1. Who we are
FunnelBrain gives AI assistants access to the Funnel of the Week library and the Consumer App Index through an MCP server (the "Service"). In this policy, "we" and "us" mean the team that operates the Service.
2. Information we collect
Account information. Your email address and the date your account was created. We store API keys only in hashed form.
What you ask. When you use the Service through an AI assistant, the assistant sends us information with each request. This can include your question, the goal of your task, a summary of your conversation, project or customer labels, tags, and search terms.
What we return. The responses the Service gives you, which we may store in full.
Session and usage activity. Which tools you use, which funnels, pages and documents you open, timestamps, how long requests take, errors, and when usage limits apply. This also includes when you connect and disconnect, and failed sign-in attempts.
Technical information. IP address, user agent, and the name and version of the AI client you connect with.
Links you open. Links and images in our responses may pass through our servers, so we can record which ones are opened by your account.
Work you save or send us. Tasks and reports you save to the Service, summaries of completed work, and any ratings or feedback.
3. What your AI assistant handles
You connect to the Service through an AI assistant you choose, such as Claude Code, Codex or Cursor. That assistant's provider handles your conversation under its own terms and privacy policy. We only receive what your assistant sends us, so we may not see your full conversation.
4. How we use your information
- Provide, maintain and secure the Service
- Answer support requests and contact you about your account
- Analyse what people ask for and how they use the Service
- Improve the library, our search and new features
- Enforce usage limits and detect misuse, including bulk copying
Some content we return carries an invisible marker tied to your account, so we can trace unauthorised copies of the library.
5. Please be careful what you share
We remove known credential fields and mask email addresses before storing activity, but this won't catch everything. Don't include passwords, API keys, payment details, health information, or personal data about your customers or clients in your questions. If you use the Service for clients, you're responsible for having the right to share their information.
6. How we share information
We do not sell, trade or rent your personal information. We share it only with:
- Service providers that help us run the Service, including Hetzner (servers and database) and Cloudflare (DNS, networking and file storage)
- Professional advisers, or authorities where the law requires it
- A successor, if our business is sold or reorganised
We may share or publish aggregated information that doesn't identify you.
7. How long we keep information
We keep your information until you ask us to delete it, or for as long as we need it for the purposes above. After a deletion request, copies may remain in our backups for about 15 days until they expire. We may keep what the law requires, and aggregated information that doesn't identify you.
8. Security
We use appropriate measures to protect your information, including encrypted connections, hashed API keys and restricted access to activity records. No method of transmission or storage is completely secure, and we can't guarantee absolute security.
9. Your rights
You can ask us to:
- Give you access to the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Provide your data in a portable format
Depending on where you live, you may have other rights, including objecting to or restricting how we use your data and complaining to your local data protection authority. To make a request, email us at the address below.
10. International transfers
We and our service providers may process your information in countries other than your own, which may have different data protection laws.
11. Cookies
The MCP service doesn't use cookies. It identifies you by your API key. Our other websites have their own policies.
12. Children
The Service is for business use and isn't intended for anyone under 18.
13. Changes to this policy
We may update this policy from time to time. We'll post the new version here and update the date above. If a change is significant, we'll let you know by email.
14. Contact us
For questions or data requests, contact us at support@consumerappindex.com.