# Privacy Policy

**Status:** Placeholder. A finalized Privacy Policy is not yet
published for `algovigilance.com`.

## What we do not collect

This site does not require accounts or authentication for read-only
surfaces. We do not set tracking cookies. The MCP endpoint at
`/api/mcp` does not require user identity to enumerate tools or
execute read-only operations.

## What we may collect

Standard web infrastructure logs (request URL, timestamp, IP, user
agent, response status) may be retained for operational, security,
and rate-limiting purposes. These logs are not used for advertising
or profiling.

If you send identifiable content as part of a `tools/call` request
body, that content may be transmitted to the execution backend for
processing. Do not include personal health information, regulated
data, or other sensitive content in tool arguments unless you have
verified the backend's handling of that data class.

## Contact

For privacy-related questions or requests (GDPR Subject Access
Requests, CCPA opt-outs, etc.): **algovigilance@gmail.com**.

This policy will be replaced by a finalized statement before any
commercial offering goes live. Material changes will be announced in
this file's git history.