DocsOpen Henkan Chat
Reference

Security and privacy

How Henkan Chat stores credentials, what it reads from your tools, when it changes anything, and how to remove access and data.

Up to date with v1.5.4Updated 26 October 20263 min read

Henkan Chat reads your marketing and experimentation data only to answer your questions, and changes nothing without your OK. Here is how that access works, and how to take it back.

Your data stays yours#

  • Organisation connections. Connectors belong to an organisation. Henkan only ever uses the connectors of an organisation the asking person belongs to, checked on every request, in the app, in Slack, in flows and from external AI tools. Someone removed from an organisation loses access to its connectors immediately.
  • Private until you share. Your conversations and flows are visible only to you, even to other members of your organisation, until you share them with colleagues from your company. People outside your company can never be added: this is checked every time a shared conversation or flow is opened or used.
  • Each person's own connectors. When a colleague sends a message in a conversation you shared, or runs a flow you shared, Henkan uses their connectors and their approvals, never your credentials. Only the person who sent a message can approve its tool calls. Scheduled and event runs of a flow run as its owner.
  • Fictional examples. The screenshots in this documentation use made-up data from a fictional brand, Maison Exemple.

Credentials#

  • API keys, tokens and passwords you enter for a connector are encrypted (AES-GCM) and stored on Henkan's servers.
  • They are never sent to your browser, not even to you. To change them, disconnect and connect again.
  • Credentials are tested before saving. Invalid ones are never stored.
  • Disconnect deletes a connection and its saved credentials. For Google, Henkan also revokes its access with Google where possible.

What Henkan reads and changes#

Google Analytics 4Read-only access (analytics.readonly). Henkan never changes your Analytics configuration or data.
Google Search ConsoleRead-only access (webmasters.readonly). Henkan never submits, removes or changes anything.
Testing tools, Slack, NotionTools that change data (pausing a test, posting a message, writing a page) always ask for your approval in the chat or in Slack.
FlowsOnly read data. Slack and Notion output blocks post where you configured them.
External AI toolsTools that change data are hidden unless you allow them on the MCP access page.

Every tool call Henkan makes is visible under the answer, with its arguments and raw result. Calls made by external apps are listed under Recent activity on the MCP access page.

The AI model#

Answers are written by Claude Sonnet and conversation titles by Claude Haiku, Anthropic's models, called from Henkan's servers: directly through Henkan's own Anthropic connection when it is available, otherwise through an AI gateway. Henkan sends the model your question, the conversation so far and the tool results needed to answer. Henkan is instructed never to invent data when a tool fails, to cite where numbers come from, and to apply a shared statistics standard to A/B test results.

Account access#

Henkan decides which companies can use Henkan Chat, in its central account service (Henkan Account). To support client accounts, Henkan Account sees:

  • Sign-ins: time, approximate location, browser and device.
  • Feature use: which Chat features are used.
  • AI cost: for each AI answer, the model used, the number of tokens and the workspace. Never the questions, the answers or your data.

The Privacy Policy describes this in full.

Henkan Chat uses Google Analytics to understand how the product is used, only if you agree in the cookie banner. Your choice is shared across henkanpartners.ai and the Henkan tools. To change it, delete the hp_consent cookie and site data, and the banner shows again.

Remove access#

ToDo this
Stop Henkan using one toolDisconnect it on the Tools page.
Stop Henkan using one tool in one conversationSwitch it off in Tools.
Stop an external AI appSelect Revoke on the MCP access page.
Stop Henkan answering you in SlackSelect Unlink in the Slack connection's settings.
Delete your conversations, connections and saved credentialsOpen My account (account menu), go to Sign-in and select Delete my account. See Your account.

See also the Privacy Policy and Terms of Service.