Privacy Policy
Last updated: March 2026
1. Information We Collect
When you sign up for Synra, we collect your email address and the database connection credentials you provide. Credentials are encrypted at rest using AES-256 and are never stored in plain text. We also collect standard server logs (IP address, request timestamps, and error data) to operate and improve the service.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the Synra MCP Gateway service.
- Authenticate your requests and route queries to your database.
- Send transactional emails (account creation, password reset).
- Monitor service health and diagnose issues.
We do not sell your personal data or database contents to any third party.
3. Data Retention
Query audit logs are retained for 30 days by default and can be deleted by request. Account data is retained for as long as your account is active. Upon account deletion all stored credentials and logs are permanently purged within 7 days.
4. Third-Party Services
Synra uses Supabase for database storage, Stripe for payment processing, and Netlify for hosting. Each provider operates under its own privacy policy. We do not share your credentials or query data with these providers beyond what is required to operate the service.
5. Security
All data in transit is protected by TLS 1.2+. Database credentials are encrypted with AES-256 before being stored. Access to production infrastructure is restricted to authorised personnel only.
6. Your Rights
You may request a copy of your data, ask us to correct inaccurate data, or request deletion of your account and all associated data at any time by emailing hello@mcpserver.design.
7. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use of the service after changes constitutes acceptance of the updated policy.
8. Contact
Questions about this policy? Contact us at hello@mcpserver.design.