Privacy Policy

Last updated: June 24, 2026

Some entity fields (legal name, address, jurisdiction) are still being finalized and appear as [PLACEHOLDER]. We can share a signed Data Processing Agreement (DPA) and a Master Services Agreement (MSA) on request.

MCP Tool Development ([LLC_PENDENTE] / [CNPJ_PENDENTE], operating from [ADDRESS_PENDENTE]) builds custom MCP servers that connect AI clients to third-party tools on behalf of paying customers. This policy explains what data we touch, where it goes, and what rights you have under GDPR, CCPA, and LGPD.

1. Data we collect from the website

Contact form: name, email, the tool you mentioned, and the message you wrote. We only ask what we need to scope your project.

Analytics: aggregate page views via a privacy-friendly analytics tool that does not use cookies and does not track individuals across sites.

Server logs: standard request logs (IP, user agent, timestamp) retained for up to 30 days for security and abuse prevention.

2. Data we touch during an engagement

When we build an MCP server for you, it reads from and writes to the third-party systems you explicitly authorize (e.g. Slack, monday.com, Gmail). We do not export, copy, or retain that data on our infrastructure unless we have written agreement to do so. Servers run in your VPC or in a sandbox dedicated to your engagement.

3. Sub-processors

Vercel (hosting), Resend (transactional email), Plausible Analytics (privacy-friendly analytics). A full list with their respective jurisdictions and DPAs is available in the DPA we can send on request.

4. Your rights

Under GDPR, CCPA, and LGPD you can request access, correction, deletion, or export of any personal data we hold about you. Email [CONTACT_EMAIL_PENDENTE] and we will respond within 15 business days.

5. International transfers

If your data leaves your country of residence, we rely on Standard Contractual Clauses or equivalent safeguards, applied through our sub-processors' published transfer mechanisms.

6. Changes

We will update this page when our practices change. Material changes are flagged on the homepage for at least 30 days.

7. Contact

Privacy questions, DPA requests, or rights requests: [CONTACT_EMAIL_PENDENTE]. Legal entity: [LLC_PENDENTE] / [CNPJ_PENDENTE], [ADDRESS_PENDENTE].