Privacy when you connect an AI app

You can connect featury to an AI app or agent, like Claude, ChatGPT, Codex or Cursor: with the featury plugin, as a connector, or with an API key. This page says what that app can see, what featury keeps, and how to cut the app off. Everything else about your data is in our Privacy Policy.

Read the Privacy Policy

The app acts as you, with your permissions in each organization you belong to. It can read what you can read in featury: requests, the feature map, what shipped, what is being built and the changelog. It can change what you can change: file and update requests, comment, and draft or publish the changelog. It sees only what a tool returns when it calls one.

What a tool returns goes to the company behind the AI app you connected, such as Anthropic for Claude or OpenAI for ChatGPT and Codex. That company handles it under its own privacy policy, and featury does not control what it keeps. Questions you send with ask_featury are answered by the AI providers listed in our Privacy Policy, under the same rules as questions you ask in featury.

When you connect, the Connect page shows the app's name and the address it sends you back to. We keep a record of that sign-in until it expires (5 minutes for a link, 10 minutes for a code), and a daily cleanup deletes it after that.

Connecting makes an API key named after the app. We store only a hash of the key, never the key itself, plus its name and when it was made and last used. The key works until you revoke it. After that, its record stays with your account.

What the app does shows up in featury like your own work, marked with the app's name (for example “Claude Code · via you”). It stays until you delete it, or until your organization is deleted.

Each question sent with ask_featury is saved as a chat in featury with its answer, so the app can continue the thread. You can delete these chats in the app.

Our API logs each request's endpoint, result and duration, with no IP address and no content, and deletes those logs within 31 days. Our web server's access log also records the IP address and which app sent the request, with sign-in headers and secrets removed. We keep it for 180 days, then delete it.

To run the tools the app calls, to show who did what, to apply usage limits, to keep accounts safe and to fix problems. We don't sell this data or use it for advertising.

• Revoke its key under Account → API keys. The app loses access at once.
• Remove featury from the AI app too, so the app forgets the key.
• Delete your organization, and its data is permanently deleted 30 days later.
• Your rights under the LGPD and the GDPR, and how to use them, are in our Privacy Policy.

Questions about this page? Email privacy@featury.app.