Mason connector privacy notice

This notice describes connections you authorize from an external AI assistant to Mason. It supplements the Mason privacy policy.

Data accessed and why

The connector uses your Mason identity, selected property manager, requested tool inputs, and OAuth permissions to complete Mason tasks. Depending on the task, results can include property and unit information, resident, owner, vendor and technician contact details, maintenance records, communications, scheduling information, estimates, invoices, and account policies. Access remains limited to the connected user and PM.

Tools receive task-specific arguments, including a short explanation of the requested operation. Mason does not require the AI host’s complete conversation history. Do not submit unrelated personal data, payment-card details, government identifiers, health information, passwords, or tokens as tool arguments.

Your chosen AI host receives results

Requested data is returned to the AI host you connect, such as ChatGPT or Claude. That host processes and may retain it under your agreement, plan, workspace settings, and its own privacy policy. Mason’s agreements for model providers used inside Mason do not determine the terms of your separately connected AI account. Review your host’s retention and model training controls before connecting company or resident data.

Mason uses its existing infrastructure and service providers to execute and record operations. An authorized write can also send data to the configured property management system or intended communication recipient as part of the requested action. Mason does not sell connector data or use it for advertising.

Credentials, audit records, and retention

Mason stores hashes of OAuth credentials rather than recoverable access or refresh tokens. Authorization codes expire after 60 seconds; access tokens after one hour; refresh tokens after 30 days, renewed when refreshed. Expiry prevents use of the credential; it does not delete its database row.

Mason retains connection metadata and tool execution records, including the acting user, PM, requested operation, and its result, for account operation and audit. These records have no connector-specific automatic deletion period. Revoking a connection does not delete them or existing business records. Contact Mason about account retention, access, or deletion requests under your account agreement and the privacy policy. Your AI host separately controls retention of results it has received.

Your controls and contact

You choose whether to connect, which PM to authorize, and which requested scopes to grant. In Mason → Settings → Connected apps, you can revoke a connection to stop further access. Your host controls its tool permission preferences and confirmations; authorized writes can take effect immediately.

For questions or data requests, contact hello@thisismason.com. Connection setup and support.