Legal

Privacy Policy

Last updated: April 2, 2026

1. Introduction

Simple Software LLC (“we”, “us”, “our”) operates Palm (“the Service”). This Privacy Policy explains how we collect, use, and protect your information when you use the Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and an encrypted password. We do not store passwords in plain text.

Usage Data

We collect information about how you use the Service, including:

  • Domains you submit for MCP server generation
  • MCP tool calls made to your servers (tool name, arguments, timestamp)
  • IP addresses for rate limiting purposes
  • Pages visited and features used

Crawled Website Data

When generating MCP servers, we crawl publicly available website content including page text, structured data (JSON-LD), forms, and metadata. This data is derived entirely from public sources and is stored to serve MCP tool calls.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers, bank account details, or other payment credentials on our servers. Please refer to Stripe’s Privacy Policy for details on how they handle payment data.

3. How We Use Your Information

  • To provide and maintain the Service
  • To generate and serve MCP servers
  • To provide analytics on MCP tool usage
  • To enforce rate limits and prevent abuse
  • To process payments for paid subscriptions
  • To communicate service updates and changes
  • To respond to support requests

4. Data Storage & Security

Your data is stored on Supabase (hosted on AWS) in the United States. We use industry-standard security measures including encrypted connections (TLS), row-level security policies, and secure authentication via Supabase Auth. While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure.

5. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

  • MCP Tool Calls: When AI agents call tools on your MCP server, the crawled public data for that domain is returned in the response. This is the core function of the Service.
  • Service Providers: We use Supabase (database), Vercel (hosting), Cloudflare (crawling), and Stripe (payments) to operate the Service. These providers process data on our behalf under their respective privacy policies.
  • Legal Requirements: We may disclose information if required by law, court order, or government request.

6. MCP Server Data

MCP servers generated by the Service contain publicly available data crawled from websites. This data is accessible to any AI agent that connects to the MCP endpoint. If you are a verified domain owner and wish to have your domain’s MCP server removed or modified, please contact us.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your data in a portable format
  • Opt out of non-essential communications

To exercise these rights, contact us at privacy@palmmcp.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. Authentication cookies are set by Supabase Auth and are necessary for the Service to function.

9. Data Retention

Account data is retained for the duration of your account. Crawled website data is retained as long as the MCP server is active. Tool call analytics are retained for 12 months. Upon account deletion, your personal data is removed within 30 days. Anonymized aggregate data may be retained indefinitely.

10. Children’s Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information promptly.

11. International Users

The Service is operated from the United States. If you are accessing the Service from the European Union or other regions with data protection laws, please note that your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be communicated via email or a notice on the Service. The “Last updated” date at the top reflects the most recent revision.

13. Contact

For questions about this Privacy Policy, contact us at privacy@palmmcp.com.

Simple Software LLC
United States