Privacy Policy

1. Introduction

Welcome to Pocket ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Workspace and organization details
• API credentials and configurations
• Payment and billing information
• Communications with us

2.2 Information Automatically Collected

When you use our Service, we automatically collect:

• Log data (IP address, browser type, operating system)
• Usage data (features used, actions taken, time stamps)
• Device information
• Cookies and similar tracking technologies
• Analytics data through Fathom Analytics (privacy-friendly)

2.3 API and Server Data

To provide the Service, we process:

• API specifications and endpoint configurations
• MCP server settings and metadata
• Server usage statistics and analytics
• Authentication credentials (encrypted)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send technical notices, updates, and security alerts
• Respond to your comments, questions, and requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf (hosting, analytics, payment processing)
• Compliance and Protection: When required by law or to protect our rights, property, or safety
• Business Transfers: In connection with any merger, sale, or acquisition of all or part of our business
• With Your Consent: When you explicitly consent to sharing

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and monitoring
• Secure credential storage

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal purposes.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a structured format
• Objection: Object to certain processing of your data
• Withdrawal: Withdraw consent where we rely on it

To exercise these rights, please contact us through the Service settings or support channels.

8. Cookies and Tracking

We use cookies and similar tracking technologies to collect and track information and improve our Service. You can instruct your browser to refuse all cookies or indicate when a cookie is being sent.

We use Fathom Analytics, a privacy-friendly analytics service that does not use cookies and complies with GDPR, ePrivacy, and other privacy regulations.

9. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

When you connect external APIs or services through Pocket, those connections are subject to the privacy policies of those third-party services.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

13. GDPR Compliance

If you are in the European Economic Area (EEA), we process your personal data in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing include:

• Contract performance
• Legal obligations
• Legitimate interests
• Your consent

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us through the Service or our support channels.