Privacy policy
Agent gateway lets AI agents you choose (for example claude.ai, ChatGPT, Claude Code) use your accounts at GitHub, Google, Slack and other services, under rules you set, with risky requests sent to you for approval. This policy explains what we collect, why, who it goes to, and your choices.
What we collect
- Your sign-in identity: your GitHub user id and username, or your Google account id and verified email address.
- Credentials for the accounts you connect: OAuth tokens (and refresh tokens) for GitHub, Google, Slack and other services, and any API keys you paste. These are encrypted at rest (AES-GCM) and are never shown to your agents or to anyone else.
- Your configuration: the apps you allow, rules, policy text, what each agent session is for, notification settings (for example your Telegram chat id).
- Request records: for each call an agent makes through the gateway: which app, which service, the method and path, the decision (allowed, asked, denied) and when. For requests that wait for your approval we keep the request body you're shown and, once it runs, the service's response, so a retry returns the same result instead of repeating the action.
- Classifier records: the gateway's classifier decides whether a request fits what you said the session is for. We record its decision and reason, and a fingerprint and size of the input it saw, not the input itself.
- Chat with the gateway: messages you send to the gateway's assistant (on the website or Telegram) and its replies, so it can apply what you tell it.
We don't use analytics, advertising trackers or third-party scripts.
How we use it
Only to provide the service you asked for: to authenticate you, to make the API calls your agents request and you allow, to apply your rules and the classifier, to ask you for approval, to show you what happened, and to keep the service secure. We do not sell your data, use it for advertising, or use it to train AI models.
Google user data
If you connect Google, the gateway can call Gmail, Google Drive and Google Docs on your behalf with the permissions you grant. We use Google user data only to carry out the requests that you and the agents you authorize make through the gateway, and to show you those requests for approval.
Agent gateway's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Google data is used only to provide or improve the user-facing features of the gateway described here.
- It is transferred to others only as needed to provide those features (to the agent that made the request and to the processors listed below), to comply with law, or as part of a merger or acquisition with notice to you.
- It is never used for advertising, never sold, and never used to train AI models.
- No person reads it unless you give us permission for specific data, it's needed for security (for example investigating abuse), to comply with law, or it has been aggregated and anonymized for internal operations.
Who we share it with
- The agents you authorize receive the results of the requests they make, as you allow.
- Cloudflare hosts the gateway and its database.
- Anthropic runs the AI model behind the gateway's assistant and its explanations of held requests; request details and chat messages are sent to it for that.
- TypeSafe AI runs the classifier model; request details (method, path, body, the agent's stated purpose and your session intent) are sent to it for each judged request.
- Telegram, if you link it, delivers approval cards (the app's name, the request and a preview of its content) and your replies.
- The services you connect (GitHub, Google, Slack, …) receive the requests made on your behalf.
These providers process data on our behalf to run the service. We share data with others only if the law requires it.
Retention and deletion
- Disconnect any account on the Connections page at any time: its stored credentials are deleted immediately and every app's access to it is revoked. You can also revoke the gateway's access from the provider (for Google: myaccount.google.com/permissions).
- Your configuration and records are kept while your account exists so you can review them.
- To delete your account and all associated data, email privacy@personalmcp.dev from the address you sign in with. We delete it within 30 days, except where the law requires us to keep something.
Security
Credentials are encrypted at rest; all traffic uses HTTPS. Agents never receive your credentials; every call passes through the gateway's checks. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.
Children
The service is not directed to children under 16 and we don't knowingly collect their data.
Changes
We'll post changes here and update the date above; material changes will be announced in the dashboard.