Privacy Policy

ModGate ("ModGate," "we," "us," or "our") provides OAuth 2.1 authentication, agent identity, and audit logging infrastructure for Model Context Protocol (MCP) servers. This policy explains what data we collect, why we collect it, how long we keep it, and the choices you have. It applies to modgate.io, app.modgate.io, api.modgate.io, and any other service that links to this policy.

ModGate is a developer infrastructure product. We built it with a simple rule: collect only what is required to authenticate agents, enforce access policies, and produce an audit trail. We do not sell personal data, and we do not use customer data to train AI models.

Account data. When you create a ModGate account, we collect your name, email address, and authentication credentials via Clerk, our identity provider. If you join or create an organization, we associate your account with that organization.

Billing data. Payment processing is handled entirely by Stripe. ModGate does not collect, see, or store credit card numbers, bank details, or other payment instrument data. We retain the minimum billing metadata necessary to operate your subscription — plan tier, authentication usage counts, and subscription status.

Configuration data. When you register an MCP server or create an agent identity, we store the data you provide: server name, endpoint URL, description, agent names, and the tool-level scope policies you define.

Authentication and audit metadata. Every time an agent authenticates through ModGate, we log metadata about that event: agent identity, tenant ID, server ID, tool name, timestamp, outcome (success, failure, or denied), request duration, and the originating IP address. This audit trail is the core function of the product and is described further in Section 4.

What we do not retain. To enforce per-tool scope policies, ModGate reads only the tool name from the method and params.name fields of incoming MCP requests. The raw request payload is forwarded verbatim to your MCP server without being parsed into a data structure, re-serialized, or stored. Response content is never inspected. We do not log, persist, or store tool call arguments or server responses — only the metadata described above is written to permanent storage.

We use the data described above to:

• Authenticate users and AI agents, and enforce OAuth 2.1 and PKCE requirements
• Apply the tool-level access policies you configure for each agent
• Generate the audit log and usage dashboards available in your account
• Calculate billing usage and operate your subscription through Stripe
• Provide customer support when you contact us
• Detect and prevent abuse, fraud, or security incidents
• Improve the reliability and performance of ModGate's infrastructure

Audit log retention is tied to your plan: 7 days on Free, 30 days on Pro, 1 year on Team, and custom retention on Enterprise plans. Audit logs contain authentication and authorization metadata only — never tool call payloads or response content, as described in Section 2.

You can export or delete your audit logs at any time from your dashboard, subject to the retention window of your plan.

We do not sell personal data. We share data only with the infrastructure providers required to operate ModGate:

• Clerk — authentication and user identity management
• Stripe — payment processing and subscription billing
• Cloudflare — infrastructure hosting, Workers runtime, and KV storage for authentication and configuration data
• Vercel — hosting for the ModGate dashboard application

Each of these providers processes data only as needed to provide their service to us and is bound by their own data processing terms. We do not share your data with advertisers or data brokers.

ModGate operates on global infrastructure (Cloudflare's network) without a fixed data residency guarantee at this time. If your organization requires data to remain in a specific region — for example, EU-only processing for GDPR purposes — contact us at [email protected]. Dedicated regional deployments are available on Enterprise plans.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your data, including audit logs, in a portable format
• Object to or restrict certain processing

To exercise any of these rights, email [email protected]. We will respond within 30 days. Deleting your account will remove your configuration data (registered servers, agent identities) and stop future billing; audit log records tied to security and compliance obligations may be retained for a limited period as required by law or legitimate business need.

All data in transit is encrypted via TLS. Authentication tokens are short-lived and audience-bound. Secrets, authorization headers, and tokens are never written to logs. For a complete description of our security architecture, see our Security page.

ModGate is a developer infrastructure product intended for business use. It is not directed at individuals under 18, and we do not knowingly collect data from children.

We may update this policy as ModGate evolves. Material changes will be communicated via email to account holders or a notice on this page. Continued use of ModGate after changes take effect constitutes acceptance of the updated policy.

Questions about this policy or your data: [email protected]

Arty Fishall LLC, d/b/a ModGate · 139 W 67th Street, Jacksonville, FL 32208