Privacy Policy

• Account data. When you sign in with Google or an email link, we receive your email address and, with Google, your name and profile picture. If you upload an avatar, we store it.
• Submissions. Details you enter when submitting an MCP server: name, publisher, descriptions, URLs, tools, setup notes, logos or images you upload, and your contact email.
• Payment information. Payments are handled by Dodo Payments. We do not receive or store your card or bank details. We receive order status, the product bought, and the email used at checkout.
• Usage and device data. Pages viewed, clicks, approximate location and browser or device information, collected through PostHog and Vercel Analytics.
• View counts and abuse prevention. To count views and limit abuse, we process your IP address and email into keyed hashes. We do not store the raw IP address for this purpose.

• To run the directory, sign you in, and let you submit, manage, and pay for listings.
• To review submissions and contact you about them.
• To process payments, prevent fraud and abuse, and apply rate limits.
• To understand usage and improve the site, including showing listing owners view counts for their MCPs.
• To meet legal obligations and enforce our Terms of Service.

We do not sell your personal data.

We use these service providers, who process data on our behalf:

• Supabase for the database and sign-in.
• Vercel for hosting and analytics.
• Cloudflare for file storage and content delivery.
• PostHog for product analytics.
• Dodo Payments as the payment processor and merchant of record.
• Google if you choose to sign in with Google.

These providers may process data outside India, including in the United States and the European Union.

When a submission is published, the server name, publisher, descriptions, links, tools and logo appear publicly on MCPfolio. Your contact email and private review notes are not published.

We use cookies or local storage to keep you signed in, save an unfinished submission draft in your browser, and measure usage through analytics. You can block or clear cookies in your browser settings; parts of the site, such as sign-in, may then not work.

• Account data is kept while your account exists.
• Submissions and their review history are kept while the listing is live and as long as needed afterwards for record-keeping, dispute handling and abuse prevention.
• Payment records are kept as required by tax and accounting rules.
• Rate-limit data is short-lived and removed periodically.

You can ask us to delete your data at any time (see below).

You can ask to access, correct, or delete your personal data, withdraw consent where we rely on it, or ask questions about how it is handled. Email support@mcpfolio.com from the address on your account and we will respond within a reasonable time, normally within 30 days. We may keep data we are required to keep by law. If you are in India, you also have the rights provided by the Digital Personal Data Protection Act, 2023.

We use access controls, encrypted connections, and restricted server-side credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

MCPfolio is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

We may update this policy. The date at the top shows the latest version. Material changes will be highlighted on this page.

Dikshit Mahanot, India. Email support@mcpfolio.com.