Privacy Policy

1. Introduction

GovernMCP ("we," "our," or "us") operates the GovernMCP service, including the website at governmcp.com, the web app at app.governmcp.com, and the Govern MCP mobile app. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.

2. Information We Collect

Account information: When you register, we collect your email address, password (stored in encrypted form), first name, last name, and optional profile information (bio, website, GitHub username). If you sign in with Google, GitHub, or Microsoft, we receive your email and name from the provider.

Usage and audit data: We log actions taken through the service (e.g., skill usage, approvals, integration connections) to provide the service, analytics, and security.

Device information: On the mobile app, we may collect device tokens for push notifications if you enable them.

Integrations: When you connect integrations (e.g., Google Drive, Slack), we store OAuth tokens securely to access those services on your behalf.

3. How We Use Your Information

We use your information to:

• Provide and operate the GovernMCP service
• Authenticate you and manage your account
• Execute actions and approvals according to your policies
• Send transactional emails (e.g., verification, password reset)
• Send push notifications if you opt in
• Process subscriptions and payments (via Stripe)
• Improve our service and fix issues
• Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We share data only as needed with:

• Service providers: Stripe (payments), Resend (email), hosting providers (AWS)
• OAuth providers: When you connect Google, GitHub, or Microsoft, we interact with their APIs per your authorization
• Legal requirements: When required by law or to protect rights and safety

5. Data Retention

We retain your account and usage data while your account is active. You may request deletion of your account and associated data by contacting us at support@governmcp.com.

6. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS) and at rest, hashed passwords, and secure storage of OAuth tokens.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your data, or to restrict or object to certain processing. To exercise these rights, contact us at support@governmcp.com.

8. Children

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice in the app. Continued use after changes constitutes acceptance.

10. Contact

For questions about this Privacy Policy or your data, contact us at support@governmcp.com.

GovernMCP is operated by Datapare Ltd., Unit Da2 Sutherland House, 43 Sutherland Road, London, United Kingdom, E17 6BU.