A minimal-data approach.
Eviduct is in private pilot. This notice describes the specific data handled by the pilot application form, the MCP monitoring infrastructure and company API access.
Contact requests
When you request pilot access, we store the email address, company name, use case, submission time and an irreversible hash derived from the network address for rate limiting. We use this information only to review and respond to your request. We retain submissions for up to 180 days and then delete them.
API access and workspace usage
Company access credentials are stored as cryptographic hashes. Usage counters and key issue/revoke timestamps are recorded to enforce quotas. The app uses short-lived browser session storage for a key entered by the user, not third-party behavioral tracking.
Observation data
Read-only monitoring connects to public MCP endpoints and records handshake results, performance and tool schemas. Public registry descriptions are publisher-controlled. We don't collect customer prompts, private endpoint credentials or tool-execution content as part of these probes.
Data requests
Until a dedicated support mailbox is published, you may submit a data-access or deletion request using the pilot contact form on the homepage, stating "Privacy / deletion request" in your description. Identity verification may be required before disclosure or deletion. If you have been contacted by the Eviduct operator, you may reply directly.
Infrastructure
The application is hosted on Render and stores pilot requests and structured monitoring data in Neon PostgreSQL. We do not claim that infrastructure location determines the geographic scope of data processing.
No commercial payment data
The current pilot does not process live payments. Sandbox receipts represent zero-dollar simulated transactions and must not be interpreted as proof of an actual purchase.
Status of this policy
This is a limited pre-launch notice, not a substitute for a company-specific legal privacy policy. The operator's legal identity, registered contact details and additional contractual documents must be confirmed before broad commercial promotion.