What MCPENROUZ processes
Account and product linkage, web and OAuth session metadata, device identifiers and declared policy, operation status, timestamps, security events, and limited network metadata such as IP addresses used for abuse prevention, rate limiting and service security.
Data processed during operations
Requested operations can include file paths, file content, commands and process output. This data is transmitted only to perform the requested action. Relay arguments and results are scrubbed after delivery and are not used as a permanent content archive.
Retention
Operation payloads are removed after delivery or a short operational lifecycle. Security and audit metadata is generally retained for up to 30 days; sessions and OAuth credentials follow their expiration or revocation lifecycle.
Sharing and service providers
We do not sell user data or use MCPENROUZ tool data for advertising. Data may be processed by infrastructure and identity service providers required to operate MCPENROUZ, and returned MCP data is processed by the AI service you choose to connect. We do not disclose tool data to unrelated third parties.
Your controls
You can independently revoke devices, web sessions and AI authorizations. Global identity controls are available through PENROUZ ID.