MCP Connector Privacy Policy

Last updated: Oct 12, 2026

1. Who we are and what this policy covers

This Privacy Policy explains how Bryckel Inc. (“Bryckel”, “we”, “us”) collects, uses and shares information when you use the Bryckel MCP Connector (the “Connector”). The Connector is a remote Model Context Protocol (MCP) server that gives AI assistants (such as Claude, ChatGPT, or any other MCP-compatible client) access to Bryckel’s commercial real estate tools and agents.

This policy applies only to the Connector. Bryckel’s website and other products are governed by their own privacy policies. If you use the Connector on behalf of a company, that company is our customer and this policy describes how we handle data on its behalf and on yours. The Connector is offered only to businesses located in the United States and Canada and is not directed to individuals or organizations in other jurisdictions.

Bryckel Inc., 1007 N Orange Street, 4th Floor, Wilmington, Delaware 19801, USA. Privacy contact: support@bryckel.ai.

2. How the Connector works

Understanding the data flow explains what we do and do not see:

• You connect through an AI assistant. You add the Connector to your AI assistant (Claude, ChatGPT, or another MCP-compatible client) and sign in with your Bryckel account using OAuth 2.0. Bryckel never receives your AI assistant password, and your AI assistant never receives your Bryckel password.

• We receive tool calls, not conversations. The AI assistant sends the Connector only the specific inputs a tool needs — for example a property address, a document link, or an agent name. Bryckel does not receive your chat history, prompts, other attachments, or the assistant’s reasoning.

• Agents are instructions, not stored workflows. When you run a Bryckel agent, the Connector returns a workflow specification and single-use links to the files that workflow needs; the AI assistant downloads those files and executes the workflow. The resulting abstracts, reports and files are produced by the assistant and saved where you direct. Bryckel does not receive or store them.

• Document processing is temporary. When a tool needs OCR or a searchable PDF, your AI assistant uploads the document to Bryckel using a one-time upload link the Connector generates. The document is stored temporarily in encrypted cloud storage subject to an automatic lifecycle deletion policy with a one-day age threshold; the storage provider applies the policy on its own schedule, so actual deletion may occur after that threshold. Bryckel does not retain or use document content beyond that process.

• Bryckel cannot browse your files. Bryckel has no access to your computer, your file system, or any folder — including one synced by OneDrive. Your AI assistant reads and writes local files itself, using its own file access. Bryckel receives only a copy of a document your assistant explicitly uploads for OCR — held temporarily as described in Section 3.4 — and returns results (extracted text, or a link to a searchable PDF) back to your assistant to save wherever you direct.

3. Information we collect

3.1 Account and license information

When your company subscribes and you sign in, we hold: your name, work email address, company name, the agents and personas your license grants, and billing contact details. Payments are processed by a third-party payment processor; we store a reference to the payment record, not card numbers.

3.2 Authentication data

Bryckel issues OAuth tokens to your AI assistant so it can call the Connector on your behalf. Bryckel does not connect to Microsoft, Google, or any other cloud storage service, and does not request or hold credentials for one. Any access to files in a service like OneDrive is performed by your AI assistant using its own capabilities, entirely outside the Connector.

3.3 Agent requests and tool inputs

When your assistant requests a Bryckel agent, the Connector receives only the identity of the requested agent and the account information needed to authenticate the request and enforce your license — not the conversation, documents, or outputs produced when the assistant follows that agent’s instructions.

When your assistant invokes a Bryckel tool, we receive the inputs needed to perform it: property street addresses and their coordinates, which you supply for mapping a property and its surroundings — the Connector does not request or collect your own location or your device’s location; map images a tool produces are returned through a download link that expires after one hour (mapping tools); a filename, file size, and content type, followed by the document itself uploaded via a one-time link (document/OCR tools); public web page URLs or search queries, which we send to a third-party web-retrieval service to retrieve or search public web content. Bryckel does not send your documents or your Bryckel account identity to that service (research tools); and agent names or option values (agent tools). If your assistant includes text from your conversation as part of a tool input — for example, in a search query — Bryckel receives that text as part of the request. Tool inputs are processed to fulfill the request and are not stored beyond it except as described in Sections 3.4 and 3.6.

3.4 Document content (temporary storage)

For OCR and searchable-PDF tools, your AI assistant uploads the document to Bryckel using a one-time upload link, and Bryckel sends it to a third-party document-analysis service for analysis. The extracted text is returned to your assistant; for searchable PDFs, Bryckel also returns a download link to the searchable version that expires after one hour. Your assistant decides what to do with these results, including replacing a local file, such as one in a folder synced by OneDrive, either automatically or only after you confirm, depending on how you’ve set up the agent. Bryckel does not access your file system or write to any file itself. The uploaded document and the searchable PDF are stored in encrypted cloud storage and deleted automatically under a lifecycle deletion rule configured with a one-day age threshold. the storage provider applies the rule on its own schedule, so actual deletion may occur after the one-day threshold; the download link expires after one hour regardless. The document-analysis service stores the submitted document and its analysis results for 24 hours after analysis completes and then deletes both automatically. Bryckel does not keep a copy of the extracted text beyond the tool call.

