Privacy Policy
What we collect, what we deliberately do not, and what happens to any of it. The MCP server has its own section because it behaves differently to the website — read that one if you connect the tools to Claude.
- 12
- 4 min
Introduction
Newtation (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website newtationco.app and use our services.
Information we collect
Personal information
We may collect personal information that you voluntarily provide to us when you:
- Fill out contact forms on our website
- Request information about our services
- Subscribe to our newsletter or blog
- Engage with our customer support
This information may include: name, email address, phone number, company name, and any other information you choose to provide.
Automatically collected information
When you visit our website, we may automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. We may also collect information about your browsing behaviour and interactions with our website.
The Newtation MCP server
The Newtation MCP Server is a remote Model Context Protocol server that provides AI brand auditing tools through Claude (by Anthropic). This section describes data practices specific to the MCP server, and it takes precedence over the general website practices above wherever the two differ.
What the server receives
- GitHub OAuth data — username, display name, and email address, for authentication only
- Tool inputs — brand name, industry, website URL, competitor names, topics, and locations you provide
What it never touches
- Conversation data between you and Claude
- Claude's memory, chat history, or uploaded files
- Analytics, telemetry, or usage tracking from MCP sessions
- Tool inputs used for training, profiling, or anything beyond generating your report
How tool data is processed
Storage and retention
- OAuth session tokens
- Stored in Cloudflare KV with a 7-day expiration, and deleted automatically after expiry.
- MCP session state
- Held in Cloudflare Durable Objects for the duration of the active session only. Nothing is retained after disconnection.
- Tool inputs and outputs
- Not stored at any time.
Third-party services
- GitHub
- OAuth authentication only, with the read:user and user:email scopes. We do not access your repositories, your code, or any other GitHub data.
- Cloudflare Workers
- Hosts the MCP server infrastructure, including KV for OAuth state and Durable Objects for MCP sessions.
- Anthropic (Claude)
- The MCP protocol client. Anthropic's own privacy policy governs their handling of your conversations.
Local mode (Claude Code)
When you run the MCP server locally through Claude Code (server.py), no data leaves your machine. No authentication is required, no network requests are made, and all processing happens locally.
How we use your information
We use the information we collect or receive to:
- Respond to your inquiries and provide customer support
- Send you information about our services, updates, and promotional materials
- Improve our website and services
- Analyse website usage and optimise user experience
- Prevent fraudulent transactions and protect against security threats
- Comply with legal obligations
Data security
We implement appropriate technical and organisational security measures to protect your personal information. No method of transmission over the Internet or electronic storage is 100% secure, however, and we cannot guarantee absolute security.
Your rights
Depending on your location, you may have certain rights regarding your personal information, including:
- The right to access and receive a copy of your personal information
- The right to request correction of inaccurate information
- The right to request deletion of your personal information
- The right to object to or restrict processing of your information
- The right to data portability
- The right to withdraw consent at any time
To exercise any of these, write to us at the address in the closing section. We will respond within the period your jurisdiction requires.
Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites, and we encourage you to review the privacy policies of any third-party site you visit.
Children's privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.
International data transfers
Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction, where data protection laws may differ. By using our services, you consent to such transfers.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the revision date in the header. You are advised to review this policy periodically.
Questions about this policy
If anything here is unclear, or you want to exercise one of the rights above, we would rather you asked than guessed.