MCP Connector Privacy Policy

Information we collect

Account information. When you connect the Connector, you authenticate with your Maven Bio account using OAuth. We receive and associate your requests with your name, email address, user ID, and the Maven Bio organization you belong to. We do not receive or store your password through the Connector, and access tokens are validated on every request.

Tool call records. Each time your MCP client calls a Connector tool, we record the tool name, the input parameters sent to the tool, the response returned, timestamps, processing duration, and success or error status. These records exist so that we can bill usage correctly, investigate problems you report, protect the service from abuse, and improve tool quality.

Usage and billing information. We track per-call credit consumption and request counts for your organization, which are used for billing and rate limiting.

What we do not collect. The Connector receives only the individual tool calls your MCP client chooses to make. We do not receive, collect, or store your conversations with Claude or any other assistant, your chat history, files you have shared with the assistant, or any content beyond the parameters of each tool call.

How we use this information

We use the information described above to:

• Operate the Connector and return results for the tools you invoke;
• Meter usage and bill your organization according to your plan;
• Enforce rate limits and protect the service against abuse and unauthorized access;
• Diagnose and resolve errors, including errors you report to support; and
• Improve the quality and reliability of the Connector, for example by identifying queries that fail or perform poorly.

Maven Bio does not sell your personal information and does not use the content of your tool calls to train artificial intelligence models.

Service providers we share data with

To answer certain tool calls, parts of your request are processed by the following categories of service providers, solely to provide the service:

• Large language model providers (Anthropic, OpenAI, Google, and OpenRouter). Natural-language search and aggregation tools send your query text to these providers to interpret the request and resolve entity names. These providers process the data to return results and do not receive your account credentials.
• Web search and retrieval services (Exa, Firecrawl, and Jina). When a document search is augmented with public web results, or when you ask the Connector to read a public URL, the search query or URL is sent to these services to retrieve the content.
• Error monitoring (Sentry). When a request fails unexpectedly, error reports including account identifiers and truncated request parameters are sent to Sentry so we can fix the problem.
• Cloud infrastructure. The Connector and its data are hosted on cloud infrastructure located in the United States.

We may also share information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

Security

All Connector traffic is encrypted in transit using TLS. Authentication uses OAuth 2.1 with short-lived access tokens, and every request validates that the token was issued for the Maven Bio Connector specifically. Tool access is scoped to your organization: you can only retrieve monitors, saved artifacts, and account data belonging to your own account and organization.

Data retention

Tool call records and usage data are retained while your account or organization remains active, because they form the basis of billing and audit history. If you would like records associated with your account deleted, contact us using the details below and we will honor your request subject to our legal and contractual obligations.

Your choices

• You can disconnect the Connector at any time from your MCP client's settings, which stops all data flow.
• You can revoke the Connector's access from your Maven Bio account, or by contacting support.
• You can request a copy or deletion of the data associated with your account by contacting us.

Professional use

The Connector is intended for professional research on publicly available BioPharma information. Please do not submit patient-identifiable health information or other sensitive personal data through Connector tool calls.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. Material changes will be reflected on this page with an updated effective date.

Contact us

For more information about our privacy practices, if you have questions, if you would like to make a complaint, or if you would like to request a copy or deletion of your data, please contact us through our contact page or by mail using the details provided below: