Skip to content

Privacy policy and terms cover every MCP tool's inputs, outputs and destination - #15

Merged
chrisjleal merged 1 commit into
mainfrom
legal/tool-disclosure
Oct 21, 2026
Merged

chrisjleal merged 1 commit into
mainfrom
legal/tool-disclosure

Conversation

@chrisjleal

Copy link
Copy Markdown
Contributor

Answers the ChatGPT app review rejection: "Your privacy policy does not clearly disclose all data uses… ensure it reflects current tool inputs and outputs."

  • Privacy policy: a section on what each Proofable tool takes in, returns and sends where (signed-out and signed-in), with a tool-name map; new categories (saved secrets, tools and skills, agent configuration, MCP connections, proof feedback, files); the two connected-account token paths (Composio holds the token, or an agent grant stores it encrypted in the Vault); purposes and providers for each.
  • Terms: the service description and acceptable use cover agents, jobs, the browser and the Vault; an agent-spend line under payments.
  • MCP tools page: the research, browsing and connection tools.

Decision before merge: this is policy text and publishes on merge. An independent audit of the earlier text listed the clauses that need an attorney rather than an engineer (liability cap, arbitration, refund terms, GDPR legal bases, transfer safeguards). Those clauses are unchanged here.

npm run validate passes.

🤖 Generated with Claude Code

…estination

Answers the ChatGPT app review: the policy names what each Proofable tool
takes in, returns and sends where, adds the saved-secret, tool, agent, MCP
connection, feedback and file categories with purpose and retention, and
describes the two connected-account token paths. The terms' service
description and acceptable use cover agents, jobs, the browser and the
Vault. The MCP tools page lists the research, browsing and connection tools.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@chrisjleal
chrisjleal marked this pull request as ready for review October 21, 2026 22:31
@chrisjleal
chrisjleal merged commit a2507a4 into main Oct 21, 2026
2 checks passed
@chrisjleal
chrisjleal deleted the legal/tool-disclosure branch October 21, 2026 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant