Privacy Policy — Henkan Chat

Last updated: 17 October 2026

Henkan Chat (https://chat.henkanpartners.ai) is operated by Henkan & Partners ("we"). This policy explains what data the app collects, how it is used, and your choices. Contact: alex@henkanpartners.com.

Data we collect

  • Account data: your name and email address when you sign in (email/password or Google Sign-In).
  • Conversations: the messages you send and the answers generated, so you can see your chat history.
  • Connector credentials: when you connect a tool, the OAuth tokens (Google, Slack, Notion, Contentsquare) or API credentials (Kameleoon, Wingify, Contentsquare, Qualtrics) needed to call it on your behalf. These are encrypted at rest (AES-256-GCM) and never displayed again.
  • Google user data: if you connect Google Analytics, we request the read-only scope https://www.googleapis.com/auth/analytics.readonly, plus openid and email to identify which Google account is connected. If you connect Google Search Console, we request the read-only scope https://www.googleapis.com/auth/webmasters.readonly, plus openid and email.

How we use your data

  • Slack and Notion are used only to post or read what you ask (or what a Flow you configured posts), in the channels and pages you choose. Qualtrics data is read only to answer your questions; open-text answers may be processed by the AI model to group them into themes.
  • Flows: if you schedule a Flow, Henkan Chat calls your connected tools at the scheduled times and stores the run results in your account.

Account activity

For client accounts, Henkan records sign-in times, approximate location (country and city, derived from the IP address), browser and device type, and which product features are used, to manage access and support the client relationship. This data is kept by Henkan in Henkan Account (https://account.henkanpartners.ai) and is never sold.

How we use Google user data

  • We use Google Analytics data only to answer the questions you ask in Henkan Chat: listing the GA4 accounts and properties you can access, reading property metadata, and running the reports and real-time reports you request.
  • If you connect Google Search Console, we request read-only access (webmasters.readonly) to list the Search Console properties you can access, run the search performance reports you ask for, inspect URLs and read sitemap status. We never submit, remove or change anything in Search Console.
  • Data is fetched on demand, at the moment you ask. Report results are shown to you in the conversation and stored only as part of that conversation's history.
  • To generate an answer, the relevant report results are sent to the AI model that powers Henkan Chat (Anthropic's Claude, accessed through our hosting provider's AI gateway) for processing of your request only.
  • We never modify your Google Analytics configuration or data.
  • If you choose to connect Henkan Chat to another AI assistant (for example Claude or ChatGPT) through our MCP connector, the Google data you request through that assistant is sent to it, at your explicit request and only for that request. You can revoke that access at any time from the 'Use Henkan in other AI tools' page.

Limited Use disclosure

Henkan Chat's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • We do not sell Google user data.
  • We do not use or transfer Google user data for advertising, including retargeting or personalized ads.
  • We do not use Google user data to determine creditworthiness or for lending purposes.
  • We do not use Google user data to develop, improve or train generalized AI or machine-learning models.
  • No human reads your Google user data unless you give explicit consent for a specific item (for example, a support request), it is necessary for security purposes or to comply with law.

Sharing and processors

We do not share your data with third parties except the service providers needed to run the app: our hosting and database provider (Lovable Cloud / Supabase), our edge network (Cloudflare), and the AI model provider (Anthropic). They process data only on our instructions. If you connect Henkan Chat to another AI assistant you choose (for example Claude or ChatGPT), that assistant also receives the data you request through it.

Retention and deletion

  • Disconnecting a connector in the Connectors page deletes its stored tokens or credentials immediately. For Google, you can also revoke access at any time at https://myaccount.google.com/permissions.
  • Conversations are kept until you delete them or your account.
  • To delete your account and all associated data, email alex@henkanpartners.com; we complete deletion within 30 days.

Security

Data is transmitted over HTTPS. Connector secrets are encrypted at rest and only decrypted server-side when a tool is called on your behalf. Access to production systems is restricted to authorised Henkan & Partners staff.

Your rights

Under the GDPR you may request access, correction, deletion or a copy of your data, or object to its processing, by writing to alex@henkanpartners.com. You may also complain to the CNIL (www.cnil.fr).

Changes

We will post any changes on this page and update the date above.