Covenant MCP Privacy Policy

When you connect an AI tool and it calls Covenant MCP, we record:

• Your identity from sign-in: your Covenant user, email address and the organization you chose.
• Which AI tool made the call, identified by the OAuth client it registered with.
• Each call: the tool called, the investment it named, when it was made, and whether it succeeded or was refused.
• For questions sent to Covenant's assistant (the ask_covenant tool): the first part of the question, its length and a one-way fingerprint of it, and the cost of answering it.

We do not store the rest of your conversation with your AI tool, the answers we send back, or anything your AI tool holds about you.

We use this information to answer the request, to enforce your permissions and rate limits, to keep the audit trail your firm can see, to measure cost, and to find and fix problems. Answers are built from your firm's data in Covenant, limited to what you can already see in the Covenant app.

Audit records go to your organization's audit log, the same one the Covenant app writes to. Operational records, which never include the text of your questions or answers, go to our monitoring systems. Data is stored in the United States.

The answer to each request goes to the AI tool that asked, under your firm's own agreement with that tool's provider. We do not otherwise share MCP data with Anthropic, OpenAI, Microsoft or any other AI tool provider.

We use service providers to run Covenant MCP: our sign-in and audit log provider, our hosting and database providers, our monitoring providers, and, for questions sent to Covenant's assistant, the AI model providers that power Ask Covenant in the Covenant app, under the same terms. We do not sell MCP data or use it for advertising.

Audit records are kept for as long as your firm's agreement with Covenant provides, so your firm can review who asked what. Operational records are kept only as long as we need them to run and secure the service, then deleted. When your firm's Covenant agreement ends, MCP records are handled with the rest of your firm's data under that agreement.

You can disconnect Covenant in your AI tool at any time. Your firm can ask us to turn Covenant MCP off for your whole organization, which stops every call at once. Covenant MCP cannot change data in Covenant. For access to or deletion of information about you, contact us below or use the rights described in our Privacy Policy.

Questions about this policy or Covenant MCP: support@covenant.co. Setup and security details are at docs.covenant.co/mcp.