Connected Apps and your data

You choose which Frontpage sites an app may access and whether it may read or edit site source. Site source can include unpublished work. People and email require separate consent: read access shares contacts, groups, stages, notes, history and email content; manage access can also change these records, send email and activate automation on your instruction, subject to your role and plan. Existing source-only connections do not gain this access. Publishing, billing, inbox, orders, members and vendor credentials remain excluded. Each app also has its own privacy terms.

When a Codex or ChatGPT connection requests identity access, its consent page also explains that it will receive your Frontpage email address and its actual verification status. OpenAI can use these details to identify the connection and apply workspace account restrictions. Identity access does not grant site editing or People and email access. Existing Claude connections do not gain this identity permission.

Frontpage stores the app identity, account or selected-site coverage, permissions, connection dates and use/revocation times. It stores protected authorization records so the connection can survive deployments and be revoked. The connection expires after at most 90 days; refresh access expires after 30 days without use. Pending consent expires after 15 minutes and authorization codes expire after 5 minutes. Expired credential records enter scheduled cleanup. Edit retry records store request hashes and revision/status metadata, without file contents, and enter scheduled cleanup 120 days after the request. Connection summaries enter cleanup 30 days after their absolute expiry; security audit history follows the general privacy policy.

Connection security logs record actions, identifiers, response status and timing. They do not include site source, prompts, sign-in codes, access tokens, refresh tokens or PKCE verifiers. The consent and Connected Apps pages do not run advertising pixels.

Disconnect an app from Connected Apps to block subsequent requests and refreshes. Disconnecting does not remove data the app already received. Signing out of Frontpage is a separate action. Connection management remains available after plan changes or losing site access.

This page explains the connection feature and supplements Frontpage’s Privacy Policy. For support, contact support@frontpage.host.