Privacy Policy

Kinetic Solutions Group (“KSG,” “we,” “us”) operates the MCP Gateway website at mcpgateway.com and offers the MCP Gateway product through cloud marketplaces (Microsoft Azure, AWS, Google Cloud) and direct channels. This Privacy Policy explains what data we collect in connection with our website, marketplace listings, and support interactions, how we use it, and the choices you have.

What This Policy Covers

This policy applies to:

• The publicly accessible website at mcpgateway.com, including all marketing pages, blog posts, documentation, and case studies.
• Cloud marketplace interactions — when you discover, evaluate, or purchase MCP Gateway through Azure Marketplace, AWS Marketplace, or Google Cloud Marketplace.
• Support and sales interactions — when you contact us for support, submit inquiries, or share diagnostic information.

This policy does not apply to:

• Self-hosted MCP Gateway deployments — the product runs on your infrastructure and KSG has no access to any data processed by your instance (see the Product Data section below).
• Third-party websites linked from this site, which have their own privacy policies.

Data We Collect

We do not require user accounts or login to access this website. The data we collect falls into the following categories:

Analytics Data (Automatic)

We use Vercel Web Analytics and Vercel Speed Insights to understand how visitors use the site. Vercel Web Analytics is cookieless by default and collects:

• IP address (anonymized — not stored in raw form)
• Browser type, operating system, and device type
• Pages visited and time spent on each page
• Referrer URL (how you arrived at the site)
• Country-level geolocation (derived from IP)

Marketplace Lead Data

When you interact with MCP Gateway listings on Azure Marketplace, AWS Marketplace, or Google Cloud Marketplace, the marketplace provider may share your contact information with us, including:

• Business name and contact name
• Email address and phone number
• Marketplace subscription or deployment identifiers

This data is shared by the marketplace provider under their own terms. We use it solely to fulfill your order, provide support, and communicate about the product.

Contact and Support Information (Voluntary)

If you contact us via email at support@ksgai.com, we collect the information you voluntarily provide, such as your name, email address, and message content. If you submit support requests that include diagnostic data (logs, configuration snippets, screenshots), we collect and process that data solely to resolve your issue.

How We Use Your Data

We use collected data for the following purposes:

• Website improvement — analytics help us understand which pages are useful and where visitors encounter friction (legal basis: legitimate interest).
• Responding to inquiries — when you contact us, we use your information to respond and follow up (legal basis: contract/pre-contractual measures).

We do not:

• Sell, rent, or trade your personal data to third parties.
• Use your data for advertising or ad targeting.
• Use any website visitor data to train AI or machine learning models.

MCP Gateway Product — Data Controller Clarification

MCP Gateway is a self-hosted product. When you deploy MCP Gateway on your own infrastructure (cloud or on-premises), you are the data controller for all data processed by your deployment.

Specifically:

• No telemetry home — the product does not phone home or send usage data to KSG.
• No model training — KSG never uses customer data for training, fine-tuning, or improving AI models.
• Inference data stays local — all LLM inference requests, tool execution results, and agent conversations remain within your infrastructure.
• You control retention — data retention policies for your MCP Gateway deployment are entirely under your control.
• Third-party model providers — if you configure MCP Gateway to use third-party LLM providers (e.g., OpenAI, Anthropic, Azure OpenAI), those providers' own privacy policies and data processing terms apply to inference requests sent to their APIs. KSG is not a party to those data flows.

Exception: If you voluntarily share logs, configuration files, or screenshots with KSG during a support interaction, we process that data solely to resolve your issue and delete it once the support case is closed, unless you agree otherwise.

Cookies and Tracking

Vercel Web Analytics, which we use for website analytics, is cookieless by default. It does not store cookies or use browser-local storage for analytics purposes. We do not use:

• Advertising or retargeting cookies
• Third-party tracking pixels (Facebook, Google Ads, etc.)
• Cross-site tracking of any kind
• Fingerprinting or persistent identifiers

We respect the Do Not Track (DNT) browser signal. Because our analytics are already cookieless, DNT-enabled browsers receive the same privacy-preserving treatment as all other visitors.

Data Sharing and Subprocessors

We share data only with the following service providers, which are necessary to operate our website and marketplace listings:

• Vercel Inc. — website hosting, analytics, and speed insights. Vercel processes data in the United States. Vercel's Privacy Policy.
• Cloud marketplace providers (Microsoft/Azure, Amazon Web Services, Google Cloud) — when you purchase or deploy MCP Gateway through a marketplace, the provider processes transaction and lead data under their own privacy policies and data processing agreements.

We do not sell personal data. We may disclose information if required by law, regulation, legal process, or enforceable governmental request.

International Data Transfers

Website analytics data is processed by Vercel in the United States. For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The EU-U.S. Data Privacy Framework (DPF) where applicable

Data Retention

• Analytics data — Vercel retains web analytics data for up to 12 months in aggregated/anonymized form. Raw IP addresses are not stored.
• Marketplace lead data — retained for the duration of the business relationship plus 12 months, or as required by the marketplace provider's terms.
• Contact and support inquiries — retained for as long as necessary to respond to and resolve your inquiry (typically up to 24 months), then deleted unless a longer period is required by law or an ongoing business relationship.
• Support diagnostic data (logs, config snippets) — deleted once the support case is resolved, unless you agree otherwise.

Your Privacy Rights

European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the right to:

• Access, correct, or delete your personal data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your local data protection authority

California (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, the sources, the business purpose, and the categories of third parties with whom we share it
• Request deletion of your personal information
• Request correction of inaccurate personal information
• Opt out of the sale or sharing of personal information
• Limit the use of sensitive personal information (we do not collect sensitive personal information)
• Non-discrimination for exercising your rights

We do not sell or share personal information as defined by the CCPA/CPRA. We have not sold or shared personal information in the preceding 12 months.

Other U.S. State Privacy Laws

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may exercise similar rights, including the right to appeal a denial of a privacy request.

How to Exercise Your Rights

To submit a privacy request, email us at support@ksgai.com with the subject line “Privacy Request.” We will verify your identity by matching the email address on your request to information we have on file. You may also designate an authorized agent to make a request on your behalf; we may require proof of authorization. We will respond to verified requests within 30 days (or 45 days with notice if additional time is needed). If we deny your request, you may appeal by replying to our response.

Data Security

We implement appropriate technical and organizational measures to protect your data:

• All website traffic is encrypted via TLS/HTTPS
• Access to analytics data is restricted to authorized KSG personnel
• We regularly review our data practices and security measures

For the MCP Gateway product, security is in your hands. The product includes built-in security features (authentication, RBAC, sandboxed execution, network isolation) that you configure and manage within your own infrastructure.

Children's Privacy

This website and the MCP Gateway product are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child under 16, please contact us at support@ksgai.com and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. For material changes that significantly affect how we handle your data, we will make reasonable efforts to notify you (for example, via a notice on the website).

Contact Us

Kinetic Solutions Group, LLC is the data controller for the personal data processed through this website and marketplace interactions. If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

• Company: Kinetic Solutions Group, LLC
• Email: support@ksgai.com
• Address: 600 Congress Ave, Suite 1400, Austin, TX 78701, United States

We aim to respond to all privacy-related inquiries within 30 days.