Privacy Policy

Last Updated: May 20, 2026

This Privacy Policy describes how mAIndala ("we," "us," or "our") collects, uses, and shares information about you when you use the mAIndala platform, including our websites at maindala.com and associated domains, our MCP catalog API at mcp.maindala.com, and related services (collectively, the "Platform").

1. Information We Collect

1.1 Information You Provide

• Account information: When you register, we collect your email address and display name.
• Profile information: You may optionally upload a profile picture.
• Content you submit: MCP service submissions, skill definitions, agent configurations, forum posts, and service reviews.
• Group information: Group names, descriptions, and membership data if you create or join a group.

1.2 Information Collected Automatically

• Usage data: Pages visited, search queries, services viewed, and feature interactions.
• Log data: IP address, browser type, operating system, referring URLs, and timestamps.
• Cookies and sessions: We use a session cookie (maindala_session) to keep you logged in. We do not use third-party advertising cookies.

1.3 Information from AI Agents and API Clients

When AI agents or automated clients connect to our MCP endpoint at mcp.maindala.com/mcp, we log request metadata (timestamp, tool called, response status) for operational and security purposes. We do not log conversation content or user prompts from agent sessions.

2. How We Use Your Information

• To create and manage your account and authenticate your identity via one-time passcode (OTP).
• To provide Platform features, including catalog browsing, MCP service discovery, Skills, Agents, and community forums.
• To deliver transactional emails (OTP codes, notifications, invite links) via our email provider.
• To monitor Platform health, diagnose issues, and maintain security.
• To enforce our Terms of Use and applicable law.
• To improve the Platform based on aggregated, anonymized usage patterns.
• To contact you about mAIndala products and services where you have explicitly asked us to — for example, by opting in when requesting a free telemetry token. You can ask us to stop at any time.

3. How We Share Your Information

We do not sell your personal information. We share information only as follows:

• Service providers: We use Google Cloud Platform (hosting, database, storage) and Lark Suite (transactional email). These providers process data on our behalf under data processing agreements.
• Publicly visible content: Your display name, submitted MCP services, published skills, agents, forum posts, and reviews are publicly visible by default. Profile pictures stored in Google Cloud Storage are publicly readable by URL.
• Group members: Your membership in a group is visible to other members of that group.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of mAIndala or others.

4. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated personal data by emailing support@maindala.com. Publicly submitted content (services, forum posts, reviews) may be retained in anonymized form for catalog integrity purposes after account deletion.

5. Security

We use industry-standard security measures including TLS encryption in transit, encrypted database connections, Redis AUTH with TLS, and Google Cloud Secret Manager for credential storage. Authentication relies on one-time passcodes rather than passwords. Despite these measures, no system is perfectly secure and we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate personal information.
• Request deletion of your personal information.
• Object to or restrict certain processing of your information.
• Data portability (receive a copy of your data in a structured format).

To exercise these rights, email support@maindala.com. We will respond within 30 days.

7. Cookies & Analytics

We use a single first-party session cookie (maindala_session) required for authentication. This cookie is set when you sign in and is not gated by the cookie consent banner — declining the banner does not sign you out or block login. The consent banner governs only the optional analytics cookies described below.

With your consent (clicking Accept on the cookie banner), we use Google Analytics 4 to understand how the Platform is used — pages viewed, approximate location (country/city level, not a full IP address), device and browser type, and referring source. We disable Google Signals and ad personalization, so this data is never used for advertising or cross-device profiling, and we do not send any account information, email address, or content you've created to Google Analytics. If you decline, or have not yet responded to the banner, Google Analytics never loads. You can withdraw consent at any time via the Cookie preferences link in the site footer, which re-shows the banner and stops further collection.

8. Children's Privacy

The Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at support@maindala.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last Updated" date. Continued use of the Platform after changes constitutes acceptance of the updated policy.

10. Contact

For privacy questions or requests, contact us at:

mAIndala
Email: support@maindala.com
Website: www.maindala.com