AI assistants privacy notice
Last updated: 13 November 2026
This notice explains which data the TopBroker connector for AI assistants (the MCP server at https://api.topbroker.lt/mcp) handles when ChatGPT, Claude or another AI assistant connects to a TopBroker account. General principles are in our Privacy policy (Lithuanian).
1. Who handles the data
TopBroker is provided by WISE MONKS, UAB (company code 301681679, Krokuvos g. 11-35, Vilnius, Lithuania).
The customer company (a TopBroker client) is the controller of the data in its CRM (listings, contacts, tasks). Wise Monks processes that data as a processor under its agreement with the customer.
An AI provider (for example OpenAI or Anthropic) receives data only when a user connects their own assistant, and handles it under that user's or company's agreement with the provider.
2. What a connected assistant can see
The assistant receives only what its request returns, and only within the user's TopBroker role and the permissions chosen on the consent screen:
- listings and their export status on property portals;
- contacts (names, phones, emails, notes), only with the "View contacts" permission;
- tasks, pipeline cards and proposals, when those permissions are granted.
Without the contacts permission, email addresses and phone numbers are also hidden in other results, such as task text.
3. What TopBroker stores
- The connection: the user, the assistant's name and address, the granted permissions, when it was connected and last used.
- Access tokens: only their hashes. An access token is valid for 1 hour. After 30 days without use the user must sign in again. Expired or revoked tokens are deleted after 30 days.
- The action log: each action's time, name, result, the ids of the records involved and the IP address. Free text (search phrases, task text, comments to customers) is not logged, only the fact that it was present. The log is deleted automatically after 90 days.
TopBroker does not receive or store the conversation with the AI or the AI's answers.
4. Who data is shared with
- The AI provider the user connected, in the user's own account. Whether the provider keeps the data or uses it for training depends on the user's plan and the provider's terms.
- Customers by email, when the user lets the assistant send proposals and confirms the recipients. The email is sent from TopBroker exactly as when sent by hand.
- Property portals, when the user lets the assistant turn on a listing's export. The listing is published on the chosen portals exactly as when export is turned on by hand.
Wise Monks does not sell data and does not pass it to AI providers on its own initiative.
5. How to control it
- The account administrator turns the feature on and off under Settings → AI assistants. Turning it off disconnects every assistant at once.
- Users see their assistants under Profile → AI assistants: they can narrow permissions, disconnect an assistant and review all of its actions.
- Administrators see every connection and action in the account.
6. Security
The connector uses OAuth 2.1 with PKCE over HTTPS only. Every action runs with the same role permissions as in TopBroker, and request rates are limited. Access tokens are stored only as hashes.
7. Your rights and contacts
TopBroker users can write to privacy@topbroker.lt about their data. If you are a customer of a TopBroker client (a real estate agency or developer), contact that company to exercise your rights, as it is the controller of your data.
Connector support: info@topbroker.lt. We may update this notice; the latest version is always published on this page.