Privacy Policy

This policy explains how rx7db handles information when you visit the website or use the rx7db MCP service.

At a glance

• We do not sell personal information.
• We do not share personal information for advertising, marketing, or cross-context behavioral advertising.
• We use only the information reasonably needed to operate, secure, support, and improve rx7db.
• Usage and diagnostic logs may be reviewed and analyzed to improve reliability, safety, and product features.

Information we handle

Depending on how you use rx7db, we may handle the following categories of information:

• Website and connection data: IP address, browser or client details, timestamps, requested pages or MCP endpoints, and basic error or performance information generated when you connect to the service.
• Service content: questions, tool arguments, session identifiers, responses, and any vehicle configuration or other information you choose to provide. Do not include information you do not want processed.
• Account and authentication data: a short cryptographic fingerprint of your Anthropic API key, used to bind a session and saved vehicle profile to the key that created them. The rx7db application does not persist the raw API key.
• Communications: information you provide when you contact us, request beta access, or exercise a privacy right.

Your MCP client sends your Anthropic API key in a request header. The key is used only to run the requested internal agent invocation and is passed to Anthropic to provide that invocation. Anthropic’s handling of data is governed by its own policies and terms.

How we use and disclose information

We may use information to:

• deliver, maintain, secure, troubleshoot, and support rx7db;
• authenticate requests, maintain sessions, and remember a vehicle profile when you ask us to save one;
• monitor performance, investigate abuse or errors, and improve the accuracy, safety, reliability, and features of the product; and
• comply with law, enforce our terms, and protect users, the service, and the public.

We may use aggregated, de-identified, or otherwise minimized usage and diagnostic logs to improve rx7db. We do not sell personal information, and we do not disclose it to data brokers, advertisers, or other third parties for their own marketing or advertising purposes.

We disclose information only when necessary to operate the service, including to infrastructure, hosting, security, and AI-service providers acting on our behalf; when you direct us to do so; or when required by law, to protect rights and safety, or as part of a corporate transaction. These providers may process information in countries other than your own, subject to the safeguards required by applicable law.

Retention

We retain information only for as long as reasonably necessary for the purposes described above. Session records and associated transcripts expire after seven days of inactivity. A vehicle profile you save remains associated with your API-key fingerprint until you clear it or we no longer need to retain it. Operational logs are retained for a limited, rotating period and may be kept longer when needed for security, legal, or dispute-resolution purposes.

Security and changes to this policy

We use reasonable administrative, technical, and organizational measures intended to protect information. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

We may update this policy as rx7db changes or as legal requirements evolve. We will post the updated policy here and revise the effective date when we do. Material changes may be communicated through the service or the private-beta channel when appropriate.