> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zas.red/llms.txt
> Use this file to discover all available pages before exploring further.

# AI connections: privacy and permissions

> Understand hosted access, content sharing, expiry, and disconnection before you connect.

This page explains the ChatGPT and Claude hosted connections. It supplements the [Zas privacy policy](https://zas.red/privacy) and [terms](/en/ai/terms).

## What you authorize

You select channels and grant **Read**, **Send**, or both. Names and IDs of approved channels and their current permissions are available to the connected app. Read allows the app to retrieve permitted items; Send allows it to create items. Original-file sends currently require both.

Your Zas account must be registered. Anonymous sessions cannot authorize these connections. Organization channels also need [admin approval](/en/ai/enterprise).

## How hosted access works

| Stage | What happens |
| - | - |
| Sign-in and approval | Zas verifies your identity and records the connection, selected channels, grants, and expiry. |
| Connection keys | A private Zas custody service holds encrypted keys for the approved connection. They allow work while your browser is closed. |
| Reading | Zas checks current permission, decrypts authorized content, and returns it to the AI provider. |
| Sending | The AI app supplies content. Zas processes the plaintext, encrypts it, and saves it in the selected channel. |
| Stored items | Content remains encrypted in Zas storage. Account, channel, size, expiry, and operational metadata are still processed. |

Hosted AI access involves plaintext processing by Zas and the AI provider. It is **not end-to-end encryption between your devices**. The provider handles received content under its own terms and your account or workspace settings.

The connector gives the AI app access to selected Zas data. It does not require Zas to ingest your entire chat history; prompts and content the app sends in tool calls are processed to perform those operations.

## Duration and renewal

The approval screen shows the connection's duration, up to **30 days**. When you approve automatic renewal, the app can renew access within that period. Expiry or disconnection stops further authorized use; a new approval is needed to connect again.

## Disconnect and delete

Open [AI connections](https://zas.red/ai/connect), choose the app, and confirm **Disconnect**. This stops access, revokes the connection's dedicated agent, and removes its live hosted keys. If cleanup is incomplete, the page asks you to finish disconnecting.

Disconnecting does not delete saved Zas items, your AI conversation, or content already received by the AI provider. Manage those separately. Zas items follow their own expiration and deletion rules; see [account deletion](/en/account/delete) for deleting your Zas account.

Operational and security records may remain under the general privacy policy. Removing live keys is not a claim that every infrastructure log or backup disappears immediately.

## An alternative for ChatGPT

The setup page also offers a browser-approval connection. Its connection keys stay in the browser and each transfer needs confirmation there. It cannot independently read channels while your browser is closed. Choose the mode that fits your use.

Questions about data handling: [support@zas.red](mailto:support@zas.red).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.