Privacy Policy

Overview

Axis MCP ("Axis," "we," "us," or "our") operates the API gateway and developer platform at axis-mcp.live. This Privacy Policy explains what data we collect, why we collect it, how long we keep it, and your rights regarding it.

By using the Axis platform, you agree to the practices described in this policy. If you are using Axis on behalf of an organisation, you represent that you have authority to bind that organisation to this policy.

Data We Collect

Account Data

When you authenticate via Google OAuth we collect:

• Your primary Google email address
• Your display name and profile photo (if set on your Google account)
• A unique user identifier generated by our authentication provider

API Usage Logs

Every request routed through the Axis gateway is logged for billing, rate-limiting, and security purposes. Each log entry records:

• Timestamp of the request
• The MCP service and endpoint accessed
• Your user ID (linked to your account)
• The originating IP address of the request — used for abuse prevention, rate-limiting, and geographic traffic analytics shown in our internal operations dashboard

IP addresses are considered personal data under GDPR. Our lawful basis for processing them is legitimate interest — specifically, the security and integrity of the platform and the prevention of abuse.

Billing Data

Billing is handled by Stripe. We store only your Stripe Customer ID and subscription status in our database. We do not store payment card numbers, bank account details, or full billing addresses.

Technical & Diagnostic Data

We may collect error logs, latency metrics, and aggregated usage statistics to operate and improve the platform. This data is not linked to individual identities beyond what is necessary for debugging.

How We Use Your Data

• Account management: to authenticate you and maintain your account
• Billing: to calculate metered usage and charge your subscription via Stripe
• Security & abuse prevention: to enforce rate limits, detect anomalous activity, and block unauthorised access
• Platform operations: to monitor uptime, diagnose errors, and improve reliability
• Internal analytics: to understand aggregate traffic patterns and geographic usage — we do not build individual user profiles for marketing purposes
• Legal compliance: to meet obligations under applicable law or respond to valid legal process

Data Retention

• API usage logs (including IP addresses): retained for 90 days, then purged automatically
• Billing records: retained for 7 years to satisfy financial record-keeping obligations
• Account data: retained for the life of your account and deleted within 30 days of account closure upon request

Third-Party Processors

We share data with the following sub-processors solely to operate the platform. Each is bound by their own data processing agreements and privacy policies.

We do not sell, rent, or lease personal data to any third party for their own marketing or commercial purposes.

Your Rights

Depending on your jurisdiction you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated personal data
• Restrict or object to certain processing activities
• Data portability — receive your data in a machine-readable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, email us at axis.mcp.support@gmail.com. We will respond within 30 days.

Cookies & Tracking

We use a single session cookie to maintain your authenticated state on the dashboard. We do not use advertising cookies, cross-site tracking, or third-party analytics scripts on any Axis-operated page.

Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated by updating the "Last updated" date above and, where appropriate, by email to registered users. Continued use of the platform after a change constitutes acceptance of the updated policy.

Contact

For privacy-related questions or data requests, contact us at axis.mcp.support@gmail.com.