KASPR MCP Servers: Privacy Notice

1. Who we are

The MCP servers are operated by KASPR Datahaus Pty Ltd (ABN 67 624 542 909), Prahran, Victoria, Australia ("KASPR", "we"). We handle personal information under the Australian Privacy Principles in the Privacy Act 1988 (Cth). Contact: info@kasprdata.com.

2. What we collect

Account identity. When you sign in, our sign-in provider confirms who you are and gives us a stable account identifier and, where you allow it, your verified email address. If you use an API key instead, we keep a one-way hash of the key and the email address it was issued to. We do not receive or store your password.

Tool requests. For each tool call we record the tool's name, the time, the arguments that identify what was asked for (for example a place name or area id, a country code, a company identifier, a date range or a search term), the places and companies the answer covered, the number of rows returned, whether it succeeded, and the credits it used.

Your own locations. When you ask KASPR to score your sites, the addresses or coordinates you give are used only to find the districts they fall in and are not stored; we record only how many sites and districts were checked.

Technical data. Our hosting provider's servers log the network address the request came from and the time, as any web service does.

What we do not collect. We do not receive or ask for your conversation with the AI assistant, only the arguments the assistant sends to our tools. We do not collect payment card details, health information, government identifiers or precise location of you or your device, and we set no advertising or tracking cookies.

3. Why we use it

To answer the tool calls you make; to apply your account's access level and fair-use limits (calls per minute, credits per month, distinct places per day); to prevent abuse, including detecting accounts that systematically download large parts of the dataset, which we do by counting the distinct places each account's calls cover; to keep the service secure and fix faults; and to answer your support requests.

We do not sell personal information, use it for advertising, build behavioural profiles, or use it or your requests to train AI models.

4. Who receives it

Service providers who process it for us under contract: our sign-in provider (Auth0, by Okta), which handles sign-in and holds your login record; our hosting provider (Render) and its network edge (Cloudflare), which run the servers and keep their logs; and Amazon Web Services (Simple Email Service), which delivers one-time sign-in codes by email. The KASPR data service that the MCP servers read from is our own and receives only an account identifier and access level, not your email address.

We disclose information to authorities only where the law requires it. Some providers process data outside Australia, including in the United States and Singapore.

5. How long we keep it

Usage and tool-request records: 13 months, then deleted automatically. Timing verdicts: 30 days. Scheduling windows and holds: 31 days. Job outcomes you report: 90 days. Daily place counts: 2 days. Records for a trial key: until 30 days after the key expires.

Your account record (identifier and email address): while your account is in use; we delete it on request. Hosting logs with network addresses: for the short period our hosting provider keeps them, at most 30 days.

6. Your choices and rights

You can stop using the servers at any time by disconnecting KASPR in your AI assistant's settings; nothing further is collected after that. You can ask us for a copy of the personal information we hold about you, to correct it, or to delete your account and its records, by writing to info@kasprdata.com; we reply within 30 days. If you are not satisfied with our answer, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

7. Security

Connections use HTTPS. API keys are stored only as hashes, sign-in tokens are verified on every request and expire after an hour, and access to the server's records is limited to KASPR staff who run the service.

8. Changes

We will update this notice when what we collect or how we use it changes, and show the date of the latest version at the top.