AI use in OZ Storage
Version 1.0 · October 25, 2026
The Spanish version is the primary text; this translation is provided for convenience.
This page explains how an artificial intelligence assistant (Claude, ChatGPT, Gemini, Copilot, Cursor or another) accesses OZ Storage, what it can see and do, what gets recorded and how to revoke access. It complements the Privacy Policy and the Terms of use. OZ Storage is operated by REPUTATION DYNAMICS LLC for Agencia OZ.
Contents: 1. In short · 2. How an AI connects · 3. Permissions · 4. Spaces and inbox folder · 5. What an AI can never do · 6. What the AI sees · 7. Training · 8. Saving · 9. Records · 10. Limits · 11. Revoking · 12. Untrusted content · 13. Contact
1. In short
- The AI acts with your account and can never do more than you can. You choose what it can do and in which spaces.
- By default it can view and save; saving always adds, it never overwrites or deletes.
- Sensitive actions are confirmed by you, with your passkey, outside the chat. The AI cannot confirm them.
- We do not use your files to train models. We do not read your conversations with the AI.
- Whatever the AI reads from OZ Storage goes to its provider under your agreement with that provider.
- Everything is recorded per connection, and you can revoke access at any time.
2. How an AI connects
OZ Storage offers a remote MCP (Model Context Protocol) server at https://mcp.ozstorage.app/mcp. The AI connects with OAuth 2.1 (with PKCE) and you approve on a OZ Storage screen:
- The AI sends you to https://app.ozstorage.app/autorizar. There you see which app it is ("Verified app" if it is a known AI, or "Unverified app"), which address the access returns to, the permissions it requests and in which organization.
- You choose what it can do, in which spaces and whether it saves only to the inbox folder.
- You approve with your passkey. You never type a password into the AI.
The access the AI receives is bound to OZ Storage: it does not work for any other service, lasts 24 hours and renews automatically while you use it (if unused for 90 days, it expires).
3. Permissions
| Permission | What it allows |
|---|---|
View (storage:read) | See spaces, folders and files (names, sizes, versions), search, the trash and links with their visits. Does not open file contents (nor their previews) |
Save (storage:save) | Create folders and add new files. Never overwrites or deletes what already exists |
Organize (storage:organize) | Move and rename, send to the trash (restorable for 90 days), restore and revert to a previous version |
Share (storage:share) | Create, adjust, pause and cut links for sharing or for someone to upload files to you |
Read content (storage:content) | Read the text of small files and see previews (thumbnails and light videos); never the originals. It is not granted to external clients' AIs unless the organization enables it |
Administer (storage:admin) | See usage and costs, the audit log and the team; invite people; archive and wake projects. Only if you are an owner or administrator |
When connecting, the AI asks for the minimum (view and save). If it later needs more, it asks with another screen like the first one. A permission never grants more than your role: if you can only view a space, the AI cannot change anything there either.
4. Spaces and inbox folder
- You can give it all your spaces or choose some. Outside the chosen ones, it is as if nothing existed for the AI.
- With "Only in the AI Inbox folder" (checked by default for external clients), what the AI saves goes to an "Entrada IA" (AI Inbox) folder in each space, and a person later moves it to its place.
5. What an AI can never do
- Permanently delete anything or empty the trash.
- See, create or revoke keys.
- Remove the locks on backup copies or export everything.
- Change the organization's security, remove someone or grant administrator roles.
- Confirm a sensitive action on its own.
- Do anything you cannot do.
Confirmations: trashing many files, archiving or waking large projects, creating a download link or saving from an unknown site return an OZS-… code and a link. The action only happens if a person confirms it on https://app.ozstorage.app or in OZ Storage for Mac with their passkey.
6. What data the AI sees and where it goes
- With "View", the AI receives names, sizes, dates, versions and paths of what is in its scope, and link data (without visitors' emails). With "View" it gets no previews and no content.
- Only with the "Read content" permission does the AI receive the text of small files or a preview (a short link, never the original), and every read is recorded individually.
- Whatever the AI receives from OZ Storage is processed by its provider (for example, Anthropic for Claude or OpenAI for ChatGPT) under the agreement you or your company have with that provider: how long it is kept and whether it is used to improve their models is defined by that agreement, not by us. Check your AI's privacy settings.
- Whatever the AI writes as the reason for a change is stored in the audit log.
7. No training and no reading your conversations
- REPUTATION DYNAMICS LLC does not use the content of your files to train AI models, and does not sell or share it for that purpose.
- OZ Storage does not ask for or store your conversations, chat history or the AI's memory: tools only receive the data they need (for example, a folder name or the text you want to save).
- We do not send your files to any AI on our own: only the AI you connect sees them, and only within the scope you chose.
8. When an AI saves something
- It only adds: if the name already exists, it saves "name (2)". The connection that saved it is recorded.
- Large files: the AI requests a signed address and the file goes straight to storage, without passing through our servers or the conversation.
- Save from a link: our task system downloads it. Only
https, never internal addresses. If the site does not belong to a known AI and is not allowed by your organization, you are asked to confirm, with the full address shown. When finished, the address is deleted; the log keeps only the domain and a hash. - Saving text directly from the conversation is turned off for now.
9. What is recorded
| What | Where | How long |
|---|---|---|
| Each change (save, move, trash, links…) with the connection, the person, before and after, and the reason | Hash-chained audit log | Permanent |
| Each read (tool, object, result, duration), grouped per minute | AI access log | 180 days |
| Quotas used per day | Connection quotas | 90 days |
| Which tool was called, by whom, whether it succeeded and how long it took (no tokens, arguments or content) | Server technical logs | The hosting provider's retention |
You see your connections' activity in "AI connections"; administrators see the whole organization's.
10. Limits
Per connection, by default: 60 calls and 20 changes per minute, and per day 500 files, 20 GB, 50 links and 500 content reads. When exceeded, the AI receives a notice saying when it can continue. Each organization can adjust them.
11. How to revoke access
- On https://app.ozstorage.app → "Conexiones de IA" (AI connections) → Revoke. From then on the AI receives "unauthorized" and has to ask for permission again.
- Access is also cut if an administrator removes you from the organization, or if the connection is unused for 90 days.
- To grant fewer permissions, revoke and reconnect choosing less.
12. Untrusted content
File names and what other people upload (for example, a client through a link) may contain text that tries to give orders to an AI. OZ Storage always delivers it labeled as data, not instructions, strips invisible characters and trims long text; and sensitive actions still need your confirmation. Even so, review what your AI proposes to do.
13. Contact
Questions or problems with an AI connection: info@reputationdynamics.io. Security: info@reputationdynamics.io. Privacy: info@reputationdynamics.io.
Other documents: Privacy Policy · Terms of use · Subprocessors · How to connect each AI: https://app.ozstorage.app/ayuda/ia