Data used for an explicit tool call
Claude sends Semaya only the arguments required for the tool you invoke. Semaya reads the matching persisted CRM records within your current tenant and branch permissions.
Semaya does not read Claude memory, Claude chat history, uploaded files, or hidden prompts. The connector does not request them.
Tool results contain only fields required for the selected task. Operational logs contain stable codes, request identifiers, timing, and outcomes. They exclude access tokens, access codes, message bodies, and raw request bodies.
Explicit consent and control
OAuth shows the requested scopes before connection. You give explicit consent to those scopes. Semaya checks your active organization, membership, branch assignments, role, permission grants, and OAuth scopes for every call.
Write tools require a confirmed Claude action. Semaya uses idempotency controls to prevent duplicate mutations.
You can revoke the connector under Claude Settings and Connectors. You can also ask support@semaya.chat for revocation help. Revocation invalidates the active grant and its refresh tokens.
Token and business-data retention
Access tokens expire after 10 minutes. Refresh tokens expire after 30 days and rotate after use. Semaya stores only token digests, not raw OAuth tokens.
Business records follow the retention rules of the connected Semaya Cloud organization. Disconnecting Claude does not delete CRM records. Submit a data request under the main Semaya privacy policy.
Anthropic review data
Anthropic reviewers use an isolated tenant with synthetic records marked for review. This tenant has no provider credentials, billing account, campaign recipients, phone number, or routable customer identity.
The review connector cannot create external communication. Review records do not represent a customer or a real person.
Questions and requests
Email support@semaya.chat for connector support, privacy questions, or revocation help. Include your organization name and request identifier. Do not send passwords or OAuth tokens.
Semaya is operated by PT Global Raya Oris Wijaya in Yogyakarta, Indonesia.