Privacy Policy

1. Information We Collect

Personal Information

We may collect the following personal information when you use our Service:

• Account Information: Email address, username, password (encrypted)
• Contact Information: Name, company name (if provided)
• Usage Information: API usage statistics, feature usage patterns
• Payment Information: Billing information processed through secure third-party providers

Technical Information

We automatically collect certain technical information when you use our Service:

• Log Data: IP address, browser type, operating system, access times
• Device Information: Device identifiers, hardware specifications
• Performance Data: Error logs, system performance metrics

Data You Upload

When you use our statistical analysis tools, you may upload datasets for processing. This data is processed in secure, isolated environments and is not permanently stored unless explicitly requested.

AI and Machine Learning Processing

Critical Information About AI Data Processing:

• Your data may be analyzed by AI systems that can misinterpret or misrepresent your information
• AI-generated insights about your data may be inaccurate, misleading, or completely false
• Statistical interpretations produced by AI may contain mathematical or logical errors
• AI may create fictional patterns or relationships that don't exist in your actual data
• Business intelligence generated from your data may lead to incorrect strategic decisions

Your Responsibility: You must independently verify all AI-generated analysis, insights, or interpretations of your data before making any decisions based on such information.

2. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To provide and maintain our statistical analysis services
• Account Management: To create and manage your account, process payments
• Communication: To send service updates, support responses, and important notices
• Improvement: To analyze usage patterns and improve our services
• Security: To protect against fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

3. Data Processing and Security

Processing Environment

Your data is processed in secure, isolated Docker containers that are destroyed after processing. We implement industry-standard security measures to protect your data during processing.

Data Retention

We retain your information as follows:

• Account Data: Until you delete your account or request deletion
• Processing Data: Temporarily during analysis, then automatically deleted
• Log Data: Up to 90 days for security and performance monitoring
• Analysis Results: As long as you maintain your account (unless you delete them)

Security Measures

We implement appropriate security measures including:

• Encryption of data in transit and at rest
• Secure API authentication and authorization
• Regular security audits and monitoring
• Access controls and employee training
• Isolated processing environments

4. Information Sharing

We do not sell your personal information. We may share your information only in these limited circumstances:

• Service Providers: With trusted third parties who assist in providing our services (e.g., hosting, payment processing)
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfer: In connection with a merger, acquisition, or sale of assets
• Consent: When you explicitly consent to sharing

Third-Party Services

We use the following third-party services that may process your data:

• Anthropic: AI language model provider — processes uploaded data to generate statistical insights and narrative analysis
• Auth0: Authentication and identity management services
• Azure: Cloud hosting and infrastructure services
• Cloudflare: Content delivery and security services
• Google Analytics (GA4): Website analytics and usage tracking
• Google Tag Manager: Tag management for analytics
• Stripe: Payment processing services

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request export of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to certain types of processing

Exercising Your Rights

To exercise these rights, please email privacy@mcpanalytics.ai. We will respond to your request within 30 days.

6. CCPA Notice for California Residents

This section provides additional disclosures required by the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), for California residents.

We Do NOT Sell or Share Your Personal Information

PeopleDrivenAI LLC does not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising purposes. A "Do Not Sell or Share My Personal Information" opt-out is not applicable because we do not engage in such practices.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers: Email address, name
• Commercial Information: Payment records, subscription history
• Internet or Network Activity: Usage logs, IP address, browsing history on our service
• Geolocation Data: Approximate location derived from IP address
• Professional or Employment-Related Information: Company name (when provided)

Sources of Personal Information

• Directly from you: When you create an account, submit forms, or upload data
• Automatically from your device: Through cookies, log files, and analytics tools

Business Purposes for Collection

• Service provision and maintenance
• Account management and payment processing
• Analytics and service improvement
• Security and fraud prevention

Your California Privacy Rights

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions
• Right to Correct: You may request correction of inaccurate personal information
• Right to Opt-Out of Sale: Not applicable — we do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your California privacy rights, email privacy@mcpanalytics.ai. We will respond to verifiable consumer requests within 45 days.

7. GDPR Notice for European Users

This section provides additional information required by the General Data Protection Regulation (GDPR) for users in the European Union and European Economic Area.

Legal Bases for Processing

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the services you have requested (account management, data analysis, report generation)
• Legitimate Interest: Processing necessary for our legitimate interests, including security, fraud prevention, and service improvement, where these interests are not overridden by your rights
• Consent: Where you have given consent for specific processing activities, such as marketing communications. You may withdraw consent at any time
• Legal Obligation: Processing necessary to comply with legal requirements, such as tax and accounting obligations

Automated Decision-Making

MCP Analytics uses AI and Large Language Models (LLMs) to generate statistical insights and narrative analysis from your uploaded data. This processing is part of the core service you have requested. You have the right to request human review of any AI-generated analysis by contacting us at privacy@mcpanalytics.ai.

International Transfers

Your data is processed in the United States. Transfers of personal data from the EU/EEA to the United States rely on Standard Contractual Clauses (SCCs) as approved by the European Commission.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local Data Protection Authority if you believe your personal data has been processed in violation of the GDPR.

Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer at privacy@mcpanalytics.ai.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze website usage and performance
• Provide security features

Specific Cookies We Use

• _ga (Google Analytics, persistent, 2 years) — Distinguishes unique users for analytics
• _gid (Google Analytics, persistent, 24 hours) — Distinguishes unique users for analytics
• _gat (Google Analytics, session) — Rate limiting for analytics requests
• __stripe_mid (Stripe, persistent) — Fraud prevention for payment processing
• __stripe_sid (Stripe, session) — Fraud prevention for payment processing
• cookieConsent (first-party, persistent) — Stores your cookie consent preference
• Session cookies (first-party, session) — Maintain your login state

You can control cookies through your browser settings. Disabling certain cookies may affect service functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that international transfers are protected by Standard Contractual Clauses (SCCs) as approved by the European Commission, and compliance with applicable data protection frameworks.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website and updating the effective date.

12. AI and Automated Processing Disclosure

MCP Analytics uses AI models (Anthropic Claude) to generate narrative insights from statistical analysis of your uploaded data. This section explains how AI is used in our service.

Deterministic vs. AI-Generated Content

• Statistical computations (executed in R and Python) are deterministic — the same inputs produce the same outputs. Charts, tables, metrics, and numerical results are deterministic.
• AI-generated narrative text (insights, interpretations, summaries) may vary between runs and may contain inaccuracies or misinterpretations.

How to Distinguish AI Content

Users can distinguish AI-generated content from deterministic results: charts, tables, and metrics are produced by deterministic statistical code. Text paragraphs under "Insights" sections are AI-generated narrative content.

California AB 2013 Disclosure

Per California AB 2013: AI-generated content on this platform uses Anthropic's Claude language models. The training data and practices for these models are described in Anthropic's privacy policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices:

• General privacy inquiries: privacy@mcpanalytics.ai
• Data deletion requests: privacy@mcpanalytics.ai
• Data Protection Officer: privacy@mcpanalytics.ai