Privacy Policy

Last updated: October 30, 2026 · Effective date: October 30, 2026

1. About this service

HighLevel Agency & Builder, operated by Daniel Hallman, helps you inspect a connected HighLevel sub-account and preview supported changes. This policy covers ghlagencymcp.com and its connections through ChatGPT and other Model Context Protocol (MCP) clients.

We do not sell or rent your account data, or use it to train AI models.

2. Information we process

The service processes information needed for your requests:

• Request inputs: Your selected sub-account, pages, domains, workflow settings, snapshot exports, and other information supplied for a supported task.
• Account credentials: HighLevel access and refresh tokens obtained when you connect, or the Private Integration Token and optional editing or screening credentials you supply for the selected account.
• Connection checks: Access-check results, the connection's change policy, and tool catalog responses.
• App registration details: The connecting software's public client ID, app name, and callback URLs.

3. What stays in memory and what is saved

• Saved connections: When connection storage is enabled, we encrypt account access and refresh tokens, selected sub-account and company IDs, connection permissions, change policies, and refresh-token rotation records. These records let the connection continue after a service restart. Optional screening credentials supplied through the manual connection form are also encrypted.
• Temporary data: Tool inputs, previews, account responses, pending login requests and optional builder editing sessions stay in memory. Builder access and unfinished login requests must be reconnected after a restart.
• App registrations: We save public client IDs, app names and callback URLs so connecting software can be recognized after a restart.
• Changes you apply: Saved pages, domain bindings, workflow drafts, and published workflows remain in HighLevel. A form-screening workflow also stores the selected LeadShield site key in HighLevel; revoke that key in LeadShield to stop its access.

4. Other providers

• OpenAI: ChatGPT handles chats and tool use under OpenAI's privacy policy.
• HighLevel: The service reads or changes the selected sub-account under the permissions you provide. HighLevel's policies apply to records stored there.
• Cloudflare: Cloudflare routes and protects the website's HTTPS traffic.

5. Access and changes

• Use the HTTPS connection URL provided on this site.
• Account access is bound to the sub-account selected during connection.
• Account changes require a preview and an apply request. A saved draft, publication, and actual delivery or routing are separate outcomes.

6. Ending access and contacting us

Disconnecting the app revokes the assistant connection and removes its saved HighLevel credentials. Saved account connections survive service restarts when connection storage is enabled. Expired connection records are removed during cleanup. Public app registration details remain so the connecting software can be recognized. To revoke the underlying app authorization, uninstall the app in HighLevel.

You can request access, correction, or deletion of your data where applicable law provides those rights. Records held by HighLevel or other providers are subject to their policies.

For questions, privacy requests, or data inquiries, contact Daniel Hallman at support@mooshworks.com or visit https://ghlagencymcp.com/support.