Privacy Policy
Last updated: October 12, 2026
About ClosedMCP
ClosedMCP is operated by CanpAI, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713.
Information we handle
When you sign in with Google, we receive your name, email address, and, when Google confirms it, your company domain. We keep the identity and company workspace information needed to provide ClosedMCP.
We store company and organization settings, projects and files you write, OAuth client registrations and tokens, and credentials you provide to connect third-party MCP services. Stored connection secrets and OAuth records are sealed with encryption.
We record tool-call activity, including who called a tool, the tool, a hash of its arguments, and the allow or deny decision. The audit table keeps a rolling window of recent entries.
How we use and share it
We use this information to sign you in, operate company workspaces and projects, connect tools, enforce permissions, and show activity. We do not sell your data or run ads in ClosedMCP.
Google provides sign-in. We send issue reports, including any screenshot and diagnostic details you choose to submit, to GitHub. Reports are forwarded to GitHub without saving a report copy on our servers. Our infrastructure configuration uses OVHcloud for hosting.
When you connect a third-party MCP service, information needed for that connection is sent to that service as part of your requested tool use.
AI apps you connect
When you connect an AI app such as Claude, ChatGPT, Cursor or Codex, tool results you request are returned to that app. How that provider handles them is governed by its own terms and privacy policy.
Security and location
Connections to ClosedMCP use HTTPS. Stored connection secrets and OAuth records are encrypted. Every tool call is checked against the caller's own permissions. ClosedMCP is hosted in the United States.
Retention and deletion
Deleting a project stops and hides it. You can restore it within seven days. After that, the project is eligible for purge; associated database data is retained unless you selected the option to delete it. Published apps remain off after a restore until you publish again.
Your choices
You can delete projects and disconnect services at any time in ClosedMCP. To access, correct, export or delete your personal information, or to close your account, email support@canpai.io and we will respond within 30 days.
ClosedMCP is not directed to children under 16, and we do not knowingly collect their information.
Changes to this policy
If we change this policy, we will update the date above. For significant changes, we will also notify account holders by email or in ClosedMCP.
Contact
Questions or account and data deletion requests: support@canpai.io