Introduction
ContextBrew ("we," "our," or "us") is committed to protecting your privacy. This Privacy
Policy explains how we collect, use, disclose, and safeguard your information when you use
our platform for managing and deploying Model Context Protocol (MCP) servers.
Information We Collect
Personal Information
We collect the following personal information:
- Account Information: Email address and profile information from social sign-in
providers (GitHub, Google, etc.)
- Usage Data: Information about how you use our platform, including logs and
analytics data
- Technical Data: IP addresses, browser information, and device identifiers
(collected by Cloudflare)
- API Keys and Tokens: Authentication credentials for third-party services
(encrypted for security)
Automatically Collected Information
We automatically collect certain information through:
- Server logs and application analytics
- Cloudflare's standard logging and security features
- Platform usage metrics and performance data
How We Use Your Information
We use the collected information for the following purposes:
- Service Provision: To provide, operate, and maintain our platform
- Authentication: To verify your identity through social sign-in providers
- Analytics and Logging: To provide you with usage insights and application
logs
- Platform Improvement: To understand usage patterns and improve our services
- Security: To protect against fraud, abuse, and security threats
- Communication: For application-driven and necessary communications only
Data Security and Protection
We implement appropriate security measures to protect your information:
- Encryption: Sensitive data like tokens and API keys are encrypted at rest
- Hashing: API keys for endpoint access are hashed and cannot be retrieved
in plain text
- Access Controls: Strict access controls limit who can access your data
- Infrastructure Security: We use enterprise-grade cloud infrastructure with built-in security features and best practices
- Global Infrastructure: Your data may be processed and stored across multiple geographic regions to provide optimal performance, with appropriate safeguards in place
Data Retention
We retain your information:
- Account Data: Up to 1 year after account deletion to allow for account recovery
- Service Logs: As long as necessary to provide our services and comply with legal obligations
- Third-party Logs: Some data (like infrastructure logs) is retained by our service providers according to their policies and is outside our direct control
You may request permanent deletion of specific data at any time, and we'll work to delete what we can control directly.
Data Sharing and Your Rights
We do not sell, rent, or share your personal information with third parties except when required by law or with service providers necessary to operate our platform.
Your Rights: You may request access to, correction of, or deletion of your personal information by contacting us.
We will never sell your data to third parties.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please
contact us: