Modified August 10, 2026
This Privacy Notice Addendum applies to the Bluehost Claude Connector (also called MCP for Bluehost, the “Connector”), a service operated by Newfold Digital, Inc. and its subsidiary Bluehost Inc. (“we,” “us,” “our,” or “Newfold”). The Connector lets you link your own Claude account (provided by Anthropic, PBC) to your Bluehost account so that Claude can help you create and manage your hosting services at your direction.
This Addendum supplements the Newfold Privacy Notice, which continues to apply, along with the jurisdiction specific addenda available at our Privacy Center. Where this Addendum describes the Connector specifically, it controls for Connector processing.
The Connector is optional. Nothing connects unless you add the Connector in Claude and approve access on a Bluehost authorization screen, where you sign in and choose the permissions (scopes) you grant, such as read only access or account management. After you connect, Claude requests your permission before performing actions, and data flows only when your Claude session asks the Connector to do something. Anthropic has no standing access to Bluehost systems, and we do not see your Claude conversations.
The Connector runs in your Claude client on your device; the MCP server and API it talks to run on our infrastructure. We receive only the requests your Claude session sends to our servers. We have no access to logs, files, or data stored on your device.
Authorization and consent records: the permissions you grant, when you granted or revoked them, and the version of the notice you saw. We keep these to prove and honor your choices.
Server side activity logs: records of the requests our MCP and API servers receive when Claude acts on your behalf, including date, time, IP address, the operation requested, and the result. These logs record the operation, not your conversation, and we do not collect any logs from your device.
Account data you ask Claude to work with: when you ask Claude to do something, the Connector reads or updates the relevant parts of your existing Bluehost account data, such as your account details, hosting plan and service configuration, domain and DNS settings, and service status.
Technical data: IP address, timestamps, and error information needed to operate and secure the service.
To perform the operations you request through Claude and operate the Connector.
To secure the service, including fraud and abuse detection, audit, and troubleshooting.
To provide customer support relating to the Connector.
To comply with legal obligations.
We do not use Connector data to train AI models, we do not sell it or share it for cross context behavioral advertising, and we do not use it for marketing unless you separately opt in.
When Claude retrieves information from your Bluehost account, that information becomes part of your conversation in Claude. Anthropic processes your Claude conversations under its own privacy policy and terms, not ours, and your Anthropic settings (including any model training preferences) control that data. To exercise privacy rights over data held in your Claude account, contact Anthropic. You can review Anthropic's privacy policy at https://www.anthropic.com/privacy.
We disclose Connector data only: within the Newfold corporate family to operate the service; to service providers who host or support our infrastructure under contractual data protection obligations; as part of a corporate reorganization; or as required by legal process, as described in the Newfold Privacy Notice. Disclosure of your account data to Anthropic happens only at your direction, when your Claude session invokes the Connector.
Choose your permissions: grant only the scopes you want on the authorization screen.
Approve actions: Claude asks before taking actions, with extra confirmation for changes that are hard to reverse.
Revoke at any time: disconnect the Connector in your Claude settings, or revoke access from the connected applications panel in your Bluehost account manager. Revocation promptly invalidates the Connector's access tokens.
Connector data is stored on our infrastructure in the United States and other locations where we operate, as described in the International Transfer of Personal Data section of the Newfold Privacy Notice. Access tokens expire automatically and are invalidated earlier if you revoke access. Server side activity logs are retained for security and audit purposes, and consent records are retained for as long as needed to demonstrate compliance, after which they are deleted.
The Connector uses OAuth 2.0 over encrypted connections with short lived access tokens, enforces your granted scopes on our servers, and requires additional confirmation for destructive operations. We maintain administrative, technical, and physical safeguards consistent with the Newfold Privacy Notice and our information security program.
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. These rights apply to Connector data we hold. To exercise them, submit a request through our Privacy Center at newfold.com/privacy-center/requests.
European Economic Area, United Kingdom, and Switzerland. Where the GDPR, the UK GDPR, or Swiss data protection law applies, our legal basis for processing Connector data is the performance of our contract with you: operating the Connector you have enabled, including disclosing your account data to your AI provider at your direction. Any optional analytics or marketing uses of Connector data are based on your consent, requested separately and never bundled into your authorization. When your Claude session requests it, your account data is disclosed to Anthropic, PBC, located in the United States, at your direction; Anthropic's processing of that data, including any onward transfers, is governed by its own privacy policy. Transfers of Connector data within our own infrastructure are protected by the safeguards described in the International Data Transfer sections of the EU/Swiss and UK addenda, including Standard Contractual Clauses where required.
California. We do not sell or share personal information collected through the Connector, and we do not use or disclose it for cross context behavioral advertising. The Connector never discloses your account login credentials, which are sensitive personal information; secure authentication tokens are used instead. The California Addendum describes your California privacy rights.
The Connector is not directed to children. You must be at least 18 years old to use Bluehost services and to use Claude.
We reserve the right to modify this Privacy Notice at any time, so please review it frequently. If we decide to change this Privacy Notice in any material way, we will notify you here, by email, or by means of a notice on the Bluehost website prior to the change becoming effective. In all cases, your continued use of the Connector constitutes acceptance of any such changes.
If you have questions about this Privacy Notice, the Connector, or our data handling practices contact our Data Protection Officer at [email protected] or by mail at:
Newfold Digital, Inc.,
5335 Gate Pkwy, Jacksonville,
FL 32256, U.S.A.,
Attn: Data Protection Officer.
