Privacy Policy
Last updated: 7 April 2026 · Effective: 7 April 2026
1. Data Controller
The controller of your personal data is InnoDigital ("we", "us", "our"), a business operating the MCPGatePro platform at mcpgatepro.com.
Trade name: InnoDigital
Country of establishment: Poland (European Union)
Privacy contact: privacy@innodigital.io
As an entity established in an EU Member State, we are subject to Regulation (EU) 2016/679 (GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data (Ustawa o ochronie danych osobowych).
2. Data We Collect
| Category | Data | Source |
|---|---|---|
| Account | Email address, subscription plan, API key(s) | Provided by you via Stripe checkout |
| Payment | Billing name, payment method token, invoice history | Stripe (we never store card details) |
| Usage | API request counts, MCP server accessed, timestamps | Generated automatically when using the service |
| Technical | IP address, HTTP headers, browser/client type | Collected automatically on each request |
| Communications | Email content when you contact us | Provided by you |
| Cookies | Session identifiers, live-chat state | Set by browser — consent required |
We do not collect special-category data (Art. 9 GDPR), data from minors, or the content of your AI queries to Claude.
3. Legal Bases and Purposes of Processing
Contract performance (Art. 6(1)(b) GDPR)
Account creation, API key issuance, subscription management, processing payments, providing access to MCP servers, and sending transactional emails (receipts, subscription alerts).
Legitimate interests (Art. 6(1)(f) GDPR)
Security monitoring, fraud prevention, abuse detection, rate-limiting, service reliability, and anonymised analytics to improve the platform. Our interests are balanced against your rights — you may object at any time.
Legal obligation (Art. 6(1)(c) GDPR)
Retaining billing records for 5 years per Polish tax law (Ordynacja podatkowa), and responding to lawful requests from public authorities.
Consent (Art. 6(1)(a) GDPR)
Non-essential cookies (live chat widget, optional analytics). You may withdraw consent at any time by clearing cookies or using our cookie banner.
4. Third-Party Processors
| Processor | Purpose | Transfer basis | Privacy policy |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription management | EU-US Data Privacy Framework + SCCs | stripe.com/privacy |
| Tawk.to | Live chat widget (consent-gated) | SCCs | tawk.to/privacy-policy |
| Formspree | Waitlist / contact form submissions | SCCs | formspree.io/legal |
| Hetzner Online GmbH | Server hosting (Germany, EU) | Within EU — no transfer | hetzner.com/legal |
| Amazon Web Services | Backup storage (S3, eu-central-1) | Within EU — no transfer | aws.amazon.com/privacy |
We have Data Processing Agreements in place with each processor listed above. We do not sell your personal data to any third party.
5. Data Retention
| Data | Retention period |
|---|---|
| Account & subscription data | Duration of subscription + 30 days after cancellation |
| Billing records & invoices | 5 years (Polish tax law obligation) |
| API usage logs | 90 days rolling |
| Security / IP logs | 30 days |
| Support emails | 3 years from last contact |
6. Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of access (Art. 15)
Obtain a copy of all personal data we hold about you.
Right to rectification (Art. 16)
Correct inaccurate or incomplete data.
Right to erasure (Art. 17)
Request deletion of your data where no legal basis for retention exists.
Right to restriction (Art. 18)
Limit processing of your data while a dispute is resolved.
Right to portability (Art. 20)
Receive your data in a structured, machine-readable format.
Right to object (Art. 21)
Object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3))
Withdraw consent for cookies at any time without affecting past processing.
Right not to be subject to automated decisions (Art. 22)
We do not make legally significant automated decisions about you.
To exercise any right, email privacy@innodigital.io. We will respond within 30 days. Identity verification may be required. There is no fee for exercising your rights.
Right to lodge a complaint
You have the right to lodge a complaint with the Polish supervisory authority:
Urząd Ochrony Danych Osobowych (UODO) — uodo.gov.pl · ul. Stawki 2, 00-193 Warszawa, Poland.
If you reside in another EU/EEA country, you may also contact your local supervisory authority.
7. International Data Transfers
Our primary hosting is within the European Union (Hetzner, Germany; AWS eu-central-1, Frankfurt). When data is transferred to the United States (Stripe, Tawk.to, Formspree), we rely on:
- →EU-US Data Privacy Framework (where the processor is certified)
- →Standard Contractual Clauses (EU Commission Decision 2021/914) as fallback
8. Cookies
| Cookie | Type | Purpose | Consent required |
|---|---|---|---|
| cookie-consent | Essential | Stores your cookie preference (localStorage) | No |
| __tawkuuid, TawkConnectionTime | Functional | Live chat session (Tawk.to) | Yes |
You can manage your consent at any time by clearing your browser's localStorage for this domain or clicking "Reject Non-Essential" in the cookie banner. Most browsers also allow you to block all cookies in their settings.
9. Security
We implement appropriate technical and organisational measures including: TLS 1.3 encryption in transit, encrypted backups, API key hashing, access controls, and regular security assessments. No transmission method is 100% secure; in the event of a breach affecting your rights, we will notify you and the supervisory authority as required by Art. 33–34 GDPR.
10. Children's Privacy
MCPGatePro is a professional developer tool. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has submitted data to us, contact privacy@innodigital.io and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated by email (to subscribed users) or by a notice on this page at least 14 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact
For any privacy-related queries or to exercise your rights:
Privacy email: privacy@innodigital.io
General contact: mcpgatepro.com/contact
Supervisory authority: uodo.gov.pl