listed in Settings › AI Access. The AI app holds it in encrypted form; the connector keeps no copy and no database.
- A record of each call. Your Roam keeps an audit record of every request an AI app makes: who, when, which tool and association, and whether it was allowed. The content of your question is not stored, only a fingerprint (hash) of it.
- Web server logs. Like any website, the connector's server logs requests, including IP address, time and the page or address requested, for security and troubleshooting. These logs are deleted after 14 days.
What the AI app receives
When you ask the AI app something, it fetches the Roam data needed to answer, within your access, and that data goes to the AI app and its provider (for Claude, Anthropic). How they handle it is set by your agreement with that provider, not by Roam. Only connect AI apps your organisation has approved.
What we do not do
- We do not sell or share your data for advertising.
- We do not use your connector activity to train AI models.
- The connector never moves money, refunds, voids, approves or sends email on your behalf.
Your choices
- Change, pause or revoke a connection at any time in Roam: Settings › AI Access. Revoking stops access at once.
- Your organisation's administrator can turn AI access off for everyone, set limits per role, and revoke every connection.
- Connections end automatically after 90 days.
- To access, correct or delete your information, follow Roam's Privacy Policy.
Contact
Questions about this notice or your data: support.roamstay.com.