# Senders.ai MCP Server — Privacy Policy

**Effective date:** 2026-07-05 · **Version:** 1.2

## What data the MCP server collects

When you connect an AI assistant to Senders.ai via the Model Context Protocol (MCP), the server collects:

- **Account identifiers** — your Senders.ai account ID and MCP token, used to authenticate every tool call.
- **Tool call inputs and outputs** — logged to `mcp_tool_logs` (company ID, tool name, input parameters, output summary, timestamp). Retained for 90 days.
- **Prospect and campaign data** — email addresses, names, company names, and custom variables you supply to prospects(import) or stage_send. Stored in your account only; never shared across accounts.
- **Email send records** — subject lines, send timestamps, delivery status, and reply flags. Retained for the life of your account.
- **Domain and deliverability data** — DNS records and warmup scores fetched on demand; cached per domain for up to 7 days.

## What data the MCP server does NOT collect

- Email body content is not stored after delivery (the send record holds metadata only).
- The AI assistant's conversation history is not accessible to or stored by Senders.ai.
- No data is collected from third-party websites or services beyond what you explicitly instruct the assistant to fetch (e.g. check_domain on a domain you name).

## How data is used

- To execute tool calls on your behalf (sending, scheduling, enrichment, verification).
- To enforce per-account rate limits, quota, and suppression lists.
- To generate activity logs visible to you via notes(get_activity).
- Aggregate, anonymised delivery metrics may be used to improve platform deliverability models.

## Data sharing

- Prospect data you upload or supply is tenant-isolated. No data you upload is visible to or accessible by other Senders.ai accounts.
- Business contact data sourced through the server from licensed third-party providers or Senders' own datasets may be served from a cache maintained by Senders.ai.
- Third-party enrichment (Apollo) and verification (MillionVerifier) providers receive only the email addresses or Apollo contact IDs you explicitly enrich or verify. Their own privacy policies apply.
- Senders.ai does not sell the personal data of its users or customers. Licensed business-contact data made available through the Service is handled as described above.

## Data retention and deletion

- Tool logs: 90 days.
- Prospect and campaign data: retained until you delete the prospect or archive the campaign, or until account closure.
- On account closure, all personal data is deleted within 30 days (financial records such as invoices are retained where required by law).
- You can request a copy of your data or its deletion at any time by emailing privacy@senders.co; we complete verified requests within 30 days.

## Security

- All MCP traffic is TLS 1.2+ encrypted.
- MCP tokens are scoped per account. You can revoke access at any time by disconnecting the connector in your AI assistant, or contact privacy@senders.co to regenerate your token.
- The server runs on infrastructure in the EU (Hetzner, Germany).

## Contact

privacy@senders.co · senders.ai/privacy