# Privacy policy > Get MCP Ads is an MCP gateway published by BENLY HLG. Your advertising data is > never stored here. Your account and your encrypted platform tokens are, and > they sit in the United States. | Field | Value | | --- | --- | | Controller | BENLY HLG | | Contact | contact@getmcpads.com | | Last updated | 28 August 2026 | | Supervisory authority | CNIL (France) | | Processors | 5, of which 3 outside the European Union | | Human readable | https://www.getmcpads.com/privacy | ## What we collect - **Your account**: email address and name, and a password hash if you signed up with one. Sign-in, sessions and password resets are handled by Clerk. - **Your organisation**: its name, who belongs to it, and the invitations you sent. An invitation link is kept only as a hash and cannot be recovered. - **Your advertising connections**: the access tokens Meta Ads, Pinterest Ads, Google Ads, TikTok Ads, Search Console and Google Analytics 4 issue when you connect them, encrypted, plus the identifiers of the accounts you ticked as reachable. - **Your usage**: a count of tool calls per month, which applies your plan's limit. It holds a count, never a query. ## What we never do - We do not sell or rent your data, and nothing here profiles you. - We do not keep your advertising data. Campaigns, spend and performance are read from the platform on demand and passed straight to your assistant. - We never hand your advertising tokens to the assistant. It calls this gateway, and the gateway calls the platform. No tool returns a token. ## How tokens are protected Advertising access tokens are encrypted with **AES-256-GCM** before they are written to the database. The encryption key is not stored alongside them, so a copy of the database on its own gives no access to any advertising account. Disconnecting a platform deletes the row rather than marking it revoked. ## Transfers outside the European Union 3 of the 5 processors below work outside the European Union, in the United States: Vercel, Neon and Clerk. The database is hosted in Virginia, the functions that render the site and the dashboard run in Virginia, and sign-in is handled from the United States. Requests reach the site through an edge location in Paris, the MCP gateway answers from the nearest Cloudflare location and requests from Europe are served in Europe, and transactional email is sent from Ireland. ## Processors | Processor | What it does | Data it can see | Where it is processed | Outside the EU | Policy | | --- | --- | --- | --- | --- | --- | | Vercel | Hosts the website and the dashboard. | Request metadata, and the session of a signed-in user. | Edge in Paris, functions in Virginia (iad1). | Yes | https://vercel.com/legal/privacy-policy | | Neon | PostgreSQL database. | Account, organisation, memberships, invitations, encrypted advertising tokens, usage counters. | AWS us-east-1, Virginia. | Yes | https://neon.com/privacy-policy | | Cloudflare | Runs the MCP gateway and serves DNS. | Request metadata and the bearer token presented by an MCP client. | Nearest edge location. Requests from Europe are served in Europe. | No | https://www.cloudflare.com/privacypolicy/ | | Clerk | Sign-in, sign-up, password reset and session management. | Email address, name, password hash, session and device metadata. | United States. | Yes | https://clerk.com/legal/privacy | | Resend | Sends transactional email: invitations and the welcome message. | Recipient email address, and the content of the message. | AWS eu-west-1, Ireland. | No | https://resend.com/legal/privacy-policy | ## What is stored on your device The regulation does not distinguish a cookie from local storage: what counts is reading or writing on the device. Both are listed, and the question asked of each is whether it is strictly necessary for the service that was asked for. One entry out of 7 is not strictly necessary, and that is all anybody is ever asked about. There is no advertising cookie, no third-party tracker and no cross-site identifier. | Item | Kind | Set by | Why it is there | How long | Strictly necessary | | --- | --- | --- | --- | --- | --- | | `__session, __client_uat` | cookie | Clerk | Keeps you signed in, so the dashboard does not ask again on every page. | Until you sign out. | Yes | | `gma_org` | cookie | Get MCP Ads | Remembers which organisation you are looking at, when you belong to more than one. | One year. | Yes | | `oauth state` | cookie | Get MCP Ads | Ties an advertising platform's authorisation response to the request you started. Without it, the flow cannot be verified. | The duration of the connection flow. | Yes | | `sidebar:state` | cookie | Get MCP Ads | Remembers whether you collapsed the sidebar. | One year. | Yes | | `theme` | local storage | Get MCP Ads | Remembers whether you chose light or dark. | Until you clear your browser data. | Yes | | `gma_consent` | local storage | Get MCP Ads | Remembers your answer about analytics, so we do not ask again. | Six months, then we ask again. | Yes | | `Vercel Web Analytics` | local storage | Vercel | Counts page views and where visitors come from. No cookie, no cross-site identifier, no profile. | Aggregated. Nothing identifies a visitor. | No | Vercel Web Analytics does not start until the visitor answers, and no answer means it does not start. The answer is kept in local storage, not in a cookie, never leaves the device, and expires after six months. It can be withdrawn from https://www.getmcpads.com/privacy at any time. ## How long data is kept - **Your account and organisation**: For as long as the account exists. Deleting the account removes them, and an organisation left with nobody in it is removed with it. - **Advertising access tokens**: Until you disconnect the platform, or the platform revokes them. Disconnecting deletes the row rather than marking it revoked. - **Advertising data itself**: Never stored. Campaigns, spend and performance are read from the platform on demand and passed straight to your assistant. - **Usage counters**: Thirteen months, so a year-on-year comparison is possible. They hold a count, not a query. - **Invitations**: Kept as a record of who was invited and when. The link itself is stored only as a hash and is never recoverable. ## Your rights BENLY HLG is the controller. Under the GDPR you may, at any time: - Ask what we hold about you, and get a copy. - Correct anything that is wrong. - Delete your account, which removes it and everything attached to it. - Object to a processing, or ask that it be restricted. - Complain to your supervisory authority. In France that is the CNIL. Write to contact@getmcpads.com and we answer within one month. Complaints go to the CNIL at https://www.cnil.fr/en/plaintes.