Privacy Policy

MCP Market — operated by Sitka Labs

This Privacy Policy describes how Sitka Labs (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use the MCP Market platform, including the website, APIs, and related services (collectively, the “Service”).

This Privacy Policy should be read together with our Terms of Service. By using the Service, you consent to the practices described here.

1. Information We Collect

1.1 Information You Provide

• Account Information. When you register, we collect your email address and, optionally, your name. If you sign in via a third-party authentication provider, we receive your email address and profile information from that provider.
• Billing Information. Payment information is collected and processed directly by our payment processor (Stripe). We do not store your full payment card details.
• Content. We store the content and configurations you upload or deploy through the Service.
• Communications. If you contact us, we retain the contents of your messages.

1.2 Information We Collect Automatically

• Usage Data. We collect usage and performance data related to your use of the Service, including request metadata, error information, and timestamps.
• Session Data. We use functional session cookies necessary for the Service to operate. We do not use advertising cookies or third-party tracking technologies.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Authenticate your identity and manage your account.
• Process payments and manage your subscription.
• Monitor the performance, reliability, and security of the Service.
• Detect and prevent fraud, abuse, and security incidents.
• Respond to your inquiries and provide support.
• Comply with legal obligations.

We do not use your Content or personal information to train machine learning models. We do not sell your personal information.

3. How We Share Your Information

3.1 Service Providers

We use trusted third-party service providers to operate the Service. These providers process data on our behalf and are contractually obligated to use it only for the purposes we specify. To request a current list of sub-processors, contact us at hi@mcpmarketplace.com.

3.2 Public Content

If you publish content with public visibility, it will be visible to other users of the Service.

3.3 Organization Members

Information about your activity within an organization may be visible to other members of the same organization, depending on their role.

3.4 Legal Requirements

We may disclose your information if required by law, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.5 Business Transfers

If Sitka Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Google Workspace Data

When you connect a Google Workspace service (such as Gmail, Google Drive, Google Calendar, or other Google apps) through MCP Market, we request access to your Google account data via OAuth 2.0 with permissions specific to the service you are connecting.

4.1 What We Access

We access only the Google Workspace data required by the specific service you connect (for example, Gmail messages for a Gmail connection, or Drive files for a Drive connection). Access is limited to the minimum permissions required to provide the requested functionality.

4.2 How We Use It

Your Google data is used solely to provide the functionality you requested. We do not use your Google data for advertising, training machine learning models, or any purpose unrelated to providing the Service.

4.3 How We Store It

OAuth tokens for Google Workspace connections are encrypted at rest using AES-256-GCM. We do not store the contents of your Google Workspace data (such as emails, documents, or calendar events) — data flows through our gateway in transit only.

4.4 Revocation and Deletion

You can disconnect a Google Workspace connection at any time from your MCP Market dashboard, which deletes the stored OAuth tokens. You can also revoke access from your Google Account permissions page.

4.5 Google API Services User Data Policy

MCP Market's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Storage and Security

Your data is stored on servers located in the United States. As Sitka Labs is based in Canada, your personal information may be transferred to and processed in the United States. We rely on contractual safeguards with our service providers to protect your data during international transfers.

We implement appropriate technical and organizational security measures to protect your personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

In the event of a security breach involving your personal information, we will notify affected users and applicable regulatory authorities as required by law.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, unless we are required by law to retain it. Deleted data may persist in encrypted backups for a limited period before being purged. We retain billing records as required by applicable tax and accounting laws.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to access, correct, delete, or port your data. You may update your account information through the Service at any time. To exercise any privacy rights, contact us at hi@mcpmarketplace.com.

If you believe we have not handled your personal information appropriately, you may contact the relevant data protection authority in your jurisdiction.

8. Applicable Privacy Laws

Sitka Labs complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy legislation, and other privacy laws that apply to our processing of your personal information. If you are located in a jurisdiction with applicable consumer privacy legislation (including US state privacy laws, GDPR, or UK data protection law), you may have additional rights. To exercise these rights, contact us at hi@mcpmarketplace.com.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us and we will promptly delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last Updated” date. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Sitka Labs
Email: hi@mcpmarketplace.com