legal
Privacy Policy
Last updated 2026-04-28
What AI Workflow MCP collects, why, and how to ask for it back.
What we collect
Free tier (no key): we log MCP method, tool name, response status, and latency for capacity planning. We do NOT log the contents of your tool arguments by default. Paid tier (W3+): account email and basic profile from Clerk auth; usage logs tied to your API key; Stripe customer ID and subscription state.
Why we collect it
Free tier: to enforce rate limits and improve performance. Paid tier: to authenticate, meter usage, charge for paid tiers, and surface "Recent calls" in your dashboard. Analytics on the marketing site (aiworkflowmcp.com) tracks which pages convert.
Where it goes
Database is Neon Postgres (US-East). Auth (W3+) is Clerk. Billing (W3+) is Stripe. Email (W3+) is Resend. Static assets are served via Cloudflare. We do not sell or rent personal data.
How long we keep it
Anonymous tool-call logs are kept 90 days then auto-deleted. Account data (W3+) persists until you delete the account; billing records retained per Stripe's standard retention.
Your rights
Email [email protected] to request export or deletion of your data. We will respond within 30 days. EU/UK users have GDPR rights; California users have CCPA rights — both are honored.
Cookies
Free tier (no auth): no tracking cookies. Marketing site uses one preference cookie for theme (light/dark) and one for locale (Next-Locale). Paid tier (W3+) adds Clerk session cookies, only set after sign-in.