Privacy Policy
Last updated: March 23, 2026
1. Who We Are
EternalMCP ("we", "us", "our") operates the website eternalmcp.com and the EternalMCP for Android mobile application. We are committed to protecting the privacy of our users in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.
2. Data We Collect
Account Data: Email address, display name, and authentication provider (Google or email). This is collected during registration to create your account.
Wallet & Transaction Data: Credit balance, recharge history, pack purchases, and Razorpay payment references. We never store your card details, UPI ID, or bank account numbers — Razorpay handles all payment processing.
Usage Metadata: Token counts per API call (input/output token numbers only), timestamps, and model selected. We use this solely for billing and abuse prevention.
What We Do NOT Collect: We never collect, store, or transmit the content of your conversations. Chat messages are processed in-memory on our server to relay to the AI model and are never logged, stored, or associated with your account. Chat history exists only on your device.
3. How We Use Your Data
We use your personal data only for the following purposes:
• To create and manage your account
• To process payments and maintain your credit balance
• To provide the AI chat service (relay messages to Anthropic API)
• To prevent fraud and enforce our terms
• To respond to support requests
4. Zero PII to AI Models
When your messages are sent to the AI model (Claude by Anthropic), we strip all personally identifiable information. Your user ID, email, name, wallet balance, and device information are never forwarded to the AI provider. The AI model receives only the conversation messages and selected model parameters.
5. Data Storage & Security
All user data is stored on servers located in India and managed through Supabase (PostgreSQL). Data is encrypted in transit (TLS 1.3) and sensitive fields (OAuth tokens, API credentials) are encrypted at rest using AES-256.
Chat history is stored exclusively on your device using local storage. It is never transmitted to our servers. Clearing the app data or uninstalling the app permanently deletes your chat history.
6. Third-Party Services
We use the following third-party services:
• Anthropic — AI model provider (receives only conversation messages, no PII)
• Firebase Authentication — Account authentication (email/Google SSO)
• Razorpay — Payment processing (handles all financial data)
• Supabase — Database hosting (India region)
• Vercel — Application hosting
• Google APIs — Gmail integration (only with explicit OAuth consent)
7. Your Rights Under DPDP Act 2023
As a Data Principal under the DPDP Act, you have the right to:
• Access — Request a summary of your personal data we hold
• Correction — Request correction of inaccurate data
• Erasure — Request deletion of your account and associated data
• Grievance Redressal — Lodge a complaint with our Data Protection Officer
• Nominate — Nominate another person to exercise your rights in case of death or incapacity
8. Data Retention
Account data is retained for as long as your account is active. Transaction records are retained for 7 years as required by Indian financial regulations. Upon account deletion, personal data is erased within 30 days, except where retention is required by law.
9. Children's Privacy
EternalMCP is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have collected data from a user under 18, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance.
11. Contact Us
For any privacy-related questions, data requests, or to reach our Data Protection Officer:
Email: privacy@eternalmcp.com
Website: eternalmcp.com