3.5 No access to your files or cloud storage

Bryckel does not connect to OneDrive, SharePoint, Google Drive, or any other cloud storage or file system service. Bryckel has no ability to browse, read, or write files on your computer or in your cloud storage, and never receives a Microsoft (or other provider) OAuth token for this purpose.

3.6 Service logs

We keep operational logs to run and secure the Connector. Application logs record, for each request, your user and organization identifiers (used to authenticate the request), the request path, timestamp and response status; they do not record tool arguments, document content, extracted text or agent outputs, and errors are captured by a global exception handler that writes sanitized messages. Hosting-layer (HTTP ingress) logs record the request path (which, for agent file downloads, includes the single-use token — acceptable because each token works once and expires within 30 minutes), timestamp, status and the network address the request came from — normally a server operated by your AI assistant provider rather than your own device. Availability monitoring records only the results of uptime checks. Logs are held in our cloud provider’s logging and monitoring services and retained for 30 days.

4. How we use information

• Provide the Connector: authenticate you, enforce your license, run the tools you invoke.

• Operate and secure the service: detect abuse, diagnose failures, monitor uptime.

• Billing and account administration.

• Communicate with you about the service: security notices, material changes, support responses.

• Comply with law and enforce our agreements.

5. What we do not do

• No AI training. We do not use your documents, extracted text, tool inputs or agent outputs to train or improve machine-learning models.

• No sale of personal information. We do not sell or rent personal information and do not share it for cross-context behavioral advertising.

• No conversation access. We cannot read your chats with the AI assistant; we receive only the tool inputs described above. If your assistant includes text from your conversation as part of a tool input, Bryckel receives that text as part of the request (see Section 3.3).

• Limited document retention. Document content is stored temporarily in encrypted cloud storage to complete the tool call and is automatically deleted under a lifecycle policy with a one-day age threshold. We do not use it for any other purpose.

6. Sub-processors and third parties

We use the following service providers to run the Connector. Each processes data only on our instructions and only as needed for the function shown.

AI assistant providers. Your AI assistant provider (for example, Anthropic for Claude, OpenAI for ChatGPT, or any other MCP client you use) is not a Bryckel sub-processor. Your relationship with that provider, including how it handles your conversations, is governed by its own terms and privacy policy.

Other disclosures. We may disclose information to comply with law, respond to lawful requests, protect the rights and safety of Bryckel and its users, or in connection with a merger, acquisition or sale of assets (with notice to you). Our employees and contractors access data only on a need-to-know basis, and access is logged.

7. Retention

8. Security

All traffic to the Connector uses HTTPS. Authentication is OAuth 2.0; the Connector does not accept passwords. Bryckel stores only an irreversible hash of each token it issues, not the token itself. Links the Connector issues are short-lived: upload, searchable-PDF and map-image links expire after one hour; links to agent files work once and expire within 30 minutes, after which the file can be obtained only by running the agent again. Access to production systems is restricted to authorized personnel and logged. Document content is stored temporarily in encrypted cloud storage and automatically deleted under a lifecycle policy with a one-day age threshold; it is not otherwise written to persistent storage. If we become aware of a security incident affecting your data, we will notify affected customers without undue delay.

9. Your choices and rights

9.1 Disconnect or revoke

• Disconnect the Connector from within your AI assistant (Claude, ChatGPT, or your MCP client) at any time; this invalidates the Bryckel tokens issued to that client.

• Delete your account by emailing support@bryckel.ai. We delete account, license and token records within 30 days, subject to legal retention obligations.

9.2 California residents

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to know what personal information we collect, to access and correct it, to request deletion, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes other than providing the service. To exercise rights, email support@bryckel.ai. We will verify your request using your account email and respond within 45 days. We will not discriminate against you for exercising your rights.

9.3 Other US states

Residents of other states with comprehensive privacy laws may have similar rights. Contact us at support@bryckel.ai and we will honor applicable requests.

9.4 Canadian residents

If you are in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws give you the right to access and correct personal information we hold about you and to withdraw consent, subject to legal and contractual restrictions. Contact us at support@bryckel.ai.

10. Children

The Connector is a business tool and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy. For material changes we will give at least 30 days’ notice by email to your account address before the change takes effect. The “Last updated” date at the top reflects the current version. Continued use after the effective date constitutes acceptance.

12. Contact

Questions or requests: support@bryckel.ai

Bryckel Inc., 1007 N Orange Street, 4th Floor, Wilmington, Delaware 19801, USA