PUBLICMCP Policy

Privacy & Data Practices

PUBLICMCP endpoints are built to be queried by AI assistants, not to track people. This page describes exactly what is recorded when an assistant calls a directory or business endpoint, what is never stored, and how long records are kept.

What is logged

When an AI assistant or other client calls a PUBLICMCP tool (for example, searching a business's services or the public directory), the server records:

The question text

The query or question the assistant sent to the tool, verbatim. This is used to give the listed business insight into what is actually being asked about it, and to improve how endpoints answer.

Basic request context

Timestamp, which tool was called, which listing it concerned, whether the request came from an MCP or REST client, the assistant's user-agent class (e.g. Claude, ChatGPT, Perplexity), and whether the tool returned a result.

An anonymized client fingerprint

A one-way hash derived from connection metadata with a salt that rotates daily. It lets us count distinct clients within a single day and cannot be reversed to identify a person, device, or IP address — and cannot link the same client across days.

What is never stored

Raw IP addresses

Only the salted one-way fingerprint described above is written; the IP itself is discarded.

Names, emails, and phone numbers

Contact fields submitted through lead or qualification tools are delivered to the business they were intended for and stripped before anything is written to the query log.

Full tool responses

Only whether a response was returned is recorded — never its content.

Cookies or cross-site tracking

PUBLICMCP sets no cookies and embeds no third-party trackers or advertising pixels.

Retention and use

Raw query logs are kept for 90 days, then compressed into archival storage. Anonymized aggregates (query counts, topic clusters, assistant mix) are retained indefinitely. Query insights are shared only with the business whose listing the query concerned, and in aggregate, non-attributable form for directory-wide statistics. Query data is never sold or shared with third parties.