Privacy Policy

1. Overview

ToolCairn ("we", "our", "us") is an open-source tool intelligence platform operated by NEURYNAE. This policy explains what information we collect when you use ToolCairn, how we use it, and your rights.

2. Information We Collect

Account information

When you create an account we collect your name, email address, and authentication provider (Google, GitHub, or email/password). Passwords are hashed with bcrypt and never stored in plain text.

Usage data

We log MCP tool invocations (tool name, duration, success/failure) to improve search quality and monitor system health. Logs do not contain the content of your searches beyond what is necessary for the service.

Search queries

Search queries submitted through the MCP tools or web interface may be stored anonymously to improve recommendations.

3. How We Use Your Information

• Provide and operate the ToolCairn service
• Authenticate you when you sign in
• Improve search quality and tool recommendations
• Monitor service health and prevent abuse
• Send transactional emails (account-related only, no marketing)

4. Third-Party Services

We use the following third-party services:

• Google OAuth — optional sign-in method. Governed by Google's Privacy Policy.
• GitHub OAuth — optional sign-in method. Governed by GitHub's Privacy Policy.
• Vercel — web application hosting. May process request metadata.
• Cloudflare — API gateway and CDN. Processes request IP addresses for rate limiting.
• AWS — infrastructure hosting for the backend API and databases.

We do not sell your data to any third party.

5. Data Retention

Account data is retained as long as your account is active. Usage logs are retained for up to 90 days. You may request deletion of your account and associated data by contacting us.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the email below. We will respond within 30 days.

7. Security

We use industry-standard security practices including HTTPS encryption, bcrypt password hashing, and JWT-based authentication. No system is perfectly secure; we encourage you to use a strong unique password.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

9. Contact

Questions about this privacy policy? Contact us at support@neurynae.com or open an issue on GitHub.