Skip to content

PRIVACY.md

Latest commit

 

History

History
132 lines (97 loc) · 4.68 KB

PRIVACY.md

File metadata and controls

132 lines (97 loc) · 4.68 KB

Privacy Policy for SpeakMCP

📋 Privacy Policy Overview

Effective Date: August 14, 2025
Last Updated: August 14, 2025

SpeakMCP is designed with privacy as a fundamental principle. This privacy policy explains how we collect, use, and protect your information.

🚫 No Data Collection

Core Principle

SpeakMCP operates on a zero-data-collection principle. We do not collect, store, or transmit any personal information to external servers.

What We Don't Collect

  • No Personal Information: Names, emails, or identifying information
  • No Conversation Data: Your conversations are never transmitted to our servers
  • No API Keys: API keys are stored locally and never transmitted to us
  • No Usage Analytics: No usage tracking or analytics collection
  • No Telemetry: No system or usage telemetry

🔐 Data Storage

Local-Only Storage

All data is stored exclusively on your local machine:

  • Conversations: Stored in local files on your device
  • Settings: Stored in local configuration files
  • API Keys: Encrypted and stored locally using system keychain
  • MCP Server Configurations: Stored in local JSON files

No Cloud Sync

  • No External Storage: No data is stored in cloud services
  • No Cross-Device Sync: Data does not sync across devices
  • No Backup to External Services: No automatic backups to external services

🏗️ Technical Details

Data Locations

  • macOS: ~/Library/Application Support/SpeakMCP/
  • Windows: %APPDATA%/SpeakMCP/
  • Linux: ~/.config/SpeakMCP/

Encryption

  • API Keys: Encrypted using system keychain/keyring
  • Sensitive Settings: Encrypted using AES-256 encryption
  • File Permissions: Config files have restricted file permissions

🔍 Third-Party Services

API Providers

When you use SpeakMCP with external services (OpenAI, Groq, Gemini, etc.):

  • Direct Connection: Your API calls go directly to the service provider
  • No Proxy: We do not proxy or intercept your communications
  • Provider Policies: Subject to the privacy policies of the respective providers

MCP Servers

  • Local Execution: MCP servers run locally on your machine
  • No External Communication: Unless explicitly configured by you
  • User Control: You control which MCP servers to install and use

⚖️ Your Rights

Data Control

  • Full Access: Complete access to all your data
  • Export: Export all your data at any time
  • Deletion: Delete all data by uninstalling the application
  • Modification: Modify any stored data directly

No Account Required

  • No Registration: No account creation required
  • No Login: No login or authentication required
  • Anonymous Use: Use completely anonymously

🛡️ Security Measures

Local Security

  • File Encryption: Sensitive configuration files are encrypted
  • Access Control: Restricted file permissions on all data
  • Memory Protection: Sensitive data cleared from memory after use
  • Secure Storage: API keys stored in system keychain/keyring

Network Security

  • HTTPS Only: All network connections use HTTPS
  • Certificate Validation: SSL certificate validation enabled
  • No Man-in-the-Middle: No proxy or interception capability

📞 Contact Information

Privacy Questions

  • Email: privacy@speakmcp.com
  • GitHub: Create an issue on our GitHub repository
  • Response Time: Within 48 hours

Data Requests

  • Data Export: Request data export at any time
  • Data Deletion: Instructions for complete data removal
  • Questions: Any privacy-related questions

🔄 Policy Updates

Update Process

  • Notification: Policy updates will be posted on GitHub
  • Version History: Complete version history maintained
  • User Notification: Significant changes announced via release notes

Effective Date

This privacy policy is effective as of August 14, 2025.

📄 Compliance

Legal Compliance

  • GDPR Compliant: Designed to be compliant with GDPR requirements
  • CCPA Compliant: Compliant with California Consumer Privacy Act
  • Local Laws: Compliant with local data protection laws

Open Source

  • Transparency: Full source code available for review
  • Audit: Open to security and privacy audits
  • Community: Community-driven privacy improvements

🏛️ Legal Basis

Jurisdiction

This privacy policy is governed by the laws of the jurisdiction where the software is developed and distributed.

Changes to Policy

Any changes to this privacy policy will be posted on our GitHub repository and will take effect immediately upon posting.

Last Updated: August 14, 2025
Version: 1.0