Privacy Policy

Who We Are

BlueMangoes MCP Server ("Service", "we", "our") is operated by BlueMangoes Media. Our server is accessible at ghl-mcp-server.bluemangoesmedia.com and provides a Model Context Protocol (MCP) bridge between AI assistants and the GoHighLevel CRM platform.

If you have any questions about this policy, you may contact us at: hades.webbluemangoes@gmail.com

What Data We Access

When you connect our MCP server to your GoHighLevel account, we may access the following through the GHL API on your behalf:

• Contact records (names, emails, phone numbers, tags)
• Campaign data (email campaigns, templates, statistics)
• Workflow and automation metadata
• Google Drive, Docs, and Sheets files (when Google connectors are enabled)

We access this data only at the time of a request initiated by you or your AI assistant. We do not maintain persistent copies of your CRM data beyond what is needed to fulfill each individual request.

How We Use Your Data

Data retrieved through the MCP server is used exclusively to:

• Fulfill the specific action requested by your AI assistant (e.g., creating a contact, scheduling a campaign)
• Return results back to the AI assistant in the same session
• Maintain server-side logs for debugging and security purposes

We do not use your data for advertising, profiling, training AI models, or any purpose beyond executing your explicit requests.

Google API Scopes

Our service may request access to Google APIs (Google Drive, Gmail, Google Calendar, Google Docs, and Google Sheets) to enable AI-driven automation. Our use of data obtained via Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

• We access Google data only when you initiate a request
• We do not store Google user data beyond transient request processing
• We do not share Google user data with third parties
• We do not use Google data for advertising or to train machine learning models

Data Retention

We do not persist your GoHighLevel or Google data on our servers. Each API call is stateless — data is fetched, processed to serve your request, and discarded.

Server access logs (IP address, request path, timestamp) may be retained for up to 90 days for security and debugging purposes. These logs do not contain the contents of your CRM data.

Your Rights

You may revoke our access to your GoHighLevel or Google accounts at any time through your respective account settings. Since we do not retain your data, there is no additional deletion process required on our end.

If you believe we hold any personal data about you (e.g., in server logs) and wish for it to be removed, please contact us at hades.webbluemangoes@gmail.com.

Security

All communication between your AI assistant, our MCP server, and the GHL API is encrypted in transit using TLS/HTTPS. We do not store API credentials or OAuth tokens in plain text.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.