Privacy Policy
At CorvixMCP ("we," "our," or "us"), privacy and data security are not an afterthought—they are the foundational premise of our engineering. This Privacy Policy describes how we collect, handle, and protect your information when you visit https://corvixmcp.dev or use the CorvixMCP software.
1. The Zero-Telemetry Guarantee (Software)
CorvixMCP is an air-gapped, local security engine:
- No Source Code or IaC Uploads: When you run CorvixMCP locally or via your AI agent (Claude Desktop, Cursor, Windsurf, VS Code), your Terraform plans, IAM configurations, Kubernetes manifests, and playbook files never leave your machine.
- No Cloud Analytics or Tracking: The CorvixMCP binary contains zero analytics trackers, user behavior telemetry, or cloud logging beacons.
- Offline Grace Support: Pro licenses feature a 14-day cryptographic offline grace period, ensuring you can audit secure networks without persistent Internet connectivity.
2. Information Collected During Purchase & Licensing
When you purchase a Pro license or activate the software:
- Billing & Payment Information: Payments are processed directly by our Merchant of Record, Lemon Squeezy LLC. We do not collect, process, or store your credit card or sensitive billing details on our servers. Lemon Squeezy's privacy practices are governed by their own Privacy Policy.
- License Activation Data: When activating your license via
corvixmcp activate <KEY>, the software communicates with Lemon Squeezy's API to validate the key and register a local machine identifier (derived from local hardware node identifiers to enforce the 2-seat limit). No identifying personal files or system contents are transmitted.
3. Website Information
Our website at https://corvixmcp.dev is hosted on Cloudflare Pages. Cloudflare may process basic network logs (such as IP addresses and browser user-agents) strictly for security, DDoS protection, and CDN routing in compliance with global standards.
4. Data Sharing & Third Parties
We do not sell, rent, trade, or share your personal information with third parties. Data is shared exclusively with our authorized payment processor (Lemon Squeezy) to fulfill your purchase and provide customer support.
5. Security of Your Information
We implement strict cryptographic validation (HMAC-SHA256 integrity and local seat sealing) to protect your licensing cache. Our website is served exclusively over HTTPS with modern TLS encryption.
6. Your Rights
Depending on your jurisdiction (such as under GDPR or CCPA), you have the right to request access to, correction of, or deletion of the personal information associated with your purchase. To exercise these rights, please contact us.
7. Contact Us
If you have any questions about this Privacy Policy or our zero-telemetry architecture, please contact us at: privacy@corvixmcp.dev or via our website at https://corvixmcp.dev.