Privacy Policy

Your Privacy Matters

At MCP Forest, we're committed to protecting your privacy and being transparent about how we collect, use, and protect your personal information. This policy explains our practices regarding your data when you use our MCP (Model Context Protocol) server platform.

Last Updated: November 28, 2025

Information We Collect

Account Information

  • • Email address and name (through Clerk authentication)
  • • Profile information and avatar
  • • Organization memberships and roles
  • • Account preferences and settings

MCP Server Data

  • • OpenAPI specifications you upload
  • • Server configurations and environment variables
  • • API endpoint definitions and authentication settings
  • • Generated MCP server code and Docker containers

AI Interaction Data

  • • Chat messages and AI responses
  • • AI provider usage (OpenAI, Anthropic, Google AI)
  • • Token consumption and API call metrics
  • • MCP tool execution logs

Usage Analytics

  • • Platform usage statistics and performance metrics
  • • Error logs and debugging information
  • • Widget usage and embedding analytics
  • • Deployment and container management logs

How We Use Your Information

Platform Services

We use your information to provide, maintain, and improve our MCP server generation platform, including creating and deploying your servers, processing AI interactions, and managing your account.

AI Processing

Your data may be processed by AI providers (OpenAI, Anthropic, Google AI) to generate responses, execute MCP tools, and provide intelligent interactions through our platform.

Communication

We may use your contact information to send important service updates, security alerts, and respond to your support requests.

Analytics & Improvement

We analyze usage patterns to improve our platform, optimize performance, and develop new features that better serve our users.

AI Provider Integration

MCP Forest integrates with third-party AI providers to deliver intelligent responses and MCP tool execution. When you interact with AI features:

  • • Your messages and data may be sent to AI providers (OpenAI, Anthropic, Google AI)
  • • Each provider has their own privacy policies and data handling practices
  • • We track usage metrics for billing and optimization purposes
  • • AI interactions are logged for debugging and improvement
  • • You can configure which AI providers your organization uses

Important: Please review the privacy policies of AI providers you choose to use: OpenAI, Anthropic, and Google AI each have their own data handling practices.

Data Security

Security Measures

  • • All data transmission is encrypted using HTTPS/TLS
  • • Authentication handled by Clerk with industry-standard security
  • • Database access is restricted and monitored
  • • Docker containers are isolated and secured
  • • Regular security audits and updates

Access Controls

  • • Role-based access control for organizations
  • • API keys and authentication tokens are encrypted
  • • Environment variables are securely stored
  • • Limited employee access on a need-to-know basis

Data Sharing

We do not sell, trade, or rent your personal information. We may share your data only in the following circumstances:

Service Providers

We work with trusted third-party services including Clerk (authentication), AI providers (OpenAI, Anthropic, Google AI), and cloud infrastructure providers to deliver our platform.

Legal Requirements

We may disclose information if required by law, court order, or to protect our rights, property, or safety, or that of our users or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.

Your Rights

You have the following rights regarding your personal data:

  • • Access: Request a copy of the personal data we hold about you
  • • Correction: Update or correct inaccurate personal information
  • • Deletion: Request deletion of your personal data (subject to legal requirements)
  • • Portability: Request your data in a machine-readable format
  • • Restriction: Limit how we process your personal data
  • • Objection: Object to certain types of data processing

To exercise these rights, please contact us at privacy@mcpforest.dev. We will respond to your request within 30 days.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

  • • Essential cookies: Required for platform functionality
  • • Authentication cookies: Managed by Clerk for secure login
  • • Preference cookies: Remember your settings and preferences
  • • Analytics cookies: Help us understand platform usage

You can control cookies through your browser settings, though disabling essential cookies may affect platform functionality.

Children's Privacy

MCP Forest is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@mcpforest.dev

Support: support@mcpforest.dev

Website: https://mcpforest.dev

MCP Forest is committed to protecting your privacy and ensuring transparency in our data practices. We believe in giving you control over your personal information and will continue to improve our privacy practices as we grow.