The short version
- No accounts, no sign-up, no tracking cookies, no advertising.
- Content you create in our apps stays in your browser, unless an app says otherwise below.
- We never sell or share your personal data.
- Questions: [email protected].
01Who we are
This policy covers the Model Context Protocol (MCP) apps and servers published by Safrow Labs (“Safrow”, “we”, “us”) for use inside AI assistants such as ChatGPT and Claude (each an “App”, together the “Apps”), and the pages at safrow.com/mcp. It applies to every App listed in section 8. The rest of safrow.com is covered by our general privacy policy.
02How the Apps work
When you ask your AI assistant to use an App, the assistant calls a tool on our MCP server. The server returns a small interface (an HTML page) that the assistant displays inside the chat, in a sandboxed frame. Unless section 8 says otherwise, the interface then runs entirely in your browser: what you type into it is processed and stored on your device, not on our servers.
03Information we collect
Content you create in an App
We do not collect it. For example, Kanban cards, columns and labels are stored in your browser's local storage and are never sent to us.
Tool calls from your AI assistant
When your assistant calls an App's tool, our server receives the request the assistant sends: the tool name and any arguments the tool accepts. We do not receive your chat history, your account details with the assistant provider, or your name or email. We use requests only to respond to them.
Technical logs
Like any web service, our servers and hosting providers may automatically record technical information for each request, such as IP address, timestamp, request path, response status and user-agent string. We use this only to operate the service, keep it secure, prevent abuse and fix problems. We keep logs for no longer than 30 days unless they are needed to investigate a security incident.
If you email us, we receive your email address and message and use them only to reply to you.
04What we do not do
- We do not require or offer accounts.
- We do not use analytics, advertising or tracking cookies in the Apps.
- We do not sell, rent or trade personal data.
- We do not use your content to train AI models.
- We do not build profiles of users.
05Storage on your device
Apps may save your work in your browser's local storage so it is still there next time. This data stays on your device. You can delete it at any time by clearing your browser's site data, or with the App's reset option where there is one. Some AI assistants block storage inside embedded apps; your work is then kept only for the current session, and you can use the App's export feature, where available, to keep a copy.
06Third parties
The Apps run inside AI assistants operated by other companies, such as OpenAI (ChatGPT) and Anthropic (Claude). Your conversations with those assistants, including any message that mentions an App, are handled by those companies under their own privacy policies, not this one. Our servers run on third-party infrastructure (hosting and content delivery providers) that processes technical logs on our behalf.
07Sharing and legal requests
We share information only with the service providers that host the Apps, and only as needed to run them, or when the law requires it, such as to comply with a valid legal process, or to protect the rights, safety and security of our users, the public or Safrow.
08App-specific details
| App | Server | Data handling |
|---|---|---|
| Kanban | kanban.host.safrow.com | One read-only tool, show_kanban_board, which takes no arguments. Board content (cards, columns, labels) is stored only in your browser's local storage. The board makes no network requests, and no board content is sent to Safrow. |
09Security
All connections to our servers use HTTPS. Our servers keep no user data at rest beyond the technical logs described above. No method of transmission or storage is completely secure, but we keep what we hold to a minimum so there is little to expose.
10Children
The Apps are not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from children. You must also meet the age requirements of the AI assistant you use the Apps in.
11Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have rights to access, correct, delete or object to the processing of your personal data. Because we hold almost no personal data, clearing your browser data covers most requests. For anything else, email [email protected] and we will respond within 30 days. Where the GDPR applies, our legal basis for processing technical logs is our legitimate interest in running a secure, working service.
12International users
Our servers and service providers may be located in countries other than yours. Where we transfer personal data internationally, we rely on the safeguards required by applicable law.
13Changes to this policy
We may update this policy, for example when we add a new App. We will change the effective date above and, for material changes, post a notice on this page. Continuing to use the Apps after a change means you accept the updated policy.
14Contact
Safrow Labs
Email: [email protected]