Legal

# Privacy Policy

Last updated May 5, 2026

## Scope

This Privacy Policy describes how SquareMCP collects, uses, and protects information when you visit squaremcp.com, contact us, or participate in a SquareMCP pilot or managed deployment.

## Information we collect

We may collect:

- contact details such as your name, work email, company, and role
- pilot intake details such as your use case, target systems, and security requirements
- service and operational data needed to provision, secure, and support a deployment
- communications you send to us by email or through the pilot intake form

## How we use information

We use information to:

- review and respond to pilot requests
- configure and operate SquareMCP deployments
- authenticate access, troubleshoot issues, and maintain security controls
- communicate about pilots, support, billing, and service changes

## Customer data and connected systems

SquareMCP is designed to act as a managed MCP gateway for internal tools. Depending on the deployment, customer data may remain in a customer-controlled environment or may be processed in SquareMCP-managed infrastructure as part of the service. The exact data path depends on the deployment architecture and connector configuration.

Pilot and production customers are responsible for evaluating which systems they choose to connect and which tool permissions they enable for their users and agents.

## Authentication credentials and tokens

SquareMCP may process API keys, OAuth credentials, session metadata, audit records, and related access-control data needed to operate the service. We use these credentials only to authenticate approved integrations and support the configured deployment.

## Sharing

We do not sell personal information. We may share information with infrastructure, hosting, email, or support providers only to the extent reasonably necessary to run the service, support customers, comply with law, or protect SquareMCP and its users.

## Retention

We retain information for as long as reasonably necessary to evaluate pilots, deliver services, maintain records, and meet legal, operational, or security obligations.

## Security

We use reasonable administrative, technical, and operational measures to protect information. No system can guarantee absolute security, and you should not submit information through the service unless you are comfortable with that risk profile.

## Your choices

You may contact us to request access, correction, or deletion of personal information we hold about you, subject to legal and operational limits.

## Contact

Questions about this Privacy Policy can be sent to info@squaremcp.com.

This page is a general website and pilot-stage privacy policy. It should be reviewed and adapted if SquareMCP moves into broader commercial availability or regulated deployments.