Privacy Policy

Account

Your email address, organization name, and team memberships and roles. Passwords are stored hashed. If you sign in with Google, we receive your verified email address from Google.

Projects

Project names, API base URLs, OpenAPI documents, tool definitions, custom domains, and table schemas. API keys are stored hashed, and upstream credentials are encrypted at rest.

Tool calls

For each call to a hosted MCP server: the tool, the API key that made it, the response status, and the latency. For tools that proxy your API, the arguments the agent sent are also stored in the audit log, so don't pass secrets as tool arguments. Anyone in your organization with access to the project can read this log.

Hosted databases

The rows you and your agents store in a hosted PostgreSQL database. Row values are not copied into the audit log; it records only the operation.

Website usage

On www.uivoid.app we record page views, clicks, campaign parameters, device and browser details, and approximate location derived from your IP address. We also record sessions and heatmaps, which capture how you move through and interact with the pages.

• Run the service: authenticate you, serve your MCP servers, and forward tool calls to your API.
• Show you your audit logs, and keep the service secure and reliable.
• Understand how the website is used, and measure our advertising.
• Answer you when you contact us, and send messages about your account or the service.

We don’t sell your personal data, and we don’t use your project data or tool calls for advertising.

When you connect UIVOID to an AI client such as Claude, we receive the sign-in authorization you approve and the tool calls the client makes. We return the results to that client. How the client handles your conversations is covered by its provider’s privacy policy, not this one.

We share data only with the providers that run the service, and when the law requires it.

• Hetzner hosts the API, hosted MCP servers, and hosted databases.
• Vercel hosts the website and portal.
• Google provides optional Google sign-in, and Analytics, Tag Manager, and Ads on the website.
• Mixpanel provides website analytics, session recording, and heatmaps.

Tool calls are forwarded to the API you configured. If you list a project in the MCP Registry, its listing becomes public. These providers may process data in the United States and other countries.

The website uses cookies and similar storage for analytics and advertising measurement, and to remember your theme. The portal uses cookies to keep you signed in. You can block or clear cookies in your browser.

We keep account, project, audit log, and hosted database data for as long as your account is active. Deleting a project removes its audit log. Ask us to delete your account and we’ll remove the data in it, except what we must keep by law.

Depending on where you live, you may have the right to:

• Ask for a copy of your personal data.
• Correct data that is wrong.
• Delete your account and the data in it.
• Object to or limit how we use your data.

Email hello@uivoid.app to make a request. You can also complain to your local data protection authority.

If you build an MCP server on UIVOID that handles other people’s data, you decide what it collects and you are responsible for telling them. We process that data on your behalf.

UIVOID is for developers and teams. It isn’t meant for anyone under 16.

We’ll post changes here and update the date at the top of this page.

Questions about this policy: hello@uivoid.app