Privacy · Updated October 12, 2026
AI assistants and your business data
North Shore Labs LLC runs the client portal at portal.northshorelabs.dev. You can connect an AI assistant — ChatGPT, Claude, Cursor or another app that supports the Model Context Protocol — so it can help with your leads, Google reviews, website and support tickets. This page explains what that connection shares, with whom, and how you stay in control. Our general privacy policy at portal.northshorelabs.dev/privacy covers everything else.
Nothing is shared until you connect
An assistant gets access only after you sign in to the portal and approve it on our consent screen, where you choose which business it can work on and whether it may only look, or also draft and act. You can disconnect it at any time under AI assistants in the portal, and we email you whenever a new assistant is connected.
What the assistant can read
Only data from the business you approved, and only when it asks for it while helping you:
- leads and enquiries from your website (names, messages, and contact details when it opens a single lead — lists hide phone numbers and emails);
- your Google Business Profile: reviews, replies, posts, hours and listing details;
- call recordings and transcripts, if call tracking is set up;
- website traffic, uptime readings and setup status;
- support tickets between you and North Shore Labs.
It can never reach billing, your team or logins, passwords, texting consent records, or other businesses you didn't approve.
Where that data goes
What the assistant reads is sent to the company that runs it — for example OpenAI for ChatGPT, Anthropic for Claude, or Anysphere for Cursor — and is handled under that company's own terms and privacy policy, and your settings with them. North Shore Labs does not control how those companies store or use it. Reviews, lead messages and transcripts are written by members of the public; we label them so the assistant treats them as information, never as instructions.
What the assistant can do
With “View only” it can only read. With “Help out” it can save drafts, update a lead's status, and file tickets with our team. Anything the public would see — a reply to a Google review, a Google post, a change to your Google profile — is never published by the assistant itself: it sends you a link, and it goes out only when you approve it while signed in to the portal.
What we keep
- The connection. The app's name and where it signs in from, which business and level you approved, and when it was last used. Access tokens are stored only as one-way hashes; an access token expires after one hour and a connection that goes unused for 90 days stops working.
- An activity record. Each action an assistant takes (for example “listed reviews” or “asked for approval to post a reply”), with the time and the result, shown to you under Activity. We record identifiers and outcomes, not the text it read.
- Approval requests. The exact content you were asked to approve, kept with your decision so you and we can see what was published and who approved it.
We do not sell this information, use it for advertising, or use it to train AI models. It is processed by the providers that run the portal — hosting, database and email — on our instructions only.
Your choices
- Disconnect any assistant under AI assistants → Your connections; it stops working immediately and its pending approvals are cancelled.
- Business owners can pause every assistant for their business at once with the emergency stop on the same page.
- To delete what an AI company holds, use that company's own controls. To ask us about or delete what we hold, email us.
Contact
North Shore Labs LLC · hello@northshorelabs.dev