Privacy — MBC connection for ChatGPT

Updated 7 November 2026. This notice describes the optional MBC–ChatGPT connection separately from MBC’s AI app-help feature. Cenulinq is the MBC controller (KvK 42186920). Contact support@cenulinq.com. Our ordinary MBC privacy notice covers the account, budget, suppliers, international safeguards, backups and your rights.

Your separate choice

MBC does not automatically connect any account. You sign in at cenulinq.com and choose Allow or Deny for the stated scopes. Denying does not prevent ordinary MBC use. MBC is intended for adults aged 18 and over. Each connection grants access for 15 minutes; there is no refresh token or permanent background access. You can revoke it at My connections. Signing out of the original MBC session or deleting the account stops access. We use your permission to fulfil your requested optional connection; it does not authorise other marketing processing.

What reaches ChatGPT/OpenAI

At your request: month, currency, whether that month is closed, planned/recorded income and expense totals and record count. For an expense: the month, date, amount, currency, description, category and paid/planned choice you give, plus a random proposal identifier, approval URL and approval status. No full transaction list, account name, email, bank account number, password, MBC sign-in token or billing history is included in these tool responses. Use neutral descriptions; do not include sensitive details or information about others.

OpenAI receives these results in your ChatGPT conversation and processes them under the applicable OpenAI privacy policy, account settings and service terms. Your ChatGPT account settings and plan affect handling. MBC’s API app-help retention/training statement does not describe this separate ChatGPT conversation. Revoking MBC access stops new requests; it does not erase results already received by OpenAI or earlier chats. Manage/delete those through ChatGPT and OpenAI’s privacy routes. Data may be processed outside your country; see both notices.

Data MBC retains for the connection

Existing Netlify hosts the secure endpoint; existing Supabase stores protected account/session/client links, permission scopes, token hashes, expiry/revocation, request state and expense proposals. The MBC sign-in credential stays with MBC; ChatGPT gets a separate random scoped token, whose hash alone is stored. We do not add analytics to the confirmation page or put budget contents in marketing documents.

Authorization requests expire after five minutes, connection tokens after 15 minutes and proposals after ten minutes. Existing daily cleanup removes these artifacts after they have been expired for more than one day; normal deletion is therefore approximately 24–48 hours after expiry. Public client identifiers and approved callback addresses are non-secret integration configuration, kept stable while the connection service operates so a returning customer can reconnect. They contain no customer account data; registration capacity is bounded. Private account/day counters for abuse and cost control are kept for today and seven preceding UTC dates (up to eight days). This necessary security processing uses our legitimate interest in protecting the service. Logs and backups follow the ordinary notice; faults may delay cleanup.

A minimal, private booking marker (random request/proposal identifiers, a hash of the exact proposal and the resulting record identifier, without its amount or description) remains while your account exists to prevent a delayed retry from creating a duplicate, including after proposal cleanup. Account deletion removes this marker. A proposal is written to your ordinary budget only after your separate click confirming its exact values. Recorded budget entries then follow the ordinary budget retention/deletion rules, not the short proposal cleanup. Rejecting a proposal does not create a budget entry.

Help and rights

You can revoke future connection access without deleting MBC. For access, deletion or other privacy requests contact support@cenulinq.com; the deadlines and complaint routes in our ordinary notice apply. No automatic bank payments, creditworthiness decisions or financial-product decisions are made by this connection.