Privacy Policy

1. Who we are and what this policy covers

Ascenso Labs LLC operates PinglyMCP ("we," "us," or "our"). This policy describes how we handle information through our website, dashboard, authentication service, REST API, MCP server, and related tools (the "Service"). Contact us at support@pinglymcp.com with privacy questions or requests.

This policy covers information about account holders, visitors, people who contact us, and people whose information is included in a Service request. It does not govern the independent practices of websites you visit through the Service, recipients you contact, your identity provider, or third-party applications and agents you use.

2. Information we collect

• Account and sign-in information. Your name, email address, profile image when provided, identity-provider identifier, verification status, and authentication records. Google or GitHub supplies information needed to create or authenticate your account when you choose that provider. Authentication records can include session identifiers, tokens, IP address, and browser information.
• Requests and results. Target URLs, domains or IP addresses, instructions, form fields, sender details, message text, website content retrieved for a task, generated output, responses, errors, and browser screenshots captured during website tasks.
• Usage and account administration. API-key names and hashes, permissions, creation and last-use times, authorized clients, service-call status and timing, model usage and token counts, credit balances, reservations, and credit transaction history.
• Billing information. When you use billing, we store Stripe customer and subscription identifiers, plan and subscription status, and credit-purchase records. Stripe collects payment details on its hosted pages; we do not store payment-card numbers.
• Technical information. Request and diagnostic metadata needed to operate and protect the Service, which can include network addresses, device or browser information, timestamps, and error logs.
• Support communications. Your contact details and the information you include when asking for help or making a privacy request.

Service requests and screenshots may contain personal information about you or others. Describe Website returns a screenshot link that anyone with the link can open for seven days. Submit only information you are authorized to provide and that is necessary for the task. Avoid including secrets or sensitive personal information in messages, URLs, instructions, or website content.

3. How we use information

We use information to authenticate users, manage accounts and permissions, execute requested tasks, deliver results, display activity history, administer credits and limits, respond to support requests, troubleshoot and improve reliability, prevent abuse, enforce our Terms, and meet legal obligations.

Where a legal basis is required, we process information as necessary to provide the Service under our agreement with you, to comply with legal obligations, and for legitimate interests such as securing and maintaining the Service, subject to your rights. Where a particular activity requires consent, we seek that consent separately. Reading or acknowledging this policy is not consent to optional marketing.

4. Website tasks, AI, and messages

Website tools retrieve content from the public targets you select. When a task uses AI, relevant instructions, website content, and task data are processed through Cloudflare Workers AI to generate descriptions or assist with the task. The information processed may include personal information in that content. AI processing depends on the tool and options you select.

When you request an email or contact-form submission, we transmit the message and relevant sender details to the selected recipient or website. Email is delivered through Cloudflare Email Service, and the sender email address you supply may be included as Reply-To. Target websites and recipients may retain this information under their own policies. We cannot retract a message or control a recipient's later use of it.

If you use PinglyMCP through a third-party MCP client, agent, or application, that client can receive the requests and results you authorize and may store its own history. Review its permissions and privacy policy before connecting it.

5. When we share information

• Service providers. We use Cloudflare for hosting, databases, storage, network security, AI processing, and email delivery. Stripe receives your email address and billing information when you choose billing. Providers process information needed to supply their services. Google and GitHub participate in authentication when you select them.
• At your direction. We share information with websites, message recipients, and applications or agents you authorize, as needed to execute your requests.
• Legal and safety needs. We may disclose information when reasonably necessary to comply with law or legal process, protect rights and safety, investigate abuse, or enforce our agreements.
• Business transfers. Information may be disclosed in connection with a merger, acquisition, financing, reorganization, or sale of business assets, subject to applicable privacy requirements.

We do not sell personal information or share it for cross-context behavioral advertising.

6. Cookies and browser storage

The Service uses cookies and similar browser storage to support sign-in, secure authentication, maintain sessions, and remember preferences such as color theme. You can control cookies and site storage through your browser. Blocking or deleting them may sign you out or prevent authentication and other features from working.

The PinglyMCP application does not currently include advertising trackers. Identity providers and third-party websites you choose to interact with have their own cookie and storage practices.

7. Retention and security

Detailed activity requests and responses, and screenshots, are available for seven days and are scheduled for expiration from activity storage after that period. Storage deletion may take additional time. Compact activity summaries, including service, status, timing, model usage, and credit charges, are retained without an automatic expiration so that activity and usage history remain available. The seven-day limit does not apply to these summaries, account records, credit records, or separate operational logs.

We keep account, authentication, support, credit, and operational records for as long as needed for their purposes, including account administration, security, resolving disputes, and legal obligations. Retention can depend on the type of information and the reason it is needed. You may contact us to request deletion; information may be retained where a lawful reason requires or permits it.

We use access controls, protected session cookies, and hashed personal API keys to help protect information. Activity logging omits authorization headers and attempts to redact common secret fields, but redaction cannot remove every secret or sensitive item, particularly from free text or screenshots. No transmission or storage system is completely secure.

8. Your choices and privacy requests

You can review activity in your dashboard, revoke personal API keys, manage the clients you authorize, and stop using the Service. For account closure or requests to access, correct, export, or delete personal information, email support@pinglymcp.com. Include enough information to identify your account or the relevant request, but do not send your password or API key. We may need to verify your identity and authority before responding.

Depending on your location and applicable law, you may also have rights to object to or restrict processing, withdraw consent for processing based on consent, appeal a decision about a privacy request, or complain to your local data protection authority. These rights may be subject to exceptions. Withdrawing consent does not affect the lawfulness of earlier processing. We will not discriminate against you for exercising privacy rights.

If another user submitted your information through PinglyMCP, contact us with the relevant details. A recipient or third-party client may independently retain copies, so you may also need to contact them directly.

9. International processing and children

Ascenso Labs LLC and our infrastructure providers may process information in the United States and other countries where they operate. Privacy protections may differ from those in your location. Contact us for information about processing locations and safeguards applicable to your information.

The Service is intended for adults aged 18 and over and is not directed to children. If you believe a child has provided personal information to us, contact support so we can investigate and take appropriate action.

10. Updates and contact

We may update this policy as the Service or our practices change. We will revise the date above and provide additional notice of material changes where required by law. If a change requires your consent, we will request it.

For privacy questions or requests, contact Ascenso Labs LLC, the operator of PinglyMCP, at support@pinglymcp.com.