Privacy Policy
Last updated: August 26, 2026
1. Who We Are
EternalMCP ("we", "us", "our") operates the website eternalmcp.com and the EternalMCP for Android mobile application. We are committed to protecting the privacy of our users in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.
2. Data We Collect
Account Data: Email address, display name, and authentication provider (Google or email). This is collected during registration to create your account.
Wallet & Transaction Data: Credit balance, recharge history, pack purchases, and Razorpay payment references. We never store your card details, UPI ID, or bank account numbers — Razorpay handles all payment processing.
Usage & Security Metadata: Token counts per API call, timestamps, model selected, and per-session cost records. For security, fraud-prevention and consent-record purposes we also record IP address, browser user-agent, and security flags associated with tool calls and consent events.
Astrology Data: If you use our astrology tools, we collect the birth details you provide (name, date, time and place of birth, gender, and any optional details or questions you enter). These are encrypted at rest using AES-256-GCM and are used solely to generate the reports you request.
Conversations & Memory: Your full chat transcripts are stored on your device (local storage), not in our database, and we do not retain them. To generate each response, your messages are transmitted through our servers to our AI provider and are not stored as transcripts. Separately, if Memory is enabled (it is on by default — you can turn it off or delete memories at any time in Settings), we create and store short conversation summaries, topics, key decisions and facts you share, linked to your account, for up to 90 days, to personalise your experience.
3. How We Use Your Data
We use your personal data for the following purposes:
• To create and manage your account
• To process payments and maintain your credit balance
• To provide the AI chat service (relay messages to Anthropic API)
• To prevent fraud and enforce our terms
• To respond to support requests
• Product analytics to understand usage and improve the service (PostHog)
• Personalising your experience through the Memory feature
• Generating reports you request through tools such as astrology and research
• Maintaining records that demonstrate your consent as required by law
• Security monitoring and abuse prevention, including logging of IP addresses
4. What the AI Provider Receives
We do not send your email address, account name, wallet balance or device identifiers to the AI model. The AI provider receives your conversation messages, our system instructions, and — if Memory is enabled — personalisation context that may include facts you have shared in chat (such as your role, industry or location). When you use tools that require personal inputs (for example astrology birth details), those inputs are processed by the AI provider to generate the output you requested.
5. Data Storage & Security
Your account and application data is stored in our primary database managed through Supabase (PostgreSQL). To operate the service, certain personal data is transmitted to third-party processors, some of whom process data outside India — including Anthropic (AI responses), Tavily (web search), PostHog (analytics), Sentry (error monitoring), Resend (email delivery) and Razorpay (payments). Such transfers are made in accordance with Section 16 of the Digital Personal Data Protection Act, 2023. Data is encrypted in transit (TLS 1.3) and sensitive fields (OAuth tokens, API credentials, and astrology birth details) are encrypted at rest using AES-256.
Your chat transcripts are stored on your device using local storage and are not retained in our database (see Section 2, Conversations & Memory). Clearing the app data or uninstalling the app permanently deletes your on-device chat history.
6. Third-Party Services
We use the following third-party services:
• Anthropic — AI model provider (receives conversation messages, system instructions, Memory-based personalisation context if enabled, and tool inputs you provide)
• Razorpay — Payment processing (handles all financial data)
• Supabase — Account authentication and database hosting
• Vercel — Application hosting
• Google APIs — Gmail integration (only with explicit OAuth consent)
• PostHog — Product analytics (United States)
• Tavily — Web search queries for the Web Search tool (United States)
• Sentry — Error monitoring
• OpenStreetMap (Nominatim) — Birthplace geocoding for astrology readings (receives only the birthplace text you enter, to look up its coordinates; nothing else about you is sent)
• Resend — Transactional email delivery
7. Your Rights Under DPDP Act 2023
As a Data Principal under the DPDP Act, you have the right to:
• Access — Request a summary of your personal data we hold
• Correction — Request correction of inaccurate data
• Erasure — Request deletion of your account and associated data
• Withdrawal of Consent — Withdraw your consent at any time, with the same ease with which you gave it, by writing to grievance@eternalmcp.com (a self-service control is being added in Settings). On withdrawal we will stop the related processing within a reasonable time and cause our service providers to do the same, unless continued processing is required or authorised by law. Withdrawal does not affect the lawfulness of processing already carried out, and you may bear the consequences of withdrawal, such as loss of features that depend on the withdrawn consent
• Grievance Redressal — Lodge a complaint with our Grievance Officer (see Section 12)
• Nominate — Nominate another person to exercise your rights in case of death or incapacity
8. Data Retention
Account data is retained for as long as your account is active. When you delete your account, we delete your active account records promptly and are completing the roll-out of automated deletion across all remaining data categories. Until that roll-out is complete, you can require erasure of any remaining personal data at any time by writing to grievance@eternalmcp.com, and we will complete it within 30 days — except where law requires retention (for example, financial transaction records retained for 8 financial years under the Companies Act, 2013).
9. Children's Privacy
EternalMCP is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have collected data from a user under 18, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If we make material changes to this policy, we will notify you and ask you to re-confirm your consent before you continue using the service.
11. Contact Us
For any general privacy-related questions or data requests (for formal data-rights grievances, see our Grievance Officer in Section 12):
Email: grievance@eternalmcp.com
Website: eternalmcp.com
12. Grievance Officer
In accordance with Section 8(10) and Section 13 of the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any complaints or concerns regarding the processing of your personal data.
Grievance Officer: Amit Johari
Email: grievance@eternalmcp.com
This is the designated channel for privacy and data-rights grievances. If you have a complaint about how we collect, use, store, or share your personal data, or wish to exercise your rights as a Data Principal, please contact our Grievance Officer at the email above. We will respond within 7 working days.
If you are dissatisfied with our Grievance Officer's response (or receive no response within 7 working days), you may escalate to the Data Protection Board of India.