# Model Context Protocol (MCP) & AI Privacy Policy

**Author & Developer:** Sanjay Sinalkar  
**Site:** [https://sinalkar.com](https://sinalkar.com)  
**License:** Open Source under the [MIT License](https://opensource.org/licenses/MIT)  
**Last Updated:** August 2026  

---

## 1. Scope & Overview

This Privacy Policy discloses the data handling principles, privacy safeguards, and security practices for all Model Context Protocol (MCP) servers, connectors, microservices, and AI integrations—specifically including the **Pinterest MCP Server** and ChatGPT marketplace connectors—developed, published, or maintained by **Sanjay Sinalkar** ("Developer").

---

## 2. MIT Open Source License Statement

All code repositories, Docker containers, and schemas associated with our MCP tools are released under the open-source **MIT License**:

> Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software.

The software is provided "AS IS", without warranty of any kind, express or implied.

---

## 3. Data Processing & Zero Remote Storage

We strictly prioritize user data privacy and security:

1. **Zero Third-Party Telemetry & Persistence:** Our MCP servers do not log, capture, store, or transmit your private data (such as Pinterest boards, pins, search queries, user IDs, or API request payloads) to any intermediate external database or remote tracking server.
2. **Local Host Execution:** When running an MCP server (e.g., Pinterest MCP) locally or in containerized Docker setups, all operations execute within your local machine or self-managed cloud host environment.
3. **Direct API Communication:** All outbound API communications (e.g., requests targeting `api.pinterest.com`) transmit directly between your client environment and official third-party endpoints over HTTPS.

---

## 4. API Keys & Token Security

To interface with third-party platforms like Pinterest:
- Users supply their own developer credentials (such as `PINTEREST_APP_ID`, `PINTEREST_APP_SECRET`, or OAuth Access Tokens).
- Credentials are stored strictly inside local environment files (`.env`), container environment variables, or local client storage.
- No API secrets, credentials, or access tokens are ever sent to or accessible by Sinalkar.com.

---

## 5. Artificial Intelligence (AI) & LLM Model Interactions

When MCP tools interact with Large Language Models (LLMs) such as OpenAI ChatGPT, Anthropic Claude, Google Gemini, or local models (via Cursor / Vibe Coding):
- Executed tool calls (e.g., `get_user_boards`, `create_pin`, `search_pins`) process strictly to perform user-requested prompt instructions.
- We do not intercept, aggregate, or train models on user prompt contexts or execution outputs.
- Users are advised to review the data privacy policies of their respective AI model platform provider.

---

## 6. Compliance with Pinterest API Terms

The Pinterest MCP server operates in full compliance with Pinterest Developer Terms of Service, Rate Limit policies, and Developer Guidelines. Users utilizing the Pinterest MCP connector must comply with Pinterest's Acceptable Use Policies.

---

## 7. Contact & Auditing

If you have questions, security disclosures, or audit feedback regarding our open-source MCP tools or AI Privacy practices:
- **Website:** [https://sinalkar.com](https://sinalkar.com)
- **GitHub:** [https://github.com/sinalkar](https://github.com/sinalkar)
- **LinkedIn:** [https://www.linkedin.com/in/sinalkar](https://www.linkedin.com/in/sinalkar)