MCP Privacy Notice

Last updated: 2026-10-12. This notice describes processing related to the MailSenpai MCP server used by ChatGPT and other AI clients.

Controller and contacts

Service provided by Octotech Solutions / MailSenpai. Privacy and GDPR: privacy@mailsenpai.com. Operational support: supporto@mailsenpai.com.

Data processed

• MailSenpai account and customer data required for authorization.
• Email marketing data requested through MCP: lists, fields, segments, subscribers, templates, campaigns, reports and operational logs.
• Technical data: OAuth tokens, scopes, client_id, IP address or hash, user-agent or hash, timestamps, audit and rate-limit metadata.

Purposes and legal bases

Data is processed to provide the requested integration, protect the service, enforce limits and permissions, evidence consent/authorization and comply with contractual and legal obligations. Legal bases include contract performance, pre-contractual steps, legitimate security interests and legal obligations.

Deliverability tools

The blocklist check sends the IP address or domain you ask about to MailSenpai's checking service, which looks it up on public blocklists; the value checked stays in the service logs for 7 days and in the MCP audit log. The spam test creates a test linked to an email address (the account's, or the one you pass): MailSenpai sends that address one email with the instructions and one with the result. Of the message sent to the test address only the analysis is stored, never the text; the details of the analysis are deleted after 24 hours, while score and short outcome remain. The request is recorded among MailSenpai contacts like those made from the free tools on the website, without consent to marketing emails.

No sale, no training

Data processed through the MCP server is not sold and is not used to train artificial intelligence models.

AI clients and third parties

When you connect an AI client, that client's terms and privacy policy also apply to processing carried out by that party. MailSenpai controls only the data made available through the MCP server and MailSenpai policies.

Retention

Tokens have technical expiry. Audit and consent evidence are retained for security, accounting, legal defense and statutory obligations; the default MCP consent retention is described on the Consent page.

GDPR rights

You may exercise access, rectification, erasure, restriction, objection, portability and complaint rights by contacting privacy@mailsenpai.com.