CPZAI MCP Connector — Privacy Policy

Last updated: March 10, 2026

1. Who we are

CPZ Capital Ltd ("CPZ Lab", "we", "us") operates the CPZAI platform at ai.cpz-lab.com and the CPZAI MCP connector at mcp.cpz-lab.com.

2. What data we collect

When you connect Claude to CPZAI via this MCP connector, we process:

• Authentication credentials — Your CPZAI API key and secret, transmitted via OAuth 2.0 and stored as an encrypted access token. We never see or store your Claude credentials.
• Tool call data — The parameters you send to CPZAI tools (strategy queries, order details, market data requests) and the responses returned. These are processed in real time and not retained beyond standard server logs.
• Server logs — IP address, timestamp, and request metadata for security and debugging. Retained for 30 days.

3. How we use your data

• Authenticate your identity and authorize access to your CPZAI account
• Execute the trading, analytics, and data operations you request
• Monitor for abuse, errors, and security incidents
• Improve the reliability and performance of the connector

4. Data sharing

We do not sell your data. We share data only with:

• Broker partners — When you place trades, order data is forwarded to your connected broker (e.g. Alpaca, IBKR). This is necessary to execute your instructions.
• Infrastructure providers — AWS (hosting), Sentry (error monitoring). These providers process data under contract and are bound by confidentiality obligations.

5. Data retention

• OAuth tokens — Held in server memory for the duration of the session. Not persisted to disk.
• Server logs — 30 days.
• Account data — Retained on the CPZAI platform per your account agreement. Deleting your CPZAI account removes all associated data.

6. Security

All connections use TLS 1.2+. The MCP server runs behind AWS WAF and ALB with DDoS protection. API credentials are transmitted in HTTP headers and never logged.

7. Your rights

You can revoke the connector's access at any time by regenerating your API keys in CPZAI Settings. You may request data export or deletion by emailing us.

8. Contact

For privacy questions or data requests, contact us at privacy@cpz-lab.com.