Scope. This notice covers the PACO AI assistant connector — the integration that lets PACO members submit and track requests from inside an AI assistant such as ChatGPT or Claude. PACO's general privacy policy, covering our website and wider services, is at pacoservices.pt/privacy-policy/. Where this notice is silent, that policy applies.
PACO is a personal concierge service based in Lisbon, Portugal. The connector is available only to active PACO members.
When you connect an AI assistant to your PACO account, we process:
• Your email address — used only to confirm you are an active member and to link the connection to your account
• Your name — recorded on each request so our team knows who submitted it
• The content of requests you submit — the title and description of what you are asking the team to do, any note you later add, and any deadline or priority you set
• Connection records — your email address, an account identifier, and cryptographic hashes of your access credentials. We never store the credentials themselves; a hash cannot be reversed
• Usage records — which connector feature was used and when, whether it succeeded, and which assistant it came from
The connector is designed not to receive, and you should not send through it:
• payment card or bank account details
• health or medical information
• government identification numbers, including NIF, NISS, passport and social security numbers
• passwords, one-time codes, or any other credential
Requests submitted through the connector are screened automatically, and recognisable card numbers, bank account numbers, labelled identification numbers and credentials are removed before the request is stored. Where something is removed, the request is marked so our team knows to contact you directly for it.
This screening recognises structured data such as a card or identification number. It cannot reliably detect sensitive information written as ordinary prose. Please contact PACO directly for anything sensitive, and we will collect it through a secure channel.
We use it solely to provide the concierge service: confirming your membership, ensuring you can only see your own requests, routing your requests to our team, tracking their progress, and keeping a record of connector activity for security and troubleshooting. We do not sell your data, and we do not use it for advertising.
In addition to the recipients described in our general privacy policy, the connector relies on:
• Supabase — authentication and database (EU region)
• Atlassian (Trello) — task management; your requests reach our team as tasks on your private board (United States)
• Railway — hosting for the connector service (United States)
• OpenAI (ChatGPT) or Anthropic (Claude) — the provider of whichever assistant you choose to connect (United States)
Your conversation with an AI assistant is processed by that assistant's provider under their own privacy policy, not this one. Only the request you choose to submit is passed to PACO.
• Requests and their content — 24 months after the request is completed or cancelled
• Connector usage records — 12 months
• Connection records — until you disconnect the assistant, revoke access, or your membership ends
When your membership ends we delete or anonymise connector data within 90 days, unless we are required to keep it longer by law. You may request earlier deletion at any time.
You can disconnect at any time from your assistant's settings. This ends the connection immediately — nothing further can be submitted or read through it.
You may request access to, correction of, or deletion of your personal data, as well as restriction, objection, or portability, by contacting ai@pacoservices.pt. Connecting an assistant does not give it access to anything beyond your own requests.
For privacy questions: ai@pacoservices.pt