Last updated 2026-11-06.
Who we are
databasedmcp is operated by Lemanse Oy, Finland (VAT FI26299776), which is responsible for the personal data described here. Contact: support@databasedmcp.com.
What we collect
- Your account: your email address, the accounts (tenants) you belong to and your role in them, and when they were created.
- Sign-in: single-use sign-in links we email you, and session cookies. If you sign in with Google, we receive your Google account's ID and email address, and nothing else from Google.
- Connected apps and API keys: the names of keys you create and of apps you connect (such as Claude), who made them and when they were last used. Keys and tokens are stored only as one-way hashes.
- Your databases: whatever you and your agents store in them. We store it to give it back to you; we don't read it, analyse it or use it for anything else. Our tools reject writes that contain known kinds of secrets. You may store personal data in your databases; if you do, you're responsible for having a lawful basis for it, and we process it on your behalf only to store it and give it back to you.
- Feedback: messages your agents send with the send_feedback tool, with the account, the key or app and the client that sent them.
- Billing: if you subscribe, Stripe handles the payment as merchant of record and holds your payment details. We keep your plan, its status and Stripe's customer and subscription IDs.
- Logs: for each request, its path, status, timing and account, and for sign-ins the email address. We use them to run and secure the service.
We don't receive your conversations with Claude or any other AI model: only the tool calls your agent makes and their arguments.
What we use it for
To provide databasedmcp: to sign you in, store and return your data, enforce plan limits, bill you, answer support requests and fix problems. We don't sell your data, use it for advertising, or use your databases to train AI models. We email you only about signing in and your account.
Where it's kept, and who processes it
- Cloudflare runs the website and API, stores accounts, keys and sign-in data (Cloudflare D1), sends sign-in emails and keeps request logs.
- netcup hosts the server in the EU that stores your databases, reached only through Cloudflare.
- Stripe processes payments.
- Google, only if you choose to sign in with Google.
Some of these providers may process data outside the EU under their own data protection terms, such as the EU Standard Contractual Clauses.
How long we keep it
- Your account and databases: until you delete them or ask us to delete your account.
- A deleted database, key or connected app: removed straight away from the live service.
- Sign-in links: 15 minutes, single use. Session cookies: 30 days.
- Request logs: a few days, as Cloudflare keeps them.
- Billing records: as long as accounting law requires.
Cookies
We use only the cookies needed to run the site: one for your session, one for the account you're working in, and a short-lived one while you sign in with Google. No analytics, advertising or tracking cookies.
Your rights
You can see, export and delete your databases yourself, through your agents or on the website. To get a copy of your other personal data, correct it, or delete your account and everything in it, email support@databasedmcp.com; we answer within 30 days. In the EU you can also complain to your data protection authority.
Changes
When this policy changes, we update the date above. For changes that matter, we email account holders first.