Privacy & data
What is stored
- The Trello token you approve, encrypted at rest with key material derived from the access token issued to your assistant — the service cannot read it without that token in hand.
- Your Trello member id and username, the name of the connecting app, and any board allowlist you set.
- Standard OAuth records (client registration, grant, refresh token) needed to keep the connection alive.
What is not stored
No board, list, or card contents. Every request is proxied live to Trello and not retained.
What it never does
There is no delete operation anywhere in this service. Boards, lists, and cards can only be archived (reversible).
Revoking access
- Remove the connector in your assistant (ChatGPT / Claude / etc.) — this revokes the grant here.
- In Trello, open Settings → Applications and revoke Trello MCP — this invalidates the Trello token itself.