AI Assistant Connection Privacy Notice

1. What this notice covers

This notice explains how Bond4Waste Inc. handles information when you authorize ChatGPT or another compatible AI assistant to read information from your company's Bond4Waste account. The connection uses the Model Context Protocol (MCP) and OAuth authorization.

Your company's use of the Bond4Waste platform remains subject to its applicable Software-as-a-Service Agreement and platform privacy terms. Our website privacy policy covers the marketing website, and the driver app privacy policy covers the B4W Driver mobile app.

2. Information the connection handles

To establish and maintain the connection, Bond4Waste processes your account, company and organization identifiers, current membership and permissions, the assistant's client name and identifier, its callback address, and connection creation and expiry information. Authentication uses your existing Bond4Waste sign-in through Clerk.

Depending on your permissions and the assistant's requests, the connection can return:

• Company information, including the business name, contact information, time zone, operating hours, enabled features and permitted billing settings.
• Customer information, including names, email addresses, phone numbers, billing addresses, and account status.
• Work orders, including job numbers, status, scheduled dates, the customer, assigned driver and service address, and permitted invoice references.
• Routes, including names, scheduled dates, assigned drivers and vehicles, and stop completion or skip counts.
• Invoices and billing summaries, including invoice references, dates, amounts, outstanding and overdue balances, payment status and cash reconciliation totals, when your role permits billing access.

These business records can contain personal information about customers, customer contacts, drivers and other people associated with the records. Search terms, dates, record identifiers and other filters supplied by the assistant are processed to find the requested information.

3. Sharing with your chosen AI assistant

After you approve the connection, the assistant can request permitted information from Bond4Waste. Bond4Waste sends the requested results to that assistant, where they may be used in answers and included in your conversations.

Information received by ChatGPT or another assistant is handled under that provider's terms, privacy policy, and your account or workspace settings. Review those policies and your company's rules before connecting an assistant to business data. Bond4Waste does not control the provider's retention or use of information after it has been received.

Disconnecting stops future retrieval through that connection. It does not delete information already returned to the assistant or remove existing conversations. Manage those records with the assistant provider.

4. Why Bond4Waste processes this information

Bond4Waste processes connection information to:

• Authenticate you and confirm your current access to the connected company.
• Find and return the business information requested through the assistant.
• Maintain, refresh, display and revoke the connection.
• Operate the service, prevent misuse, investigate failures and maintain security.
• Record connection authorization and disconnection in the platform audit log.

5. Your authorization and permissions

Connecting requires you to sign in to Bond4Waste and explicitly approve read access for the company shown on the authorization page. Each connection is tied to the authorizing user and that company. Review the assistant name and callback address before approving, particularly for an unverified assistant.

The connection provides read access to existing records. It does not provide tools to create, change or delete business records, send invoices, or take payments. Bond4Waste checks current company membership and account standing on connector requests and applies your existing role and data-access permissions to tool calls.

To connect a different company, authorize a separate connection for that company. Your prompt cannot change which company an existing connection is authorized to access.

6. Connection storage and retention

Bond4Waste stores expiring authorization state in Redis. Access and refresh tokens use hashed lookup keys rather than raw token values as storage keys. Access tokens expire after at most one hour. A connection grant expires 30 days after authorization; refresh tokens rotate when used and cannot extend that original expiry. You can revoke the connection sooner.

The service also maintains authorization and disconnection audit entries and operational or security logs. Connection expiry and token expiry do not remove these records or the underlying company business records. Business-record retention remains subject to your company's instructions and its applicable Bond4Waste agreement.

Existing platform services support the connection, including Clerk for authentication, hosted database infrastructure for business records, and Redis for authorization state. Information already sent to an assistant is retained according to that provider's policies and your account or workspace settings.

7. Disconnecting and privacy requests

In Bond4Waste, open Settings → Integrations → AI assistants, or AI connections, and revoke the connection. Remove the connection in your assistant as well. Revoking invalidates its authorization for future access to Bond4Waste.

For access, correction or deletion requests concerning company business records, contact your company's account administrator. You may also contact Bond4Waste at the addresses below; requests concerning records controlled by your company may need to be coordinated with that company. For information held in an assistant account, use that provider's privacy and account controls.

8. Contact and updates

For questions about the connection, privacy requests or support, contact Bond4Waste Inc.:

This notice describes the AI assistant connection. We will update this page and its last-updated date when the practices described here change.