← DashboardCDXGeoStream PRIVACY POLICY
Last updated: October 21, 2026.
This Privacy Policy explains how CDX Technologies, a division of Hughes Financial Services, Inc. ("HFS"), handles information in connection with the CDXGeoStream platform — the CDXGeoStream API, the web application, the spreadsheet add-ins, and the MCP connector (the "Service"). HFS respects the privacy of its subscribers and does not sell personal information. HFS may update this Policy on notice posted in-product or on the CDXGeoStream website.
1. Information We Collect
Account information: your account is created and managed through the CDXGeoStream customer portal, which holds your registration details (such as name, email, and organization) and payment information. The Service backend stores your account identifier, plan, Credit balance, and the API Keys issued to your account.
Usage data: for each metered operation the Service records a usage record — the operation, billing feature, Credits charged, third-party provider calls made, status, and timestamp — keyed to the API Key used. This is used for metering, billing, security, and reliability.
Request input: the addresses, ZIP/postal codes, coordinates, and similar inputs you submit are processed to perform the requested operation and may be cached transiently to improve performance and reduce cost.
Technical data: limited technical information (such as IP address and request metadata) may be processed to operate the Service securely and prevent abuse.
2. How We Use Information
To provide, meter, and bill the Service; to issue and validate API Keys; to maintain security and prevent abuse; to operate, diagnose, and improve reliability; and to provide support and required notices.
3. Payment Processing
Payments and subscription billing are handled through the CDXGeoStream customer portal and its payment processor. HFS does not store full payment-card numbers on the Service backend.
4. Third Parties
The Service uses third-party providers to fulfill certain operations, including geocoding/routing providers (e.g. HERE and other mapping providers) and USPS-derived and public reference data. Requests necessary to perform an operation may be sent to these providers. HFS does not sell or rent your personal information, and discloses information only as needed to provide the Service or as required by law or valid legal process.
5. AI Assistants and the MCP Connector
You can connect Claude, or another AI assistant that supports the Model Context Protocol (MCP), to the Service through the CDXGeoStream MCP connector at https://mcp.cdxgeostream.com/mcp. To connect, you enter your API Key on the CDXGeoStream sign-in page, and the assistant receives an access token tied to that API Key. Some tools, such as Claude Code, send your API Key with each request instead of using the sign-in page.
HFS stores OAuth access and refresh tokens only in hashed form. An access token expires after one hour; the assistant renews it automatically, and the connection lapses after 60 days without use. Revoking your API Key through your account disconnects every assistant using it immediately.
When the assistant uses a tool, HFS receives the tool's name and the inputs the assistant sends for it, such as addresses, ZIP/postal codes, or coordinates, along with the technical data described in section 1. HFS does not receive, request, or store your conversation with the assistant, the assistant's memory or chat history, or your files.
These requests are metered, processed, shared with third-party providers, and retained like any other request to the Service, as described in sections 1, 4, and 6.
The AI assistant's own handling of your conversation is governed by its provider's terms and privacy policy (for Claude, Anthropic's).
6. Data Retention
Account and usage records are retained while your account is active and as needed for billing, audit, and legal compliance. Cached request inputs/results are retained only transiently per their cache lifetime. Server logs, which can include request inputs, are kept only as long as needed for security and diagnostics and are deleted on a rolling basis. HFS has no obligation to retain your data after account termination.
7. Google Sheets Add-on and Google User Data
The CDXGeoStream add-on for Google Sheets itself asks Google for three permissions: to see and change only the spreadsheet it is open in, to connect to an external service, which it uses only to reach the CDXGeoStream API, and to show its sidebar and menu. It cannot open any other file in your Google account. When you install it from the Google Workspace Marketplace, Google's install screen also asks you to allow access to your email address and basic profile, which Google includes by default; the add-on never reads, stores or sends them.
What the add-on accesses: the cells you select, the cells a CDXGeoStream formula refers to, and the cells where it is about to write results (so it does not overwrite your data) — such as addresses, ZIP/postal codes, coordinates, and city or state names. After you save an API Key, it also reads the formulas and displayed values in every sheet of the open spreadsheet to find its own formulas that show an error, and re-enters them. That check runs inside Google; only the inputs of the formulas it re-runs are sent to the Service.
How it is used: those values are sent to the Service only to perform the operation you ask for, and the results are written back into your spreadsheet. HFS uses data from your spreadsheet only to provide the add-on's features to you and to keep the Service secure and working. It does not use it for advertising, does not sell it, and does not use it to train or build any other product. In a shared spreadsheet, CDXGeoStream formulas use the API Key saved by the spreadsheet's owner, so their inputs are sent under, and charged to, the owner's account; the sidebar's tools use your own API Key.
How it is stored: the Service does not save the values from your spreadsheet in its database; the usage records described in section 1 do not include them. A limited number of recently rendered map images are kept in server memory so a map that is shown again is not fetched again, and are discarded when the server restarts. The Service's server logs record the requests it receives — for a map, the coordinates being mapped — and may record an input when an operation fails; they are used only for security and diagnostics and are kept as described in section 6. Google also records the add-on's error messages in CDXGeoStream's Google Cloud project, where they are used only for diagnostics. Your API Key and add-on settings are kept in your own Google account's storage for the add-on, which is private to you; Clear key in the add-on's Settings deletes the stored API Key.
How it is shared: values are sent to the third-party providers described in section 4 only when an operation needs them — for example, an address you ask to geocode. HFS does not otherwise transfer data from your spreadsheet to anyone, except as required by law or valid legal process.
No AI or machine learning: neither the add-on nor the Service uses artificial-intelligence or machine-learning models to process data from your spreadsheet, and neither sends it to any AI service. HFS does not use data from your spreadsheet — raw, aggregated, anonymized or derived — to create, train or improve any AI or machine-learning model. The AI assistants described in section 5 connect to the Service separately, and data from your spreadsheet is never sent to them.
Limited Use: CDXGeoStream's use and transfer of raw or derived user data received from Google Workspace APIs and other Google APIs will adhere to the Google Workspace API User Data and Developer Policy (https://developers.google.com/workspace/workspace-api-user-data-developer-policy) and the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
You can remove the add-on at any time from Extensions ▸ Add-ons ▸ Manage add-ons in Google Sheets, and revoke its access from your Google account's security settings. Removing it does not close your CDXGeoStream account; see section 10.
8. Security
HFS uses reasonable measures to protect information, including encryption in transit (TLS) and access controls. You are responsible for safeguarding your API Keys and account credentials. No method of transmission or storage is 100% secure, and HFS cannot guarantee absolute security.
9. Cookies and Local Storage
The web application uses cookies and/or browser local storage as needed to authenticate sessions and remember your settings (such as your API Key in the add-in task pane). It does not store payment-card numbers in cookies.
10. Your Choices
You can view your account and usage and revoke or re-issue API Keys through your account. For access, correction, or deletion requests regarding your information, contact support.
11. Children
The Service is not directed to individuals under 18, and HFS does not knowingly collect information from them.
12. Changes to this Policy
HFS may update this Policy and will post updates in-product or on the CDXGeoStream website. Continued use after an update takes effect constitutes acceptance.
13. Contact
Questions about this Policy: https://cdxgeostream.com/account/support or support@cdxtech.com
Hughes Financial Services, Inc., 2 West Hanover Ave., Suite 212, Randolph, NJ 07869-4222.