PINEGAP INC.

MCP Connector — Privacy Policy

Effective date: May 28, 2026

This Privacy Policy explains how Pinegap Technologies, Inc. ("Pinegap," "we," "our," or "us") collects, uses, and protects data processed through the Pinegap MCP Connector (the "Connector"), which allows Claude and other MCP-compatible AI clients to call Pinegap's equity research tools on your behalf.

For our general platform privacy policy, see pinegap.ai/privacy-policy.

1. WHO WE ARE

Pinegap is an institutional research and predictive analytics platform headquartered at 80 Slope Dr, Short Hills, NJ 07078, United States. The Connector is a remote MCP server hosted at https://mcp.pinegap.ai.

2. SCOPE

This policy applies solely to data processed when you use the Pinegap MCP Connector. It covers tool calls made through Claude or other MCP clients that connect to https://mcp.pinegap.ai.

3. DATA WE COLLECT

Authentication data

When you connect via OAuth, we receive your email address and account identifier from WorkOS AuthKit to verify your Pinegap account. OAuth tokens are short-lived and are not stored beyond the active session. API keys (format: pgap_sk_...) are stored as hashed values in our database.

Tool call data

Each tool call includes the tool name and input parameters you (or the AI client) supply — for example, a stock ticker symbol, fiscal year, or quarter. We use this data solely to fulfil the request and return results. We do not read or store conversation context beyond what is required to complete the call.

Usage metrics

We log each tool call (tool name, timestamp, account identifier, response latency, and success/error status) for rate limiting, billing, abuse prevention, and service improvement. These logs do not include the content of tool responses.

Cache data

Some tool responses are cached in Redis to improve performance. Cached entries contain only the serialised tool response and expire automatically according to per-tool TTL values (ranging from 5 minutes to 45 days depending on data type).

4. HOW WE USE YOUR DATA

  • To authenticate your identity and authorise access to tools.
  • To process tool calls and return results to your MCP client.
  • To enforce rate limits and prevent abuse of the Connector.
  • To monitor service health, diagnose errors, and improve reliability.
  • To calculate usage for billing purposes under enterprise agreements.

We do not use tool call inputs or outputs to train AI models, sell data to third parties, or build advertising profiles.

5. THIRD-PARTY SERVICES

The Connector integrates with the following third-party services to operate:

  • WorkOS AuthKit — OAuth 2.1 identity verification. Your email is sent to WorkOS solely to validate your token. See workos.com/privacy-policy.
  • Amazon Web Services (AWS) — Cloud infrastructure (compute, database, Redis cache) hosted in US regions. See aws.amazon.com/privacy.

We do not share your data with any other third parties except as required by law.

6. DATA RETENTION

Usage logs — retained for 90 days, then automatically purged.

Cache entries — expire per-tool TTL (5 minutes to 45 days).

API keys — retained until you or the Pinegap team revokes them, or your account is closed.

Account data — retained for the life of your account. On account closure, personal data is deleted within 30 days.

7. SECURITY

All data in transit is encrypted via TLS 1.2+. Authentication tokens are short-lived. API keys are stored as hashed values. Access to production infrastructure is restricted to authorised Pinegap personnel and requires multi-factor authentication.

8. YOUR RIGHTS

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise these rights or to request revocation of an API key, contact us at the address below.

9. CHANGES TO THIS POLICY

We may update this policy from time to time. Material changes will be communicated via the Pinegap app or email. Continued use of the Connector after the effective date of a revised policy constitutes acceptance.

10. CONTACT

For privacy questions or data requests related to the MCP Connector:

Pinegap Technologies, Inc.
80 Slope Dr, Short Hills, NJ 07078, United States
Email: support@pinegap.us