Privacy policy of the Quibity AI connector
Last updated: October 26, 2026
This policy covers the Quibity MCP connector, the integration that lets an AI assistant (Claude, ChatGPT or any assistant that supports MCP connectors) work with your Quibity account on your behalf. Everything else about your account and your purchases is covered by the Quibity privacy policy, which this policy completes.
What the connector can read
Once you connect an assistant and allow it, the connector answers its requests with the following data from your account:
- Your account details: name, email address, account balance, currency and language.
- Your eSIMs: name, ICCID, plan, status, validity dates, data used and left, and the installation details (QR code and activation code) while an eSIM can still be installed.
- The public catalogue: destinations, plans and prices, with the prices of your account.
What the connector can change
- Rename your eSIMs.
- Prepare a purchase (an eSIM plan, a top up of an eSIM, a top up of your balance). By default the assistant receives a checkout link that only you can open: you pay on the Quibity checkout page, and the connector never sees your card details.
- Pay a purchase from your account balance. This takes two steps: the assistant first receives a quote with the total and the balance left after it, and the balance is charged only when the assistant calls again with the confirmation of that quote, which it must ask you for. Each quote can be used once and expires after 10 minutes.
When you connect an assistant you choose which of these permissions it gets: see your eSIMs, manage your eSIMs, purchases. A permission you did not grant is refused to that assistant.
Your AI assistant
Your conversation with the assistant is processed by the company that runs the assistant (for example Anthropic for Claude, OpenAI for ChatGPT) under its own privacy policy. Quibity receives only the requests the assistant makes to the connector (the tool it calls and its arguments, for example a plan or an eSIM identifier) and sends the answer back. Quibity does not receive or store your conversation.
The answers the connector sends to the assistant, for example your eSIM details, become part of your conversation on the assistant's side and are kept by its provider according to that provider's policy.
Connection data
An assistant connects through OAuth. Quibity stores the assistant's registration (its name, website and the address it sends you back to after login), the authorization you granted (the permissions, when you granted it and when it was last used) and the connection tokens, stored in hashed form. An access token expires after one hour and a refresh token after 90 days, both renewed while the assistant keeps using the connection. The authorization stays until you disconnect.
You can disconnect an assistant at any time from the Connected apps section of your account settings or from the assistant itself; the tokens stop working immediately. Expired tokens and registrations of assistants that never completed a connection are deleted automatically.
Request logs
Each request of a connected assistant is logged with the connection it came from, the tool called, the outcome and the time it took, together with the IP address the request came from, which is used to limit the request rate and to prevent abuse. Errors are logged with their messages. These logs are kept for a limited time for security and troubleshooting, are not used for marketing and never contain your conversation.
A purchase made through the connector is recorded in your account like any other purchase (order, balance transaction, invoice), as described in the Quibity privacy policy.
Your rights and contact
The rights described in the Quibity privacy policy (access, rectification, deletion, objection) apply to the data above as well. For any question about this policy or about a connected assistant, write to [email protected].
Changes to this policy
Quibity may update this policy when the connector changes. The date at the top says when it was last updated.