Privacy policy

HostAfrica Claude connector notes — last updated 2026-10-30

The authoritative HostAfrica privacy policy is www.hostafrica.com/privacy-policy/. This page adds connector-specific detail for the OAuth shim. Anonymous domain search via /domains/mcp is described in Connecting ChatGPT via MCP and is covered by the HostAfrica privacy policy (products and services, including IP and service logs).

What we collect (OAuth connector)

• HostAfrica API token you submit during OAuth consent
• OAuth session artifacts (authorization codes, access tokens, refresh tokens) issued to Claude
• Minimal operational logs (including IP for rate limiting and abuse prevention)

What we do not collect

• Your HostAfrica account password

How data is used

Your API token is used only to authenticate proxied MCP requests to HostAfrica on your behalf when Claude presents a valid shim-issued OAuth access token. Anonymous /domains/mcp calls do not use an API token; tool inputs (for example domain names) are forwarded to HostAfrica upstream to fulfill the request.

Storage and retention

• Token store with HostAfrica API tokens encrypted using AES-256-GCM
• OAuth session data is retained until you revoke access via Claude, token rotation at https://panel.hostafrica.com/public-api, or POST /revoke

Revoking access

1. Remove the connector in Claude settings.
2. Revoke or rotate your API token at panel.hostafrica.com/public-api.
3. Revoke OAuth tokens via POST https://mcp.hostafrica.com/revoke.

Contact

Privacy: see HostAfrica Privacy Policy. Support: www.hostafrica.com/contact-us/ · support@hostafrica.com