Skip to content

Privacy Policy / Data Policy

Canonical HTML: https://akashic-mcp.com/privacy.html
Effective: 30 September 2026 (operational draft for legal AUDITOR review — not a certification)

Using the platform constitutes acceptance of the Terms of Use. Related: Cookie Policy.

Who we are

  • Service: Akashic / Akashic MCP at akashic-mcp.com — hosted contextual database and MCP memory service (memories, project rules, skills, documents, todos, related tools).
  • Controller (account and service operations): operators of Akashic as presented on akashic-mcp.com. Formal registered entity name, postal address, and DPO designation await counsel confirmation.
  • Processor / service provider (Customer Content): for memories, documents, and other content you store (“Customer Content”), you or your organization typically determine purposes and means. Akashic processes that content to provide, secure, and operate the Service.

Data we process

  • Account / auth: email, identifiers, credentials or OAuth tokens/session cookies (including Google OAuth where enabled).
  • Customer Content: memories and metadata, uploaded files, project/sharing settings. Optional at-rest memory encryption may be available with per-user keys.
  • Usage / diagnostics: technical logs; Sentry when configured; privacy/support requests via authenticated admin flows.
  • Cookies: necessary / analytics / marketing — see Cookie Policy. Analytics (Google Analytics, Microsoft Clarity) load only with analytics consent on marketing, docs, and admin surfaces where the CMP is installed (admin shares the marketing consent storage key).
  • Contract: account and Service delivery, including storing/retrieving Customer Content you request.
  • Legitimate interests: security, abuse prevention, reliability, product improvement (balanced against rights).
  • Consent: non-essential cookies/analytics/marketing.
  • Legal obligation: lawful requests and required records.

Sharing and subprocessors (high level)

No sale of personal information for money. High-level categories: hosting/infrastructure; OAuth providers; analytics (with consent); Sentry (when enabled); advisors/authorities when required. Enterprise DPA should list exact subprocessors — not invented here.

International transfers

Processing/storage may occur outside your country depending on deployment (including Kubernetes/Docker environments). Transfer safeguards will be documented with counsel where required.

Retention

Account data while active (+ reasonable post-closure window); Customer Content until deletion/closure (subject to backup rotation and legal holds); logs for operational periods.

Security

Production-oriented controls (auth, TLS, rate limiting, validation, optional encryption). No absolute security warranty. You protect credentials, MCP tokens, and sensitivity of stored content.

Rights

  • EEA/UK-style: access, rectification, erasure, restriction, objection, portability, complaint to a supervisory authority. Authenticated privacy-request types include access, correction, deletion, complaint, other.
  • California / CCPA-style: categories and purposes as above; no monetary sale; know/delete/correct and opt-out of sale/sharing for cross-context advertising where applicable to optional marketing cookies; no discrimination for exercising rights.

Children

Not directed to children under 13; no knowing collection from under-13s.

Customer Content responsibility

You and your agents (including LLM MCP clients) decide what is stored. Akashic is not responsible for legality, accuracy, or fitness of Customer Content or third-party AI decisions.

Contact

  • Admin Contact / privacy requests: /admin
  • Discord: https://discord.gg/wT3rYuy67e
  • Marketing pages: /privacy.html, /terms.html, /cookies.html