CapaPlanner for Claude – Privacy Policy
Last updated: 17 October 2026
About this policy
The CapaPlanner connector for Claude stores no customer data on its servers; it passes your requests between Claude and CapaPlanner. This policy explains what it handles, why, and for how long.
The connector is run by Stephan Schott, Stadtstieg 41, 37083 Göttingen, Germany ("CapaPlanner", "we").
This policy covers only the connector at mcp.capaplanner.com. Your use of CapaPlanner itself is covered by the CapaPlanner privacy policy. Your use of Claude is covered by Anthropic's privacy policy.
Who is responsible for your data
For the data in your CapaPlanner workspace, your employer or organisation (our customer) is the controller, and CapaPlanner acts as its processor.
- Workspace data (employees, shifts, projects, bookings): your organisation decides whether its staff may use the connector. CapaPlanner processes this data on its behalf, under the data processing agreement between them.
- Connector operation data (sign-in, security logs): CapaPlanner is the controller.
- Your Claude conversations: Anthropic is responsible, under its own terms and privacy policy.
What data the connector handles
The connector handles three kinds of data, and only while you use it.
| Data | Where it comes from | Why |
|---|---|---|
| Your CapaPlanner API key | You enter it on the sign-in page | To read CapaPlanner data on your behalf, with your own permissions |
| CapaPlanner data (for example employees, projects, bookings, shifts, tasks, utilization) | CapaPlanner's API, when Claude calls a tool | To answer your request in Claude |
| Technical data: IP address, time, request type, error codes | Your browser or Claude's servers | Security: rate limiting, detecting misuse, troubleshooting |
The connector only reads data. It cannot create, change or delete anything in CapaPlanner.
It does not read your Claude conversations, chat history, memory or files. It receives only the tool requests Claude sends, such as "list resources" with an ID or a date range.
The CapaPlanner data returned is passed straight to Claude to answer your request. The connector does not keep a copy.
We use the data only to provide the connector. We do not use it for advertising, profiling or training AI models, and we do not sell it.
Legal basis
Where the GDPR applies, we process data on these grounds (Art. 6(1) GDPR):
| Purpose | Legal basis |
|---|---|
| Signing you in and answering your requests | Performance of the contract with you or your organisation (Art. 6(1)(b)); for workspace data, on your organisation's instructions as processor (Art. 28) |
| Security logs, rate limiting, misuse detection | Our legitimate interest in a secure service (Art. 6(1)(f)) |
| Answering legal requests | Legal obligation (Art. 6(1)(c)) |
Who receives the data
Data goes only where it must for the connector to work. We never sell or rent it.
| Recipient | What they receive | Why |
|---|---|---|
| Anthropic (Claude) | The CapaPlanner data a tool returns, as part of your conversation | To answer you. Anthropic handles it under its own privacy policy |
| CapaPlanner API | Your API key and the request (for example a project ID) | To fetch the data you asked for |
| Our hosting provider | Encrypted traffic and server logs | To run the server |
We may disclose data if the law requires it, for example a valid court order.
Transfers outside the EU
Anthropic is based in the USA, so data a tool returns to Claude leaves the EU. This happens only when you connect CapaPlanner to Claude and ask Claude something. Anthropic describes the safeguards it uses for such transfers (for example EU Standard Contractual Clauses or the EU-US Data Privacy Framework) in its privacy policy.
How long data is kept
A sign-in lasts at most 30 days; after that you sign in again.
| Data | Kept for |
|---|---|
| One-time sign-in code | 5 minutes, usable once |
| Access token (held by Claude) | 1 hour |
| Refresh token (held by Claude) | Until used once, at most 30 days after you signed in |
| CapaPlanner data | Not kept: only for the length of one request |
| Server logs (IP address, time, errors) | Only as long as needed for security and troubleshooting, then overwritten automatically. We delete them on request |
Your choices and rights
You can stop the connector's access at any time, in two ways:
- Disconnect in Claude: Customize → Connectors → CapaPlanner → Disconnect. Claude deletes its tokens.
- Deactivate or replace your API key in CapaPlanner. Every request uses your key live, so access stops immediately, even for tokens already issued.
You may ask us for access to, correction of or deletion of personal data we hold about you, such as log entries with your IP address. Where the GDPR applies, you also have the rights to restrict or object to processing, to data portability, and to complain to a data protection authority. Write to the contact below; we answer within 30 days.
Changes to this policy
We will post any change on this page and update the date at the top. Significant changes will also be announced in the CapaPlanner app.
Contact
Stephan Schott
Stadtstieg 41, 37083 Göttingen, Germany
Email: support@capaplanner.com
You can also complain to a data protection supervisory authority, for example the Lower Saxony State Commissioner for Data Protection (Die Landesbeauftragte für den Datenschutz Niedersachsen).