Privacy Policy

1. Introduction

Welcome to agnexus ("Company", "we", "our", or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform for deploying and managing Model Context Protocol (MCP) servers.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

We collect several types of information to provide and improve our service:

2.1 Account Information

• Email Address: Required for account creation and authentication
• Authentication Data: Passwords (hashed and encrypted), authentication tokens
• Profile Information: Any profile information you choose to provide

2.2 MCP Server Data

• MCP Server Code: The code and files you upload or deploy through our platform
• Configuration Data: Environment variables, deployment settings, and configuration files
• Deployment Information: Deployment history, status, and metadata

2.3 GitHub Integration Data

• Repository Information: If you connect a GitHub account, we may access repository names, branches, and commit information
• GitHub Tokens: Encrypted access tokens for GitHub API access (stored securely)

2.4 Usage Analytics

• Request Data: HTTP request methods, paths, response status codes, and response times
• Error Information: Error messages and stack traces for debugging purposes
• IP Addresses: Collected for security, abuse prevention, and analytics
• User Agents: Browser and client information for compatibility and analytics
• Usage Patterns: Frequency of use, feature usage, and performance metrics

2.5 Payment and Subscription Data

• Subscription Information: Plan type, subscription status, billing period
• Payment Data: Processed securely by Stripe - we do not store payment card information
• Billing History: Invoice records and payment history

2.6 Marketplace Interactions

• Favorites: MCP templates you mark as favorites
• Search Queries: Marketplace search history and filters used
• Deployment Activity: MCP templates you deploy from the marketplace

2.7 Automatically Collected Data

• Browser Information: Browser type, version, and settings
• Device Information: Device type, operating system, and screen resolution
• Log Data: Access logs, error logs, and system logs
• Cookies and Tracking Technologies: As described in Section 8

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To deploy, host, and manage your MCP servers
• Account Management: To create and manage your account, authenticate you, and provide customer support
• Payment Processing: To process subscription payments and manage billing through Stripe
• Analytics and Monitoring: To provide usage analytics, monitor performance, and track errors
• Service Improvement: To analyze usage patterns and improve our platform
• Security: To detect and prevent fraud, abuse, and security threats
• Communication: To send you service-related notifications, updates, and support responses
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Marketplace Features: To provide marketplace functionality, favorites, and recommendations

4. Data Storage and Security

Storage Locations: Your data is stored and processed using the following services:

• Supabase: Database, authentication, and file storage
• Google Cloud Storage: Code archives and deployment artifacts
• Google Cloud Run: Runtime environment for deployed MCP servers

Security Measures: We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication and access controls
• Regular security audits and monitoring
• Access logging and audit trails

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

5. Third-Party Services

We use the following third-party services that may process your data:

5.1 Supabase

We use Supabase for database, authentication, and file storage. Supabase processes your data according to their privacy policy. View Supabase Privacy Policy

5.2 Stripe

We use Stripe for payment processing. Stripe is PCI DSS compliant and handles all payment card information. We do not store payment card details. View Stripe Privacy Policy

5.3 Google Cloud Platform

We use Google Cloud Platform for infrastructure, storage, and deployment. Your code and data may be stored and processed on Google Cloud servers. View Google Cloud Privacy Policy

5.4 GitHub

If you connect a GitHub account, GitHub processes your repository data according to their privacy policy. View GitHub Privacy Policy

We do not sell your personal information to third parties. We only share your data with these service providers as necessary to provide our service, and they are contractually obligated to protect your data.

6. Data Retention

We retain your data for as long as necessary to provide our service and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for a reasonable period after account deletion for legal and business purposes
• MCP Server Code: Retained while your account is active. Deleted upon account termination unless required by law
• Usage Logs: Retained for up to 90 days for analytics and debugging purposes
• Payment Records: Retained as required by law (typically 7 years for tax and accounting purposes)

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law or for legitimate business purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: You can request a copy of your personal data we hold
• Right to Correction: You can request correction of inaccurate or incomplete data
• Right to Deletion: You can request deletion of your personal data (subject to legal requirements)
• Right to Portability: You can request export of your data in a machine-readable format
• Right to Object: You can object to certain processing of your data
• Right to Restrict Processing: You can request restriction of processing in certain circumstances
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw consent at any time
• Right to Export MCP Code: You can download and export your MCP server code at any time
• Right to Delete Deployments: You can delete your MCP server deployments at any time
• Right to Access Analytics: You can access usage analytics for your deployments through the platform
• Right to Delete Account: You can request account deletion by emailing pedro.fonseca@agnexus.ai

To exercise any of these rights, please contact us at pedro.fonseca@agnexus.ai. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform:

• Authentication Cookies: Required for maintaining your login session
• Preference Cookies: Store your preferences and settings
• Analytics Cookies: Help us understand how you use our platform
• Security Cookies: Used for security and fraud prevention

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our platform.

9. Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at pedro.fonseca@agnexus.ai.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete such information promptly.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

We ensure that appropriate safeguards are in place to protect your data when transferred internationally, including:

• Standard contractual clauses approved by data protection authorities
• Compliance with applicable data protection laws
• Security measures to protect data during transfer

11. GDPR and CCPA Compliance

GDPR (European Union): If you are located in the European Union, your data is protected under the General Data Protection Regulation (GDPR). We process your data with your consent and provide you with the rights described in Section 7.

CCPA (California): If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information is collected
• The right to delete personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

We only process your data with your explicit consent and provide you with the rights mentioned above. To exercise your rights, contact us at pedro.fonseca@agnexus.ai.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational, legal, or regulatory reasons. We will notify you of material changes by:

• Posting the updated Privacy Policy on our website with a new "Last updated" date
• Sending an email notification to your registered email address (for material changes)

Your continued use of our service after such modifications constitutes your acceptance of the updated Privacy Policy. If you do not agree to the modified policy, you must stop using the service and may delete your account.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or need to request account deletion, please contact us at:

Email: pedro.fonseca@agnexus.ai
Website: https://agnexus.ai

Account Deletion: To delete your account and all associated data, please email us at pedro.fonseca@agnexus.ai with your account email address and a request for account deletion.