Security and the admin approval kit
Aggregates in. Your code and your users stay with you.
Gamify It’s servers never receive source code, raw events or end-user personal data; your AI host processes them under your agreement with it.
Data flow
Your assistant is the eyes. We only see the summary.
Your AI assistant reads what you share on your side and sends a short summary with numbers. The engine places it on the map, applies the rules, does the math and remembers what you save.
- 01Your productCode, analytics, databases and screenshots stay where they are.
- 02Your AI assistantClaude, ChatGPT, Claude Code or Codex reads what you share, under your agreement with its provider.
- 03Gamify ItReceives summaries and aggregates only, places them on the Stage Map, does the math and remembers what you save.
What Gamify It receives
- Short evidence summaries your assistant writes (300 characters at most each), with an evidence level and a date.
- Aggregate numbers: counts, rates and cohort tables, never rows about individual users.
- Product facts you confirm: the type of product, how it earns, and how much traffic it gets.
- What you choose to save: Stage Cards, experiment plans, readouts and your learning log.
- Your account: name, email and which assistants you connected.
What it never receives
- Source code or repository contents. In Claude Code and Codex your assistant reads them locally.
- Raw analytics events, database rows or exports. Your assistant summarizes them on your side.
- Personal data about your users: no names, emails, IDs or IP addresses. Inputs that look like it are rejected.
- Secrets, tokens or credentials of your own systems.
Scopes
What a connection can do.
Each person signs in with their own account and approves these on a consent screen, every time an app connects. Every tool also needs an active subscription, checked on every call.
- kb:read
- Read the Gamify It knowledge baseLook up techniques, playbooks and the behavioral science behind them.
- product:read
- See your productsRead the products, evidence, diagnoses and experiments saved in your workspace.
- product:write
- Save work to your productsCreate and update products, evidence, experiment plans and your learning log.
- measure:write
- Record resultsAdd metric readings and experiment results to your products.
- openid
- Confirm which account you useKnow which Gamify It account is connected.
- profile
- Your name and pictureShow who is connected.
- Your email addressIdentify your account. It is never shared with other users.
- offline_access
- Stay connectedKeep working without signing in every hour. Disconnect anytime from your account.
Retention
How long each thing is kept.
| Data | Kept |
|---|---|
| Products, evidence summaries, Stage Cards, experiments, learning log | Until you delete them or your account. Kept if your plan lapses. |
| Unsaved results (the save block) | Held by your assistant, not by us. It expires after 14 days. |
| Access credentials (token fingerprints) | Until they expire, plus one day. |
| Write receipts (to avoid saving twice) | 30 days. |
| Usage records (which tool, when, errors; no content) | 400 days. |
| Email send log (brief, reminders, receipts) | 13 months. |
| Ad click attribution (for purchases from ads) | 7 days. |
| Server logs and error reports, scrubbed of content | About 30 days. |
| Billing records | As long as tax law requires (in Mexico, generally five years). |
| Backups | Deleted data leaves backups as they rotate, within about 30 days. |
Deletion and export
Yours to take or erase.
- Export everything as JSON from your account at any time (Account, then Data).
- Disconnect any assistant from your account: its access stops at once and its refresh tokens are deleted.
- Delete your account yourself: your subscription is canceled, and your products, history, email preferences and sign-in records are removed from live systems right away.
Controls
How the system is built to fail closed.
Tenant isolation in the database
Every query is bound to the credential that made it, by row-level security that fails closed.
A small, separate MCP service
The endpoint your assistant calls holds no billing, email or database-administrator credentials.
Consent on every connect
Sign-in uses OAuth 2.1 with PKCE, and every connection shows a consent screen naming the app before any access.
Encryption and least privilege
Encrypted in transit and at rest; logs record which tool ran and when, never what you sent.
No model on our side
The engine is deterministic. Nothing you send trains a model, ours or anyone’s.
Subprocessors
Who processes data for us.
Each vendor gets only what its job needs. Meta receives ad attribution only, never product data, and nothing at all for visitors who send Global Privacy Control.
Need a DPA?
- VercelHosting for the website and the MCP endpointUnited States
- SupabaseDatabase (accounts, products and saved history), encrypted at restUnited States
- StripePayments, invoices and sales tax; we never see card numbersUnited States and Mexico
- ResendEmail: sign-in, receipts, the optional Monday brief and readout remindersUnited States
- SentryError monitoring, with customer content scrubbedUnited States
- MetaAd attribution only: website visits from ads and purchases, never product dataUnited States
For your workspace admin
Send this to the person who adds connectors.
On Claude Team and Enterprise an Owner adds connectors; in ChatGPT business workspaces an admin allows custom apps. Copy the note, paste it into email or chat, and you're done.
Connect instructions for every assistantHi! Could you add Gamify It as a connector for our workspace? What it is: Gamify It is a growth-strategy tool that runs inside our AI assistant. It finds the stage where our product is stuck and suggests the next experiment. Connector URL: https://mcp.gamifyit.co/mcp How data is handled: - Its servers never receive source code, raw events or personal data about our users. The assistant summarizes on our side and sends aggregates only. - Each person signs in with their own account (OAuth with consent). Access can be revoked from their account at any time. - Scopes: read the knowledge base, read and save our product notes, and record experiment results. - Subprocessors: Vercel, Supabase, Stripe, Resend, Sentry, and Meta for ad attribution only. - Data is exportable and deletable by each user; deleted data leaves backups within about 30 days. Security details: https://gamifyit.co/security Privacy policy: https://gamifyit.co/legal/privacy To add it in Claude: Organization settings, then Connectors, then Add custom connector, and paste the URL. In ChatGPT business workspaces: allow custom apps (developer mode) in workspace settings, then add the URL as an app. Thank you!