Privacy policy
Draft policy — wording to be reviewed before public launch.
Who is responsible
Clearparty is run by Andrei Mehedko, Poland, who is the controller of the personal data described here. Contact: privacy@clearparty.dev.
What we store
- Your account: your GitHub user id and login, taken from GitHub sign-in. We do not store your GitHub access token, and not your email address, name or avatar either.
- API keys: only a hash and a short display prefix, with the label you give each key.
- One usage record per call: the tool, your MCP client's name and version, a keyed hash of the input (never the company name or VAT number you sent), the outcome, latency and cost. Records older than 13 months are rolled up into monthly totals per account and deleted.
- Billing, once you add a card: your Stripe customer id, your spending cap, and the card brand and last 4 digits for display. Card details stay with Stripe.
- IP addresses are used in memory to rate-limit failed requests; we do not store them.
Why we use it
To provide the service you signed up for (your account, keys, quota and billing), to keep it secure and working (logs, rate limits), and to meet tax and accounting duties for invoices.
Who receives data
- Microsoft Azure hosts the service and its database in the Poland Central region (EU).
- GitHub signs you in.
- Stripe handles card payments and invoices.
- Anthropic, our language-model provider, may receive a company name and candidate matches to resolve an ambiguous match, or to write a summary when you ask for one.
- The EU's VIES service receives the VAT numbers you ask us to validate.
GitHub, Stripe and Anthropic may process data outside the EU, under the safeguards they offer (the EU–US Data Privacy Framework or standard contractual clauses).
How long we keep it
Account data and keys: while your account exists. Usage records: 13 months, then monthly totals. Application logs: 30 days. Invoices: as long as Polish tax law requires.
Cookies
We set one cookie: the sign-in session cookie, needed to keep you signed in. There are no analytics or advertising cookies.
Your rights
You can ask for access to, correction or deletion of your data, a copy of it, or restriction of or objection to its use: email privacy@clearparty.dev. You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), at uodo.gov.pl.