Privacy policy

Effective [SET BEFORE LAUNCH] · Applies to Managed MCPs (managedmcps.com) · Provided by Managed MCPs

The short version

We collect what we need to run your account and the service you use. Nothing more.
We do not sell personal data. We do not use your content to train AI models.
You can see, export, correct or delete your data. Email [email protected].
AI clients see only the tools you turned on. Tools that change data stay off until you approve them.
Your API credentials are kept as references, never shown in the dashboard and never sent to an AI client.
We do not record the content of tool calls unless you ask us to.

This summary helps you read the page. The full text below is what applies.

1. Who we are

Managed MCPs is provided by Managed MCPs, [SET BEFORE LAUNCH] ([SET BEFORE LAUNCH]). For your account data, and for how we run the service, we are the controller. For content you or your organisation put into the service, we usually act as a processor on your behalf (see section 10).

2. What we collect

Account data: your name, email, hashed password and sign-in records.
Content you give us: what you put into Managed MCPs to use it. The table below lists it.
Usage and diagnostics: which features are used, errors, timings and security logs (IP address, browser type, time).
Messages: what you send us when you ask for help.

What	Why	How long
Servers, connections and tool definitions: names, API base URLs, paths and input schemas	To show AI clients the tools you chose	Until you delete them or close your account
References to your API credentials (never the credentials themselves)	So the runtime can call your API on your behalf	Until you or we unlink them
Client token ids, labels and last-used times (tokens are stored only as a hash)	To let your AI clients connect, and to revoke them	Until you revoke the token or close your account
Tool call records: tool, client, outcome, timing and sizes (not the content)	To show you what was called and keep an audit trail	12 months, then deleted or anonymised

3. How we use it, and why we are allowed to

To provide the service you asked for (contract): create your account, run what you set up, show you results.
To keep it safe and working (legitimate interests): prevent abuse, fix errors, protect accounts, keep audit records.
To talk to you (contract and legitimate interests): service and security messages. We send marketing only if you agree, and you can stop it at any time.
To meet the law (legal obligation): for example tax, accounting or lawful requests.

4. AI processing

Managed MCPs does not itself send your content to AI model providers. If you connect it to an AI client or model of your choice, that provider's own terms and privacy notice apply to what the client sends.

We do not sell personal data or share it for advertising. We share it only with:

service providers who help us run Managed MCPs (listed below), under contracts that limit what they may do;
other services you choose to connect, when you tell us to;
authorities when the law requires it, or to protect people from harm;
a buyer or successor if our business changes hands, with this policy still applying.

6. How long we keep it

Account data stays while your account is open. When you close it, we delete or anonymise personal data within 30 days, except where we must keep records for longer by law, or to resolve disputes and enforce our agreements. Backups roll off on their normal schedule. Content retention follows the table in section 2.

7. International transfers

Our main systems run in the European Union. If personal data goes to a country without an adequacy decision, we use recognised safeguards such as the EU Standard Contractual Clauses.

8. Security

We encrypt data in transit, keep credentials as references rather than plain text, separate each customer's data, limit staff access, and record important actions in an append-only audit log. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires. Report security problems to [email protected].

9. Your rights

Depending on where you live, you can ask us to: see your data; correct it; delete it; export it; restrict or object to how we use it; and withdraw consent. Email [email protected]. We reply within one month. You can also complain to your data protection authority.

10. Your content and your customers

If you use Managed MCPs for your organisation, your organisation decides what content goes in and why. We process that content on its instructions. If you are a person whose data an organisation put into Managed MCPs, please contact that organisation first. We will help them answer you.

11. Children

Managed MCPs is for people aged 18 or over who use it for work. We do not knowingly collect children's data.

12. Changes

If we change this policy in a way that matters, we tell you by email or in the dashboard before the change applies. The date at the top shows the current version.

13. Contact

Privacy questions: [email protected]. Post: Managed MCPs, [SET BEFORE LAUNCH].