Last Updated: January 2026
Introduction
This Privacy Policy describes how the iSkiUphill MCP (Model Context Protocol) Server ("we", "our", or "the Service") collects, uses, and protects your information when you use our AI integration service.
Information We Collect
Authentication Data
When you connect your AI assistant to our MCP server, we collect:
- OAuth authentication tokens
- API keys linked to your iSkiUphill account
- Session identifiers
Usage Information
We automatically collect:
- Query requests made through the MCP protocol
- Response times and error logs
- Connection timestamps
- General usage statistics
No Conversation Storage
Important: We do NOT store the content of your conversations with AI assistants. Your queries are processed in real-time and not retained beyond necessary logging for service improvement and security.
How We Use Your Information
We use collected information to:
- Authenticate and authorize your API requests
- Provide accurate ski resort data to your AI assistant
- Monitor service performance and reliability
- Detect and prevent abuse or unauthorized access
- Improve our AI integration features
Data Sharing
We share your data only with:
- Main iSkiUphill Service: For authentication and data retrieval
- Infrastructure Providers: For hosting and database services (e.g., Railway, PostgreSQL, Redis)
- Legal Requirements: When required by law or to protect our rights
We do NOT sell your data to third parties or use it for advertising purposes.
Data Security
We implement industry-standard security measures:
- OAuth 2.1 authentication protocol
- Encrypted connections (HTTPS/TLS)
- Secure session management with Redis
- Regular security audits and updates
- Rate limiting to prevent abuse
Data Retention
Session data is retained for 24 hours. Authentication tokens follow the expiration policies set in your main iSkiUphill account. Usage logs are retained for up to 90 days for security and service improvement purposes.
Your Rights
You have the right to:
- Access your data through your iSkiUphill account
- Revoke API access at any time
- Request deletion of your data
- Export your usage data
To exercise these rights, visit your account settings at https://iskiuphill.com/settings.
Third-Party AI Services
When you use AI assistants (Claude, ChatGPT, etc.) with our MCP server, please note that those services have their own privacy policies. We recommend reviewing their policies to understand how your conversations are handled.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify users of significant changes through the main iSkiUphill website and via email if you have an account.
Contact Us
If you have questions about this Privacy Policy, please contact us through https://iskiuphill.com.