Privacy Policy

Effective date: July 1, 2026

1. Who we are

datanephew ("we," "us," "the datanephew team") provides an MCP-based service that lets you access your business's web presence data — Google Analytics, Search Console, PageSpeed Insights, Google Business Profile, Bing Webmaster Tools, and other connected services — conversationally through AI assistants like Claude.

2. What we collect

  • Account information: your email address and name, collected when you sign up.
  • OAuth tokens: for each third-party service you connect (Google, Microsoft/Bing, and others as they're added), we store an encrypted authentication token so we can act on your behalf.
  • Domain-to-property associations: the connections you set up between your website domain and your analytics properties (e.g., which GA4 property or Search Console site belongs to which domain), so you don't have to re-specify these each time.
  • Saved action plans and summaries: notes, plans, or summaries that you or your AI assistant choose to save during a session.
  • Standard infrastructure logs: automated AWS logs generated by our hosting infrastructure. These are not used to track individual user behavior.

3. What we do NOT collect or store

We do not store the data returned by the services you connect — your Google Analytics numbers, Search Console rankings, PageSpeed scores, Business Profile stats, email marketing metrics, and so on never touch our servers for storage. That data is fetched live at the moment you ask a question, passed through to your AI assistant, and not retained afterward.

We do not track your day-to-day usage of the product on an individual basis.

4. Why we collect it

  • To authenticate you with the third-party services you choose to connect.
  • To remember your domain-to-property mappings so setup only happens once.
  • To save action plans or summaries you or your assistant create, so you can pick up where you left off.
  • To send you transactional emails (account confirmations, service notices, changes that affect your access).

5. Google API Services User Data Policy

datanephew's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google APIs is:

  • Used only to provide and display the requested information back to you through your AI assistant.
  • Never used for advertising purposes.
  • Never sold to third parties.
  • Never used to train generalized AI or machine learning models.
  • Never accessed by humans, except (a) with your explicit consent, (b) for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data has been aggregated and de-identified.

6. Third-party sharing

We do not sell or share your data with third parties, other than the infrastructure providers necessary to run the service (currently Amazon Web Services). We do not share data with advertisers or data brokers.

7. Data retention

  • OAuth tokens are stored encrypted and retained until you disconnect the associated service or delete your account.
  • Account information is retained until you delete your account.
  • Saved plans and summaries are retained until you delete them or delete your account.

You may request deletion of your data at any time by emailing privacy@datanephew.com.

8. Security

We use industry-standard measures, including encryption of stored tokens, to protect your information. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

9. International users

datanephew is based in the United States, but is available to users anywhere. If you are located in the European Economic Area, United Kingdom, or another jurisdiction with data protection laws, you have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict certain processing. Our legal basis for processing your information is your consent (when you connect a service) and our need to perform the service you've requested. To exercise these rights, contact privacy@datanephew.com.

10. Children's privacy

datanephew is not directed to, and is not intended for use by, individuals under the age of 13. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated effective date at the top of this page.

12. Contact us

Questions about this policy or your data: privacy@datanephew.com