Privacy Policy

This Privacy Policy explains how AirMCP ("we", "us", "our") and its sub‑product Skiro collect, use, and protect your information. AirMCP is operated by AIAIRMCP Integrations PVT LTD, India.

1. Information We Collect

Personal Information

• Email address and username
• Password (encrypted and stored securely)
• Profile information you choose to provide

Google User Data

When you connect Google services to AirMCP, we access and process Google user data only with your explicit consent via Google OAuth. You may revoke access at any time in your Google Account settings or from your AirMCP dashboard.

• Gmail: messages, attachments, and metadata for email management
• Google Drive: files, folders, and metadata
• Google Sheets: spreadsheet data, formulas, and metadata
• Google Calendar: events, schedules, and metadata
• Google Docs: document content and metadata
• Google Forms: form responses and metadata
• Google Meet: meeting information and metadata
• Google Maps: location data and place information
• Other Google services as explicitly authorized by you

MCP Integration Data

• OAuth authorization codes and refresh tokens (encrypted)
• Integration configuration and preferences
• Usage metrics and API logs (anonymized)

2. How We Use Your Information

We use your information solely to provide and improve our MCP integration services:

• Facilitate integrations with Google and other services
• Process your requests and keep connections active
• Provide support and diagnostics

Google User Data Usage

Google user data is used exclusively to provide requested functionality and to maintain security.

We do NOT use Google user data for:

• Advertising or marketing
• Training AI models or machine learning systems
• Creating user profiles for commercial purposes
• Any purpose beyond delivering requested features

3. Data Sharing and Transfers

We do not sell, rent, or share your personal information or Google user data with third parties.

Data may be processed in other countries with safeguards including encryption in transit and at rest, compliance with applicable laws, and contractual protections with service providers.

4. Data Security and Protection

• Encryption (HTTPS/TLS) in transit and AES-256 at rest
• Strict access controls and MFA
• Encrypted OAuth tokens and API keys
• Regular security reviews and monitoring
• Secure, compliant cloud infrastructure

Google user data is handled in accordance with the Google API Services User Data Policy and the principle of minimum necessary access.

5. Data Retention and Deletion

• Account data: retained while your account is active
• Google user data: accessed in real time; not stored permanently
• OAuth tokens: retained until revoked or account deletion
• Usage logs: anonymized and retained up to 90 days
• Support communications: up to 2 years

You may delete data via account settings, by disconnecting integrations, or by contactingadmin@air-mcp.com. Upon account deletion, all personal and Google user data is permanently deleted within 30 days except where law requires retention.

6. Your Rights and Controls

• Access, rectify, erase, port, restrict, and object to processing
• Review and revoke Google API permissions at any time

7. Changes to This Policy

We may update this policy. Significant changes will be communicated via email, in-app notices, and website announcements with an updated effective date.

8. Legal Basis and Compliance

• Consent, contract, legitimate interests, and legal obligations
• Compliance with GDPR, CCPA, and Google API Services User Data Policy

9. Contact

For privacy inquiries: admin@air-mcp.com
Website: air-mcp.com
Response time: within 48 hours