FrontierStack Plugin Privacy Policy
Effective September 30, 2026
This policy covers the FrontierStack plugin and connector for ChatGPT, Codex and Claude, and any other AI assistant you connect to FrontierStack’s gateway at https://frontierstack.app/plugin/mcp. The gateway is operated by Enfour, Inc. This policy supplements the FrontierStack terms. When Claude Code or another assistant on your Mac connects to the FrontierStack app directly on that Mac, the request never reaches our servers and this policy does not apply to it.
Data the plugin processes
When you connect the plugin, we process your FrontierStack customer account identifier, OAuth grant, an opaque identifier and display label for each opted-in Mac, connection status, requested tool name and arguments, and the result returned by your FrontierStack app. Results can include operational health, infrastructure descriptions, diagnostics, alerts, or log excerpts that you requested.
How it is used
We use this data only to authenticate you, route each request to a Mac on your account, return the result, prevent abuse, troubleshoot failures, and protect the service. FrontierStack removes recognized secrets from diagnostic and log output on your Mac before sending it through the relay.
Storage and retention
OAuth tokens are stored only as one-way hashes. Tool requests and results pass through our relay encrypted at rest with a server-held key, and are kept only as long as delivery needs:
- Tool request: erased when your Mac answers, and in any case when the request expires 35 seconds after it was made.
- Tool result: erased as soon as it has been returned to the assistant. A result that could not be delivered is erased within 10 minutes.
- Job record (tool name, timing, status, no content): deleted 1 day after the request expired.
- Authorization codes: valid for 5 minutes; deleted 1 day after they expire.
- Access tokens last 1 hour and refresh tokens 30 days. A connection that is revoked, or whose refresh token expires, is deleted 30 days later.
- Mac connection records (opaque id, display label, app version, last-seen time) remain while ChatGPT access stays on for that Mac, and are deleted on request.
- Web server and security logs (IP address, time, request path and status, no tool content) are kept for up to 90 days.
Sharing
The requested result is sent to the AI product in which you invoked the plugin: OpenAI’s ChatGPT or Codex, Anthropic’s Claude, or another assistant you connected. That provider processes it under the terms and privacy choices for your account with them. We do not sell plugin data or use tool results for advertising.
Your controls
You can stop new requests immediately by turning off ChatGPT access in FrontierStack. You can also disconnect FrontierStack in the assistant (in ChatGPT or Codex, or under Claude’s connector settings). App Lock, read/change permissions, and approval settings continue to apply to plugin requests.
Contact
For access, deletion, or privacy questions, contact frontierstack at frontierstack dot app or use FrontierStack Support.