Last updated: October 14, 2026
This policy explains which data the SYSCNC connector (the MCP server at mcp.syscnc.com) uses when you connect Claude, or another AI assistant, to your company's data on SYSCNC. The SYSCNC platform remains subject to the contract and terms agreed with your company.
SYSCNC is a product of Systems4you, Lda, Centro Empresarial e Tecnológico SANJOTEC, Rua de Fundões Nº 151, 3700-121 São João da Madeira, Portugal. Contact: [email protected], phone +351 256 001 934.
Machine and user data belong to the SYSCNC customer company. Systems4you processes them on its behalf, under the SYSCNC contract.
Each connection creates a session with the company, the user, the application name, the start date, the date of last use and the expiry. Active sessions are listed on the platform under Integrations > Connected AI assistants. Access tokens are signed and are not stored.
When the assistant uses a tool, the connector reads from the platform the company data needed to answer: machines, statuses, times, stops, parts, overrides, alarms, work orders, shifts and, for users with that permission, the user list (name, email, phone, language and role). Results are sent only to the application you connected and are not stored by the connector.
When you justify a stop, the reason is saved on the platform in your name, as when you justify it on SYSCNC.
The connector does not receive your conversations: it only receives the tool requests, such as the machine and the period to look up.
To run and protect the service, we log sign-ins and new sessions (company, user, session and application) and, for each tool request, the company, the tool, the duration and the error message, if any (for example, the name of a machine that doesn't exist). The number of failed sign-in attempts for each phone number and the IP address of sign-in and token requests are used only in memory, to prevent abuse.
We use this data to provide the service your company contracted: to authenticate who signs in, apply the platform's permissions and answer the assistant's requests. Technical logs and attempt limits serve our legitimate interest in keeping the service secure and fixing problems.
We do not sell data, use it for advertising or use it to train AI models.
Connections use HTTPS and sign-in uses OAuth with PKCE. The session, the user and their permissions are checked on every request, and each user can only access their company's data.
Under the GDPR, you can ask for access to, correction, deletion, restriction or portability of your data, and object to its processing, by writing to [email protected]. Because the data belongs to your company, some requests may have to be handled with it. You can also complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).
We may update this policy when the connector changes. The date at the top shows the last update.